
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: RzZr9nZANmKGvRS8HJbcAKw5gYj4oB99VFzUfyGu46A=
Subject key identifier: 5D:F1:21:38:97:6A:12:7E:48:D4:05:CC:EF:44:92:47:A8:6E:B1:AF
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 08BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 0897
Signing time: Tue 08 Sep 2026 20:47:35 +0000
Manifest this update: Tue 08 Sep 2026 20:47:34 +0000
Manifest next update: Tue 15 Sep 2026 20:47:34 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: 0KIP30JVsIQHOcreYJd89ZHTiMyWG9ZXEzdwAvpaRtQ=)
2: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
3: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 20:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Sep 8 20:47:34 2026 GMT
Not After : Sep 15 20:47:34 2026 GMT
Subject: CN=6aa07466-127b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:8c:18:15:dd:fd:4e:f2:61:47:63:75:04:
89:9b:4a:24:80:9e:8f:49:86:30:ed:71:df:cb:c5:
a5:16:a2:c7:e7:2c:18:4c:0f:d1:48:dc:1e:36:f9:
3d:cb:08:e6:43:b1:8e:a6:fc:73:30:a0:aa:da:89:
31:d4:fa:6b:04:bd:af:32:31:9a:31:2d:ef:4f:16:
90:1d:77:a2:6c:25:49:11:9c:45:d7:2d:2c:0c:03:
31:67:a5:14:a6:8e:77:4a:41:fc:a9:66:0a:22:f9:
e7:25:f4:a9:e1:28:37:ba:47:71:72:cb:b4:76:b6:
bc:d7:4d:0e:ee:df:47:6d:c1:b6:de:73:ce:91:4d:
13:69:99:64:3f:b9:f1:b8:9a:b3:87:c8:87:b7:44:
8b:8d:88:5e:d7:a4:2b:88:45:82:ab:dc:47:0e:0d:
4b:6a:85:ca:d5:58:34:9d:66:ea:48:ae:0d:01:97:
7e:ba:7f:12:e6:af:b1:f8:98:ee:f9:6c:0f:13:52:
d6:58:17:2d:6f:42:42:a1:91:1e:a3:1a:29:fb:cd:
a4:a8:30:47:4e:34:2a:72:ae:5c:3a:84:9f:03:d1:
9f:f4:21:3a:45:83:ea:4d:69:ca:34:1a:d5:8b:11:
8c:ca:2e:6f:fd:23:fd:31:5c:db:41:1f:d2:6c:5b:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:21:38:97:6A:12:7E:48:D4:05:CC:EF:44:92:47:A8:6E:B1:AF
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c3:3b:45:fd:15:d9:e3:0d:d9:03:c0:37:ad:97:c2:c7:c2:
c3:79:15:3e:d8:23:f3:1b:db:1b:ba:8d:31:79:80:34:f1:e1:
36:f5:3c:61:ba:4c:10:7b:af:99:b2:2c:be:12:84:36:38:6f:
da:68:54:17:10:4d:2f:e7:cd:df:dc:0b:bf:38:36:7b:07:97:
82:2f:fc:92:eb:13:ad:1b:63:ca:50:6c:2d:36:56:0c:82:9b:
40:da:79:c2:ed:c5:4c:7b:c3:ef:14:68:dc:93:82:bd:81:c0:
d2:b1:ea:39:78:c3:5e:ba:9a:a9:ce:ce:08:c5:34:0e:47:69:
44:3f:3d:da:27:f9:aa:4a:50:cd:a2:6a:df:98:33:43:11:41:
20:57:10:6a:9a:bc:79:4b:43:75:82:fb:33:17:9f:7e:89:b2:
b9:80:8c:8e:89:4b:aa:56:b6:45:b3:7d:b7:63:97:39:4d:c0:
b4:b7:d2:49:9a:59:ec:02:14:c8:0f:46:8f:58:0c:ed:39:5b:
ad:99:2e:0c:88:36:dd:ea:3b:15:ee:5f:f2:0f:ba:84:2a:53:
14:0a:92:88:59:da:21:b7:90:96:41:7a:02:38:1e:8e:de:a3:
f4:da:07:dd:37:b2:9a:ec:51:c6:38:bd:0a:61:7c:a9:78:6c:
fd:d9:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:24 2026 by rpki-client