
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
File: oRR-hHvP7urdnompeo2fM2ecp-I.mft (raw, json)
Hash identifier: 6DTpXDAoNL+IB5UaLsJ4/1Z1YfC3mMHZK85SRJGijtU=
Subject key identifier: 20:CF:26:F9:C9:9D:90:52:73:56:3E:69:F1:B5:87:1D:73:24:32:A8
Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Certificate issuer: /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
Manifest number: 0176
Signing time: Mon 19 Oct 2026 05:26:43 +0000
Manifest this update: Mon 19 Oct 2026 05:26:43 +0000
Manifest next update: Mon 26 Oct 2026 05:26:43 +0000
Files and hashes: 1: oRR-hHvP7urdnompeo2fM2ecp-I.crl (hash: fdZxL61Ru47Jc/wdyiO3mCOpL671SSqWDlHh3nRUr0w=)
2: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (hash: QqqXcy0rlKoYg63rZeBH+t86JUXNBkFgw10UvyH6Mls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Validity
Not Before: Oct 19 05:26:43 2026 GMT
Not After : Oct 26 05:26:43 2026 GMT
Subject: CN=6ad5aa13-7b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:57:03:4f:bf:f8:84:35:36:63:11:9b:12:
fc:2a:e7:66:9d:06:4c:36:1b:2f:35:f9:d5:aa:ee:
b3:3a:e1:8c:1b:58:13:b6:45:0b:80:ca:01:32:8d:
ee:f6:f4:3f:e9:15:3e:1f:bf:02:77:09:9b:25:1f:
69:a8:eb:9b:22:3a:9a:76:88:1e:34:7c:a8:ea:5e:
9d:0b:1a:a9:68:7d:95:4d:6e:92:10:96:c6:5a:fd:
6d:a7:19:23:d3:ee:39:03:d7:35:58:1b:9b:6c:9d:
50:a1:a9:52:e1:15:ae:c8:11:67:e0:fb:42:e0:6f:
23:9e:60:dd:9c:85:6b:fe:66:fd:78:5b:29:71:50:
8b:5d:3d:42:3d:3b:70:72:c7:8c:75:90:94:aa:d8:
5a:bd:c9:38:2c:30:26:78:35:0b:bc:aa:71:ad:f2:
07:09:d2:5f:17:f0:2e:38:db:3d:97:4c:2e:d0:01:
03:7d:a8:03:61:85:fe:dd:8c:fe:83:16:6f:25:30:
19:01:bd:aa:2e:a8:45:03:55:a4:b1:07:a6:92:4c:
c6:8f:cd:d2:21:4a:d3:83:71:54:70:4e:fd:55:f7:
68:3d:e8:03:ea:8f:33:29:c2:6d:e2:b1:11:9d:0d:
27:5b:17:53:7e:7a:85:3d:22:79:01:8f:08:ad:67:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:26:F9:C9:9D:90:52:73:56:3E:69:F1:B5:87:1D:73:24:32:A8
X509v3 Authority Key Identifier:
keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0c:78:1e:d4:f5:0d:7f:7c:20:ca:49:1a:34:36:c0:1e:b4:
0e:6b:71:22:0b:fe:44:73:f4:72:49:eb:0f:63:b9:e3:5e:77:
e2:cf:f0:c5:30:f9:76:e4:7e:c2:b6:b6:88:85:74:d7:3a:fc:
59:b7:16:9d:29:73:b3:e4:3c:49:44:01:ee:db:22:da:0d:1d:
67:68:55:8c:bc:3e:fc:bd:97:b7:19:b7:cc:b7:ee:4f:99:4f:
c3:71:0a:27:3d:f0:c0:48:cb:93:20:17:32:85:b7:11:a7:93:
c2:d8:ab:3e:2c:4a:d2:16:6c:76:e6:92:9b:9c:0b:9d:3c:23:
f5:ef:56:a7:7b:c4:1a:77:49:51:2c:1a:10:fd:8a:2f:ab:69:
04:fc:ea:50:73:20:4f:f5:eb:24:47:ba:bc:96:7c:87:68:db:
23:a1:19:f2:4a:1b:d4:ed:a2:3e:7f:bf:99:ad:15:be:60:44:
ae:80:cf:94:19:57:88:2d:cf:07:dd:7c:c4:f0:df:4d:b5:e5:
d2:f1:31:94:ad:c9:d5:89:32:54:c6:a9:0b:7b:2f:98:f3:d4:
59:da:ed:7d:61:eb:6f:4a:77:8b:86:e3:09:b8:51:7f:ef:a8:
80:02:17:57:ff:9e:b6:34:4b:85:06:cb:4b:ee:88:39:47:7d:
42:b1:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:47:00 2026 by rpki-client