
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: +VsPNmmCoQwtIJ1KKvZmISBacbtXW/Y4xGDXKpZIjdo=
Subject key identifier: B7:58:8B:05:EF:DB:39:8D:2F:D5:C1:82:98:37:5F:EF:B9:42:3E:F2
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 02A5
Signing time: Sat 13 Jun 2026 01:41:25 +0000
Manifest this update: Sat 13 Jun 2026 01:41:25 +0000
Manifest next update: Sat 20 Jun 2026 01:41:25 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: Qt00AHVSVWqCR8wyEyRoUAQ0+lm+5oej5IXDHzRFSzY=)
2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Jun 13 01:41:25 2026 GMT
Not After : Jun 20 01:41:25 2026 GMT
Subject: CN=6a2cb545-a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:20:d8:23:24:37:0f:77:d6:f8:45:05:11:
4b:c9:78:da:22:ad:96:99:e5:34:d2:9f:86:71:e4:
d4:db:c5:25:3f:ed:2f:01:40:88:fb:b0:af:ff:c0:
c3:89:62:5e:ff:20:70:e8:6c:46:e7:8d:b8:24:fe:
62:8e:fd:73:73:1c:49:e6:c1:f9:d4:8e:94:ad:16:
95:cb:45:3c:fe:f3:8b:ff:94:ec:de:1a:83:49:be:
98:14:5a:c8:00:00:67:5f:fe:bf:ea:c0:ab:f1:21:
5d:66:f6:95:96:51:ab:df:40:d6:94:61:23:ed:02:
49:cd:2d:0e:10:9b:0c:c8:17:75:d0:22:fd:77:cb:
a8:b8:88:2f:46:af:74:2e:b8:3d:df:01:35:25:dc:
5a:36:60:be:e2:58:0d:eb:79:8a:d4:45:7a:38:fa:
a5:6e:0a:e4:e4:4c:df:d6:66:cd:66:79:1d:07:63:
68:3e:b5:d5:f5:08:cb:f4:11:ec:86:cf:b5:3f:6e:
d3:54:32:29:74:1b:c4:19:42:24:9f:60:2c:b2:51:
e6:88:e4:9f:eb:b5:20:05:9a:95:c5:59:30:5b:65:
d9:f1:3e:7d:8b:ca:3a:7f:ec:16:2c:3a:ca:4d:8a:
fe:6f:46:eb:9f:05:13:42:d7:c6:91:66:ef:75:49:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:8B:05:EF:DB:39:8D:2F:D5:C1:82:98:37:5F:EF:B9:42:3E:F2
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:0b:ae:bf:7b:0e:ff:a5:00:6a:97:51:75:c1:cc:39:52:
e2:fa:0d:b4:bb:1e:82:1f:49:f2:93:05:69:16:53:1b:da:d5:
79:f3:ce:0f:ac:79:1a:59:5b:2f:b7:14:0c:04:02:ca:bb:bb:
9f:af:ee:4a:1c:dc:b2:e0:a7:a4:42:98:59:8d:48:db:8e:90:
8e:9f:ab:bf:c7:83:59:d0:25:97:2e:52:f8:d2:8f:49:06:0c:
45:e9:ed:de:be:07:f7:f7:5a:b6:ae:32:4f:d2:45:18:b8:f5:
0b:0f:53:0b:dc:81:98:f7:d9:b7:b2:7f:58:ba:d2:bb:0d:36:
64:7a:66:60:83:ad:f0:59:c3:d0:66:67:de:d0:84:ed:54:12:
66:bd:a6:b7:8e:39:00:1b:9b:6d:66:88:d2:d0:e7:86:f9:bc:
47:72:e7:5e:5d:86:77:92:b7:e5:c1:82:e3:ce:d3:44:9f:6e:
ab:e3:e4:18:79:43:77:8e:21:50:97:ad:98:7a:4b:c4:2a:34:
65:4b:46:fb:6b:17:57:2b:88:6d:f0:5a:f6:14:93:3e:3d:b3:
21:3f:cb:cc:9a:a0:b9:3e:02:de:01:1b:71:e2:b2:4c:02:e6:
fc:94:ab:3f:99:c1:ba:d9:e6:55:0a:a5:52:7a:25:53:09:a2:
08:3d:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:57:03 2026 by rpki-client