
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier: lTM+0NZqCj9aOhxtTc5ndWhBP2vzJ5DL0pgX0aUgpiY=
Subject key identifier: 60:E3:B1:7F:1F:E1:6E:0B:44:08:0A:DF:53:8C:77:9B:58:5E:3D:42
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1B2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number: 1AED
Signing time: Sat 28 Mar 2026 16:15:09 +0000
Manifest this update: Sat 28 Mar 2026 16:15:09 +0000
Manifest next update: Sat 04 Apr 2026 16:15:09 +0000
Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: Rnzrk/UFWnGDOsxEy9UxYYf0JmTuhEAcZ98kred9rcc=)
2: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: PvtMMvRNMPGCgPjUomYAzBPP82pQ3wtSPc9J0LkkG3o=)
3: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: fP8rdjghW91d7DBR4Mk+FZBBVOglCuNXIGDqW+k30dg=)
4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 16:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6956 (0x1b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Mar 28 16:15:09 2026 GMT
Not After : Apr 4 16:15:09 2026 GMT
Subject: CN=69c7fe8d-1367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:24:13:37:c9:11:89:69:78:8e:9e:b7:1a:
b0:5c:5d:9d:14:a3:3d:c8:e2:25:66:a4:6d:0d:58:
c4:81:df:25:a4:3d:cb:1b:fc:b5:c6:c8:6b:0e:9d:
65:b3:05:90:51:fc:3f:f2:24:52:a6:82:80:3e:0b:
3d:8d:69:73:91:ab:72:e7:67:52:61:c0:37:65:66:
ad:ba:8e:a2:61:1b:33:7c:39:7c:6d:1c:e9:3b:7c:
ea:62:92:b3:ca:66:f7:7d:45:88:da:18:76:69:e4:
ee:3d:17:ad:ec:83:de:36:38:30:ba:72:60:eb:98:
f2:b4:90:41:5d:6a:8f:19:ed:52:5f:ff:0f:57:c9:
0b:73:d2:23:76:18:d1:f6:d7:eb:c5:f8:f8:c4:cb:
21:2b:5d:fa:59:51:a2:33:f9:09:93:05:e0:52:e1:
71:c3:75:3e:08:22:33:1b:4a:3e:c1:56:4a:59:19:
a6:6b:cd:03:a9:1b:14:82:13:6b:92:6c:15:b8:1c:
7f:6e:13:d6:12:f8:d4:bb:73:b2:da:7c:ce:b2:e1:
e6:d5:f5:84:71:47:6d:6b:f3:97:53:53:76:ab:ef:
d9:1a:b1:3d:3b:f0:ec:19:eb:a9:76:2b:63:1c:77:
e0:49:39:f6:f8:0c:bb:8b:b8:cf:b2:a6:d9:b1:e2:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:B1:7F:1F:E1:6E:0B:44:08:0A:DF:53:8C:77:9B:58:5E:3D:42
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:85:e2:33:86:f5:6d:25:b8:10:ec:82:dc:f9:9d:a0:81:
ce:72:57:54:ad:3a:0f:ea:e5:88:37:0d:97:85:c2:23:37:bd:
e6:97:a8:98:82:1b:e1:e1:de:18:33:db:7a:11:38:4f:58:8f:
b0:c3:fb:f8:85:64:10:54:34:3a:d9:f8:42:d8:51:23:a2:cd:
26:f6:09:8b:21:5d:f2:a0:fe:2b:b5:22:dc:2b:d0:6e:0e:67:
e4:17:44:69:f7:9c:24:f0:35:0d:72:44:ad:80:55:c6:98:1c:
c4:cc:a0:b2:6d:f5:ca:7f:1a:8f:1f:a2:a8:b9:b2:bd:0e:5b:
d2:e0:e5:01:b1:b2:19:db:f8:d8:83:5d:81:ef:4a:e8:aa:f5:
cb:4b:6e:3d:15:0b:68:83:91:9e:cf:30:77:28:77:60:67:6f:
e0:1b:8a:bb:66:c7:fa:b6:92:ed:c3:a4:c8:b8:93:a4:c9:37:
19:0e:75:58:fc:96:7e:f6:b6:cd:f6:2b:7c:1d:19:55:eb:ed:
5a:51:9b:6f:59:62:34:c7:12:03:07:a6:33:7f:57:ff:64:99:
25:cc:64:d9:45:ef:14:1c:30:a1:9a:63:41:6d:58:95:9e:a8:
f5:f4:44:10:42:76:4c:0b:29:ac:56:44:44:ba:c6:f6:9f:4c:
73:24:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:26:05 2026 by rpki-client