
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: SsHH3Xg9RAAZ03jPU1dDyEtmkJ7rvNglHhH4ZvaLmR4=
Subject key identifier: B2:8B:AD:94:41:4E:5D:FA:53:D5:3D:4E:41:3B:DA:1B:EB:11:56:FE
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 08D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 08AF
Signing time: Mon 26 Oct 2026 20:38:29 +0000
Manifest this update: Mon 26 Oct 2026 20:38:29 +0000
Manifest next update: Mon 02 Nov 2026 20:38:29 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: BHK8WIRh+m3DWmD8yuzUfUxd1s4D4ww66hBajqvITSM=)
2: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
4: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Oct 26 20:38:29 2026 GMT
Not After : Nov 2 20:38:29 2026 GMT
Subject: CN=6adfba45-f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:02:c4:48:98:8a:ff:13:c1:a0:24:2a:f6:
bb:06:d9:d2:3a:98:c7:01:7b:4a:f9:d5:d3:bf:68:
22:d1:a2:d5:30:0c:7a:d3:c6:fa:af:84:b1:71:9d:
9b:d8:e7:05:60:e9:bd:b1:f0:de:f5:7c:27:df:7c:
bc:42:1f:1c:ea:0b:9c:fc:98:d6:65:54:1c:d5:fa:
f3:a0:84:f1:71:45:f6:f4:16:be:ae:54:4b:39:ab:
64:a6:f7:b3:49:6c:9a:9d:90:48:6f:8b:a3:88:0b:
ff:8c:f1:75:a4:13:12:07:08:a9:6c:0a:70:62:6e:
4d:15:85:1f:39:aa:04:3f:cf:e9:58:6f:c4:e4:b6:
ef:24:29:40:7f:cf:e3:18:0f:38:fd:25:cc:62:28:
46:7a:23:40:e7:57:c7:11:5c:7f:08:e0:c8:f6:3d:
6d:af:ea:15:b0:df:09:45:59:f0:b8:bf:b9:7d:fe:
62:fb:ca:9b:35:6d:5d:b8:0f:35:05:07:80:cc:4b:
5e:04:0a:d8:6d:28:bc:fb:ea:f3:4d:d6:ed:d1:82:
33:28:02:68:6c:0f:2e:6b:b4:fb:07:2a:0a:70:24:
1b:fc:71:87:25:90:ad:a7:71:ca:17:04:ba:2f:66:
fe:86:f6:94:c3:d0:85:ae:cd:a9:fb:14:2e:ac:97:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:AD:94:41:4E:5D:FA:53:D5:3D:4E:41:3B:DA:1B:EB:11:56:FE
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:41:59:47:d5:a1:75:4f:b0:ed:78:80:b8:85:e7:51:ff:4e:
94:3d:96:cb:57:7e:d0:82:15:c6:12:1f:1b:f4:45:7e:58:c7:
0f:2f:b3:e6:59:d7:ab:79:f1:bf:f5:39:8d:9d:92:24:f7:74:
e9:cc:87:47:bc:43:8e:b8:cf:0b:f9:32:c1:9e:95:0b:2f:1f:
3f:3c:24:32:e2:4a:64:f9:39:f2:3c:45:e7:6f:fc:a1:de:a8:
43:95:84:37:e0:5a:dc:34:5c:ab:a9:20:43:43:34:97:92:75:
65:5c:21:c7:d3:a9:17:a0:28:a3:ef:20:af:df:c4:1e:ca:b5:
6e:55:fd:bd:dd:ab:7f:46:a3:c5:86:13:e5:4d:7d:9e:09:bd:
ed:32:af:ef:87:9b:d5:eb:a5:62:d4:9f:cb:09:ed:d4:ea:f3:
bd:79:69:d3:51:0b:35:fd:0a:e1:b7:07:cf:76:28:6b:61:c1:
36:44:69:64:54:30:31:1a:f4:1c:9e:04:41:70:9e:67:73:f1:
cf:d7:00:99:27:81:d1:7b:c0:b7:59:de:2f:b1:ae:36:e0:71:
5a:2e:6c:03:29:33:8d:81:3b:db:cc:f4:16:e2:c0:f4:36:ed:
26:93:09:57:00:c6:34:12:ac:da:26:fe:12:ca:43:50:6e:a4:
2b:b0:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:44 2026 by rpki-client