
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: KjVWYx0GPKx9wO5gGeojJ/ehH6OTMSsrfXNedavyRsg=
Subject key identifier: 31:F8:20:F4:AA:9C:59:88:FF:A0:DE:45:3A:DE:E4:99:70:F1:9A:06
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 089F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 087B
Signing time: Thu 16 Jul 2026 21:05:13 +0000
Manifest this update: Thu 16 Jul 2026 21:05:12 +0000
Manifest next update: Thu 23 Jul 2026 21:05:12 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: vk8RZkU58MdePsmW0WoRrTi3Xu2rZ/ePkfed4//F/W0=)
2: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
3: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Jul 16 21:05:12 2026 GMT
Not After : Jul 23 21:05:12 2026 GMT
Subject: CN=6a594789-cfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:d8:21:ac:50:26:8f:98:aa:22:af:24:e7:
ac:42:7f:c4:52:e8:ba:0d:b9:d7:bb:73:21:78:82:
28:b3:ec:80:d4:d2:ee:ec:45:d2:4e:d3:5f:d0:35:
d4:d2:74:79:b0:a2:0c:ad:1e:9e:bd:37:f6:94:fb:
3d:b9:69:53:3a:e1:47:91:f0:62:eb:c6:f8:9b:a6:
ca:dc:1b:59:43:c4:c2:23:fb:3f:93:3a:ac:d4:89:
79:10:a1:ac:7a:9f:a1:13:d8:6f:e4:56:84:ce:9f:
e3:ca:25:fb:65:26:d8:ef:79:0b:ff:f5:a3:73:60:
e9:40:04:2c:98:14:90:ff:77:05:09:8e:10:13:e1:
72:41:58:55:99:38:5f:2d:cd:d9:58:22:13:6e:61:
b7:1a:f5:4b:cb:b6:44:6a:5e:ac:d9:26:e6:64:aa:
46:c9:77:7d:00:c4:34:a8:f8:f6:6f:70:ac:4f:db:
95:d1:61:28:62:a4:92:96:4e:c5:01:be:eb:12:c1:
cf:65:6d:a8:70:65:69:c5:cc:d9:4a:f5:41:74:d4:
c0:4a:da:3c:4f:ba:66:2e:6d:bb:4b:94:33:41:af:
8f:5d:f6:51:99:d8:d1:22:98:29:01:ff:a2:3e:ad:
37:6a:70:06:03:ae:db:de:89:db:3b:71:37:68:f7:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:20:F4:AA:9C:59:88:FF:A0:DE:45:3A:DE:E4:99:70:F1:9A:06
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:de:4f:4e:2f:15:21:f9:7f:f3:cd:69:19:a6:ee:85:61:
64:2b:df:1e:97:4c:50:48:e6:60:22:30:b9:5a:92:68:6e:c1:
46:de:87:5c:5d:63:9f:04:5a:03:88:31:94:dd:03:88:27:5a:
6c:49:09:c2:a4:22:5a:35:cc:57:57:56:26:b6:e9:be:67:a2:
9d:79:3e:70:78:2a:8b:b5:57:b1:61:42:8c:c7:25:07:22:10:
81:35:59:d2:8e:16:59:eb:14:f5:66:b5:b1:2f:e4:b6:6d:f3:
52:13:96:9e:03:4b:bc:37:62:38:7c:26:79:e1:4e:fe:17:9e:
26:f5:8c:22:53:9d:06:0a:71:2c:ad:eb:d4:c5:e4:a1:fe:fd:
b0:a7:14:07:b1:ce:e3:07:7a:d7:78:f4:a1:59:d0:1b:54:84:
ef:e6:20:37:51:4e:5d:87:d4:48:07:7f:0c:9d:5a:20:da:bf:
a4:1e:6f:c9:c8:83:85:92:e2:13:d6:17:2e:08:d6:f3:35:70:
d3:4c:db:cb:79:76:9a:04:2c:1c:f0:40:f8:70:35:57:d6:9d:
90:53:f2:73:1c:3d:f4:4f:b9:5e:7e:de:4d:db:71:88:94:78:
dd:d6:d2:78:f8:af:88:a2:87:3c:2f:22:8d:27:ac:32:1a:c6:
be:76:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:04:38 2026 by rpki-client