
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: 9lMn3JUH4uNBH6tLL9h3GNGf8FyCB5sBfx0nSEHFadg=
Subject key identifier: 93:85:43:D3:4B:82:E0:E8:DE:B4:C5:15:D6:D5:11:F3:71:24:F3:DF
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: 59
Signing time: Fri 17 Apr 2026 07:50:12 +0000
Manifest this update: Fri 17 Apr 2026 07:50:12 +0000
Manifest next update: Fri 24 Apr 2026 07:50:12 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: N7t+UCKM5p3y53+gANNxKEoBKVbo6lpeQAXvO9OPWSo=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Apr 17 07:50:12 2026 GMT
Not After : Apr 24 07:50:12 2026 GMT
Subject: CN=69e1e634-9f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:0e:88:85:d0:84:84:2b:ad:eb:94:e3:d7:
45:8b:3b:0b:a0:2e:a6:f7:6e:71:58:e8:e9:66:78:
57:25:97:c2:98:e2:3b:1e:3d:c3:8a:38:c3:12:3e:
9e:d9:cc:e6:dc:a4:94:e0:73:55:f8:9f:39:ba:f8:
c2:93:ef:06:6d:9c:76:2a:e7:c1:ca:56:1f:a8:3a:
8b:7a:aa:6f:89:86:d8:eb:66:ce:32:f3:78:48:ad:
58:c4:9e:0c:53:d6:70:1d:45:93:fb:45:ca:b3:28:
83:0d:d4:ae:5e:9b:ca:e2:b0:60:7d:6d:59:32:d4:
fe:f0:4f:d4:3e:98:61:7e:0b:f3:74:cf:b8:b2:87:
73:71:69:ce:48:fe:73:7d:b6:a8:76:56:7b:4c:b7:
67:65:4f:7f:a0:19:d5:43:ae:31:b6:1e:da:c3:bd:
a9:29:51:39:42:b7:9c:9a:4f:cd:56:c1:44:e3:fc:
fc:f4:2a:b5:f0:ec:c0:42:ca:63:1a:be:95:f0:33:
ef:ef:ee:2f:d9:fc:dd:ba:8e:ec:47:16:fc:9f:1c:
66:85:a8:3f:d8:4b:8a:68:af:d2:35:2f:4a:ec:f7:
ae:cb:44:b3:2d:c5:54:7f:81:55:69:26:fb:8b:5e:
bc:b1:d8:d2:d9:26:cc:e0:6d:72:46:8e:55:d6:00:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:43:D3:4B:82:E0:E8:DE:B4:C5:15:D6:D5:11:F3:71:24:F3:DF
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:14:c9:c9:43:c4:ac:4e:0f:a3:d0:c1:15:e6:53:72:76:ab:
0e:9e:83:43:21:fb:df:dd:2e:33:ec:24:b8:9c:3d:95:7c:c1:
8b:79:81:7c:7f:83:bc:01:54:47:0f:eb:13:b2:94:df:cd:36:
a9:6c:6b:e9:9e:a4:bf:5d:d1:cb:98:31:7d:13:bc:84:1c:8f:
9a:33:f4:a9:58:1e:81:8e:57:27:a4:06:63:b2:ba:da:8c:9a:
35:b0:8e:b0:9a:37:c5:41:f8:bd:6d:cd:83:5f:b0:80:85:28:
76:7a:28:79:fd:66:bd:8f:55:cc:18:cc:30:cd:68:86:28:78:
6e:3e:c0:59:27:e3:07:1e:72:20:9b:f1:c5:7f:7a:91:3d:a8:
0e:50:fb:55:02:60:21:03:b4:ca:9b:80:09:11:fc:ab:f5:39:
8f:b4:fa:4f:f9:ef:b8:a9:23:22:6e:ac:34:37:e6:1b:92:38:
a2:8f:2a:8d:31:8b:61:01:10:9a:8d:28:2e:33:92:28:06:39:
9a:16:b4:1a:b1:47:1d:96:92:88:cd:5b:c4:4e:95:3b:b3:02:
71:cd:fc:25:1a:60:27:45:3f:71:78:5f:4d:39:09:23:1c:ed:
a6:28:0e:1b:fe:f3:bf:93:b8:aa:ed:c0:0d:d5:4f:69:53:f8:
ac:2b:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:37 2026 by rpki-client