
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: 5b5B7UwNPodlXUHwQtjSt+4choqr6FS477ML18q2hLc=
Subject key identifier: 9E:AA:C2:A1:1D:8F:25:9B:F7:C7:DA:C6:6B:4E:85:E2:73:F4:30:8C
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 02A1
Signing time: Thu 21 May 2026 01:39:16 +0000
Manifest this update: Thu 21 May 2026 01:39:16 +0000
Manifest next update: Thu 28 May 2026 01:39:16 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: 2E5+to5kuMqVAbJBGeYHfGUyB3DK+jSvfiw4ugIsUts=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: pGBNoZVQ4x9HykZ/w/nfYdiBRr1XcTrcOsgRSH1bWes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: May 21 01:39:16 2026 GMT
Not After : May 28 01:39:16 2026 GMT
Subject: CN=6a0e6244-4103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:6c:57:d9:7b:a5:06:95:09:5c:9a:15:f8:
4b:b5:85:4f:66:0b:2a:8c:b7:83:1d:05:81:c0:7a:
ed:8b:40:a7:e3:a0:f6:6a:98:d7:09:cd:5c:c8:b6:
90:27:79:68:2d:b8:3e:d5:7b:60:13:17:ee:56:29:
c5:3e:75:7d:82:74:0f:f6:79:38:1c:cd:43:49:ba:
fb:b8:2c:e1:8d:0d:19:4d:94:d3:64:96:55:b5:02:
fb:3b:1c:2b:fd:b6:8d:4f:7e:5c:fc:53:34:8a:5f:
1f:55:55:14:5d:ab:6e:9e:ab:e5:58:b5:08:26:e8:
1d:c5:e8:c5:ad:79:20:5f:e5:96:c5:ed:a5:b8:d0:
c2:85:62:fc:00:7e:76:63:8f:1f:64:f0:aa:ba:26:
c6:86:da:03:0e:c3:c6:f9:8b:2d:5f:0d:53:78:f3:
33:a3:08:12:3a:70:9e:bc:77:35:9a:59:f3:48:8a:
7c:5a:57:32:a1:1b:9a:fc:62:d4:6d:92:b6:54:43:
8d:8b:dd:13:58:5a:c6:d8:0d:a4:9d:5e:3a:a2:92:
16:bb:65:40:66:35:83:77:59:f7:de:03:cc:c4:89:
01:20:e3:8b:02:45:f1:29:a4:37:1c:4c:b1:5f:54:
6d:b3:7a:0e:fe:80:f3:c5:7c:fa:be:32:a6:f9:16:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:C2:A1:1D:8F:25:9B:F7:C7:DA:C6:6B:4E:85:E2:73:F4:30:8C
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:54:cd:e1:a4:0b:bf:80:79:3e:d5:9c:eb:01:c0:62:49:
5f:44:18:7a:2a:e0:ea:87:06:42:bd:1c:3b:47:f9:f3:4b:94:
6c:26:d4:e5:57:4a:04:6b:44:a2:ea:9e:9d:68:d8:a4:ef:52:
7a:c2:6c:c6:74:b3:5d:bb:38:9c:65:ee:50:bd:44:ee:c5:70:
a8:1c:be:e5:f0:56:c3:28:c1:3a:8f:cf:b6:70:48:bd:73:15:
66:90:f3:98:6c:dc:31:d0:ae:0a:41:a3:a7:16:ae:44:7d:7b:
3f:fe:9e:6d:0d:10:c3:92:95:6c:03:f0:78:6a:49:a9:2f:39:
22:e4:e1:ac:f0:ed:2e:26:07:b7:9e:ff:7c:fc:4f:9d:c9:2b:
04:1b:ae:6c:60:25:be:d6:2d:c8:50:ee:4d:79:93:72:86:33:
3c:32:c5:52:6a:45:4f:50:54:92:12:c8:03:78:b7:5a:01:4a:
49:1c:a1:fa:85:59:f1:60:06:61:36:7d:31:98:29:79:a1:80:
85:da:bc:db:67:b4:2a:30:2e:9e:f2:1a:eb:59:9d:f0:8c:98:
62:35:6a:ec:2a:c3:65:29:80:aa:9f:02:a1:6e:fe:7b:57:aa:
b3:3a:09:65:20:13:61:dd:dd:e4:95:16:1d:23:76:10:ef:f5:
31:0d:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:11 2026 by rpki-client