
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier: OUQHMFjkRHS104CYkO7Pn22UcwSZeS7sutUpKxtM+c4=
Subject key identifier: 32:BC:81:E8:0A:33:68:AC:86:06:2C:FB:0B:31:64:FF:1F:BE:4C:AE
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number: 01C1
Signing time: Mon 27 Jul 2026 05:48:25 +0000
Manifest this update: Mon 27 Jul 2026 05:48:24 +0000
Manifest next update: Mon 03 Aug 2026 05:48:24 +0000
Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: SNT6n+DwF/RCIgFEr2ty7jdUofTo1fCwaObKJE5vsgg=)
2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=)
3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=)
4: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Validity
Not Before: Jul 27 05:48:24 2026 GMT
Not After : Aug 3 05:48:24 2026 GMT
Subject: CN=6a66f129-dcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:76:7f:a6:ab:73:b3:2c:b1:d7:36:81:f8:
1b:c7:9d:fa:ae:22:78:c3:f4:6b:d8:8e:3f:b7:f7:
ce:c3:84:2d:d9:ba:88:0a:8a:81:c9:a9:7e:b4:52:
69:74:df:97:da:14:c4:44:9c:d5:0a:a0:cd:14:cb:
56:a6:d8:c9:5d:4a:a5:a6:3a:28:76:cf:82:49:3c:
5e:a4:de:49:cc:69:0d:49:12:c4:04:c0:0e:03:f7:
b5:e7:55:d1:fe:60:1c:b2:33:49:48:82:1c:f2:f0:
a1:dd:0f:24:26:72:cd:f1:20:47:b6:4a:86:14:af:
12:35:df:d6:4c:b9:41:dc:2f:e2:45:f4:55:e2:62:
0b:c9:b8:fc:49:aa:0a:8a:36:12:5c:f2:47:44:9d:
df:12:82:5d:71:63:27:81:88:37:64:57:5f:fd:99:
06:14:8a:f9:32:5a:1f:d0:04:b3:3f:ea:ac:ab:95:
b0:c3:e3:6b:25:7f:b8:6d:45:7e:62:2a:77:f5:e1:
e1:85:c2:37:9f:18:98:ab:1d:a8:e8:ff:ba:cb:1a:
4f:a4:0a:9e:f4:24:78:68:83:9d:55:ec:e1:7b:bd:
d3:d6:93:94:47:31:2f:92:d7:0d:5b:a0:1b:54:fb:
ac:16:b2:77:9a:e4:18:48:2b:aa:51:d7:63:ff:62:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:81:E8:0A:33:68:AC:86:06:2C:FB:0B:31:64:FF:1F:BE:4C:AE
X509v3 Authority Key Identifier:
keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:9c:42:d4:ba:c4:17:70:6e:1d:b3:12:47:3a:97:e9:f7:
a3:52:d4:16:b2:a2:a7:0a:24:6e:d2:5b:5c:bb:49:5f:ee:b3:
de:ce:5d:e3:30:8e:1f:95:1c:1c:38:4b:4e:89:8f:99:60:77:
31:de:3e:2e:9f:08:61:09:77:e5:f1:e7:38:3a:5a:16:7e:c4:
c4:82:08:c9:0b:f4:51:6f:33:cc:c5:37:ca:3a:c4:dd:b3:b4:
50:0b:3d:45:b6:eb:fa:4e:03:40:dc:61:9a:02:e3:54:a1:7f:
77:93:40:c1:54:cf:39:e9:96:48:98:aa:7b:57:ac:e4:99:85:
57:05:fa:eb:16:53:57:d2:b2:2c:de:23:f5:bc:00:e8:fb:45:
64:21:f8:7c:10:09:ff:e9:d2:7c:b6:10:7f:c7:33:78:8c:fa:
3b:8e:13:94:9b:b5:20:14:cd:b3:9f:37:44:20:2d:12:00:0c:
61:d5:c8:22:d3:54:6e:48:26:cc:87:dd:68:1e:cb:1a:2c:8f:
ce:a0:38:5b:86:79:18:7b:82:db:dd:bc:fe:29:35:29:3a:41:
6c:2e:62:63:d6:f8:c9:fe:58:f4:d3:2a:e8:ab:99:bb:a1:3c:
42:37:2f:81:45:54:d6:e9:89:e8:67:b5:5c:86:3f:9e:7b:a8:
37:75:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:40 2026 by rpki-client