
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json)
Hash identifier: BZx5hBAzBaFd3wX6wCStwmjw1PjW99aecApAqiS02AY=
Subject key identifier: 8F:BE:18:F4:C3:9B:4E:EF:E2:59:BC:21:93:DE:F8:36:98:96:E9:10
Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3
Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
Manifest number: 98
Signing time: Fri 17 Apr 2026 07:07:33 +0000
Manifest this update: Fri 17 Apr 2026 07:07:32 +0000
Manifest next update: Fri 24 Apr 2026 07:07:32 +0000
Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: cqkRPQGnvV6eLxbrBhB2gX9lX+7B2Vxh6/01pKYGqPw=)
2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: vaeeD9A4QxOANnmAmiWS0iabhsevE39S0swYTABF/54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl
rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3
Validity
Not Before: Apr 17 07:07:32 2026 GMT
Not After : Apr 24 07:07:32 2026 GMT
Subject: CN=69e1dc35-129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:8e:45:6f:98:af:92:59:b2:4b:51:16:83:
7c:86:ea:e0:de:9e:69:c8:6f:e8:6d:e9:c5:e5:dc:
5e:93:a0:7e:97:ab:1a:fc:10:0b:1c:4b:73:99:86:
e2:be:f5:80:17:03:c8:93:7d:91:f8:7c:bb:e5:3e:
a0:41:86:92:99:57:51:80:f7:6c:27:02:c6:4d:76:
fa:88:0d:c0:12:27:8c:a3:ea:71:4c:c8:93:8f:d8:
22:1b:ec:ed:51:55:26:1e:8a:e7:14:99:36:e9:27:
90:44:d3:9a:b1:b2:1b:fe:f4:4b:10:dc:82:6e:28:
e1:04:77:89:b7:61:33:76:1d:64:0a:16:c4:fd:1f:
ef:d8:9b:58:c1:29:de:e0:8c:5b:f8:a5:68:51:31:
8e:c5:58:cc:0c:37:b0:c8:59:9e:b0:c3:54:f7:24:
64:b5:e2:6e:90:fe:6b:31:68:b6:e0:de:76:27:12:
4a:0c:a2:c2:12:85:58:4e:b5:b9:ab:c1:9c:19:ce:
6a:3a:6c:26:a1:92:53:25:f1:14:28:8a:09:56:48:
1a:56:ef:b4:1b:13:45:e7:af:43:62:3c:14:6e:53:
cb:f4:10:4b:1a:b4:8d:dc:a6:f6:60:75:12:2b:d3:
bd:04:b8:37:1b:f9:65:59:05:3a:6e:06:f2:45:2c:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:18:F4:C3:9B:4E:EF:E2:59:BC:21:93:DE:F8:36:98:96:E9:10
X509v3 Authority Key Identifier:
keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5b:c0:ca:83:89:c2:5f:a7:88:21:da:89:4b:bf:9d:49:9d:
4b:44:8b:12:a8:9d:5b:ce:21:5b:81:4b:a5:1d:61:9b:e5:34:
fb:1c:d3:99:c5:b5:c1:fe:a6:48:10:6b:3e:6e:8e:0c:c4:ca:
b7:69:16:97:7a:eb:23:8e:45:1b:9d:6f:a8:32:12:37:df:96:
b9:26:32:82:cb:72:46:ab:7a:0a:a7:ec:8a:33:4b:a9:c6:72:
bf:3f:e7:98:36:bc:c5:22:d8:9b:be:f0:9a:3d:45:59:f0:1f:
46:59:74:93:0d:09:b7:3b:55:0e:02:28:c9:98:e5:be:d6:da:
e8:c5:47:7e:9f:90:7c:3f:cb:d8:b9:2e:f1:a1:dd:ee:bc:d5:
d8:7d:12:ba:cc:f0:c1:05:c5:e7:6d:40:aa:e3:c0:49:3d:d9:
7e:79:f2:50:03:64:25:f4:b7:88:c6:67:75:61:8d:2e:85:58:
6f:7f:39:57:32:af:cd:93:93:94:28:36:ff:8f:1b:04:34:f2:
2f:4e:72:dd:b7:02:78:78:fb:17:e6:c0:6e:69:01:51:46:33:
1f:31:5d:99:0a:16:02:49:54:64:c4:34:4b:be:b7:d6:5d:c0:
f1:01:fd:2c:97:8f:b4:8d:20:2d:31:0c:55:f2:6b:35:29:a5:
de:c8:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:34:26 2026 by rpki-client