
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json)
Hash identifier: XE9kbZrr1PGFoYMhVL5MfNvGIyBQhw4paaJwRqP8FJ0=
Subject key identifier: 6D:ED:71:B9:D6:4D:32:77:46:6E:91:15:0C:58:62:64:50:36:07:DF
Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
Manifest number: 0145
Signing time: Wed 07 Oct 2026 06:04:52 +0000
Manifest this update: Wed 07 Oct 2026 06:04:52 +0000
Manifest next update: Wed 14 Oct 2026 06:04:52 +0000
Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: 9izzpD0O8fc9SBaWW7ECRJn9z/zwcuG3ZLwUIhgOMiA=)
2: 965254F8278811F09217002CC4F9AE02.roa (hash: 0RhsOifNGasCmCxCAJFq65+7Iqu3gbPwoj7AcEDMVxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Validity
Not Before: Oct 7 06:04:52 2026 GMT
Not After : Oct 14 06:04:52 2026 GMT
Subject: CN=6ac5e104-2090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:31:8e:ce:21:9b:6e:b8:e7:bc:a5:69:87:
41:8b:a4:31:41:ec:8a:be:1c:b6:11:81:6f:c6:97:
02:62:2e:d8:c3:c8:9d:a8:a5:39:f4:e7:25:29:bf:
52:34:81:8c:be:7f:e9:01:50:df:35:4c:c3:04:63:
ad:cd:22:da:24:7e:bc:f1:7c:90:40:3a:c7:30:6a:
2f:e4:4b:91:52:40:80:f0:8e:79:d3:17:2b:b7:37:
0f:ee:ce:57:aa:4a:0b:b8:f4:7d:9b:b9:b2:c8:00:
3c:56:5c:34:a9:8a:f4:69:81:ad:2d:34:1a:98:5f:
bd:39:47:52:30:0f:44:b2:c9:e0:ce:c9:c7:68:68:
42:e0:12:f0:42:30:b9:c9:ab:ef:0b:df:de:16:34:
51:4c:36:ff:df:a5:5d:f0:a5:35:65:05:ef:d7:08:
fc:e4:08:a1:76:d2:b0:21:e0:7d:4d:33:79:d1:6c:
0f:07:54:5b:5a:4e:9a:a7:68:90:f5:64:e3:b5:d2:
50:a3:3e:0c:67:42:21:fd:0f:74:1a:5c:b8:c0:30:
db:08:14:5c:04:db:fe:2c:ad:2c:50:e4:28:24:4d:
99:9e:72:fb:5d:63:d4:7b:7c:01:45:2d:cb:74:91:
d5:8b:8f:d8:8c:63:a4:be:be:a5:cb:f1:47:0e:16:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:71:B9:D6:4D:32:77:46:6E:91:15:0C:58:62:64:50:36:07:DF
X509v3 Authority Key Identifier:
keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:92:5d:ce:e3:c8:63:98:7f:cf:52:55:22:ad:62:01:ae:
84:4b:f6:e8:28:d6:8f:74:b8:9b:3b:8d:d5:6f:90:c7:99:ca:
ec:54:66:39:50:07:df:2d:19:62:d1:92:c0:4f:4f:88:35:aa:
52:ab:f6:b9:b5:55:ec:c0:3e:d7:c8:1c:96:77:3e:a2:fe:4f:
b1:5e:c6:21:38:21:25:49:16:39:15:c5:51:92:68:b3:4c:d3:
f7:43:4d:77:78:bb:c1:b9:47:38:72:e6:c9:ff:95:53:2a:34:
40:30:ab:f1:ce:7a:4e:4e:68:18:9b:1f:4f:a0:95:d9:ff:e9:
11:73:d6:1e:cb:9d:7e:1b:ca:d6:92:db:5a:c8:8d:9c:7e:8f:
e8:38:13:61:06:17:6a:8e:46:7d:8c:73:f3:e4:a5:ae:ee:42:
d9:61:31:2d:e0:ed:71:5f:a5:b3:8e:66:d9:c1:02:f8:6b:16:
5b:9f:9c:fc:19:b9:da:8e:8b:8b:6d:9d:82:89:ac:57:0b:df:
4e:8d:1b:cb:15:da:d0:3c:68:87:2b:f2:4e:1f:e3:a5:7e:49:
ec:d6:b7:dc:75:35:3f:a4:17:0c:e4:0f:b3:3e:dd:95:3d:6a:
2b:5f:b3:f7:c9:1f:80:78:9a:00:29:18:b3:f5:ef:1a:56:07:
59:f0:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:00:39 2026 by rpki-client