
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json)
Hash identifier: gZvdMPCaLglsVTDtlAWlV1kaxUadszUii2vmXL+bH6Y=
Subject key identifier: 9E:19:D4:B9:74:12:E2:9A:6B:54:3E:77:BC:61:AA:33:0C:60:A9:82
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
Manifest number: 0568
Signing time: Mon 02 Mar 2026 02:24:27 +0000
Manifest this update: Mon 02 Mar 2026 02:24:26 +0000
Manifest next update: Mon 09 Mar 2026 02:24:26 +0000
Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: ymGkIW0g84QbwR4vyceNSoAUNGLoa7jUajPY36BJwRY=)
2: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: QpQEr+aD8Qpv2jpbszrfucjyacJLO26lGLjGcWeLIds=)
3: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: 0/hOs1+Gw2kOj/gVSsHXvPp7pFaBfQWH4cxGU9ZxhuY=)
4: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: vfcF0bfj5f7fHhybVhZoEvWXgyU0bcXi3S8IUTcQGcY=)
5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: TVZEMQkioXWbGgb416Q+WbjBATZ2qWj4T5UhR1U0HoA=)
6: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: 0Gbb0BT+CXcDAGbYX1J3w1Q6o3JO49oKQ4hxn8ma1BU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Mar 2 02:24:26 2026 GMT
Not After : Mar 9 02:24:26 2026 GMT
Subject: CN=69a4f4db-4f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:23:a8:da:d7:db:55:73:8e:0d:d1:6b:00:
f7:b7:54:7f:27:30:fe:c8:bf:ed:a9:4f:22:66:5c:
ac:39:0c:8b:bf:23:41:fc:a2:40:dc:1b:40:46:a2:
b6:4f:2c:63:02:e8:fe:9b:31:7e:01:99:0c:33:bf:
b0:7a:99:c0:4a:e4:e0:94:8c:af:15:2d:31:6d:77:
fb:2b:8e:d8:8c:ac:1e:4c:dd:f1:c2:5b:75:09:5c:
e7:f6:33:07:b7:8f:b7:d0:57:a1:af:3c:ba:cc:97:
f2:3e:06:39:ac:d7:19:3e:ca:0c:35:8d:25:df:55:
1c:1b:e2:e1:30:8a:14:64:61:d5:e5:8c:0c:85:44:
f8:5a:b3:fa:2c:05:28:93:48:23:8e:fa:99:23:d9:
d0:eb:cf:66:c4:a5:f9:95:83:bf:ca:04:9d:1b:7c:
8f:99:97:6e:3f:12:12:7f:f0:6d:4a:ef:30:10:64:
c3:04:03:3d:55:64:e2:9b:fe:b5:81:77:ca:65:86:
dd:1f:7a:c3:63:21:24:33:0e:e4:79:05:44:8a:5b:
f6:72:a9:5f:ea:72:ab:a7:82:f5:ac:aa:3c:53:4d:
e5:87:c0:64:47:25:93:c9:d3:27:a9:87:ee:34:9b:
00:60:75:40:5b:e5:14:0e:9f:a8:48:97:cb:d8:e1:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:19:D4:B9:74:12:E2:9A:6B:54:3E:77:BC:61:AA:33:0C:60:A9:82
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:4f:fa:fc:b1:01:b5:3c:d8:ef:65:84:7e:e5:59:6e:75:
50:78:6a:21:c6:fa:66:3c:78:b7:7d:a0:17:2b:fd:68:10:86:
f8:4f:8b:10:db:37:2c:5d:f8:16:64:31:cc:41:17:cd:9a:0e:
98:c9:0e:43:d8:21:fd:c6:31:83:02:8a:82:49:14:0e:0d:e7:
40:0a:47:92:88:61:3f:0e:4e:e0:c7:5a:37:99:ce:a6:9a:25:
e9:56:80:a9:fb:13:ea:77:b5:f1:42:54:2b:44:4c:5f:2e:c9:
c7:4d:f4:37:68:7b:fe:e9:64:5e:96:cd:2f:f8:8e:82:99:cd:
86:20:51:2c:1a:ec:c4:20:a2:38:5c:65:fa:8c:f2:a3:30:ec:
70:c1:ce:0e:c0:fd:59:b1:e0:14:9a:42:c1:8c:d0:58:f5:f7:
03:cb:78:e9:8a:7d:18:0b:1c:24:d5:32:a8:97:66:a4:a3:4f:
36:e5:7a:42:52:76:05:83:3f:bb:25:e0:26:df:83:57:f0:59:
b8:59:2c:c5:e8:d8:8f:20:04:d2:cf:50:15:3a:35:03:f5:78:
e5:35:45:3d:16:64:58:b8:af:fc:a9:f4:83:42:b7:cc:9c:55:
2e:6e:33:4f:7b:15:79:62:b6:76:a1:ba:62:54:5c:92:65:f8:
3e:44:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:50 2026 by rpki-client