
$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier: w8aBXbjkAb7r45gsBTublceaLhG//UWFEpZyyBOHDOE=
Subject key identifier: C0:6C:7D:E4:55:B0:D0:A1:E8:00:CE:CF:59:8B:98:D6:D0:94:7C:C0
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial: 070B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number: 06FD
Signing time: Sat 28 Feb 2026 22:27:58 +0000
Manifest this update: Sat 28 Feb 2026 22:27:57 +0000
Manifest next update: Sat 07 Mar 2026 22:27:57 +0000
Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: F9xxJw0gxGfm9BkE8Rv+DQb7GjCFLOeachL6LziLPYY=)
2: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: rBuNfeeoduUd1I0NoD4IRcILjNn1S7GUQ8XAggSqgBo=)
3: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: Tn4IiKC/ehOcHKqem3Io6ZVpsXPRVKGONn1yIt6QObo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Validity
Not Before: Feb 28 22:27:57 2026 GMT
Not After : Mar 7 22:27:57 2026 GMT
Subject: CN=69a36bee-85c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:ba:fe:9b:ca:b7:74:19:70:5e:c0:bc:b8:
5e:77:20:4c:03:e7:78:95:08:2f:13:83:46:2e:0c:
63:e3:67:f0:5a:b3:88:ad:db:f5:a9:4b:e4:c4:43:
2a:44:cd:8b:82:30:18:f3:24:95:19:9f:5b:f7:45:
26:10:7b:e5:d3:c1:d8:13:0e:20:7f:82:6c:17:7f:
6d:00:69:c5:2d:95:ac:2d:8e:07:61:c9:b4:72:79:
3a:73:45:20:e8:03:71:37:83:44:88:32:ee:b0:51:
69:a2:13:f8:14:25:50:94:c2:6c:52:48:b0:06:bc:
a8:d1:79:05:d1:0e:a6:2f:68:44:85:36:06:a1:77:
f0:84:6c:69:b6:33:b7:c8:2e:0a:12:b9:7a:cb:0e:
f8:48:cc:10:ab:c0:c2:dc:a4:35:2e:41:b1:75:e2:
7c:3e:d0:a5:87:b3:4a:b1:2d:b3:84:7d:ec:65:eb:
fc:17:6e:e4:41:95:7c:37:a2:73:f6:75:b9:39:19:
82:c9:a9:b5:56:96:29:68:a5:43:fc:d5:6c:6f:c1:
5d:85:f0:bd:a7:be:ae:5e:bd:c8:7e:80:33:5f:a0:
30:09:94:f4:08:3e:76:29:37:e5:fd:f5:0e:9f:4d:
1d:cf:9a:ae:ca:96:58:2f:a5:17:9f:a7:0a:d3:e6:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:7D:E4:55:B0:D0:A1:E8:00:CE:CF:59:8B:98:D6:D0:94:7C:C0
X509v3 Authority Key Identifier:
keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:1f:a2:cc:ba:fc:0b:d5:ad:5b:66:0e:2a:38:36:db:12:
c7:8e:40:b7:4d:b0:47:4e:10:1e:22:2c:4e:cc:62:fd:bd:a2:
26:9d:3e:f5:60:c4:89:ea:ab:ad:f7:a3:a5:15:b0:82:43:e6:
9a:a2:ce:92:72:c7:98:3f:0e:38:56:99:2b:7d:99:d1:2d:b5:
2d:f1:9c:c1:38:40:35:3a:8b:32:e0:1f:89:ff:67:e8:a3:3a:
cb:5a:b6:a0:c2:40:cd:99:49:a8:cb:3c:43:8d:4c:c4:cd:fb:
27:7d:f9:66:ab:56:25:42:23:44:fe:ce:b6:67:ae:e5:2e:9a:
0b:76:cb:33:11:6b:6a:be:4a:2a:7a:f8:e5:4f:df:25:60:b5:
ad:d2:ec:ed:8b:72:d3:e1:70:1e:3d:41:9f:d7:0a:e3:9f:0e:
6e:2c:b5:be:24:84:44:85:e3:28:8b:18:1e:6c:96:bc:3c:c1:
8e:05:1c:00:69:05:62:79:c8:2b:9f:df:5b:33:50:06:38:74:
21:6d:6b:d3:79:db:f6:cd:3f:0f:2b:4d:43:eb:0b:3e:5c:b5:
1c:b7:5e:40:39:de:78:71:10:73:40:33:52:80:bb:96:1b:29:
78:2d:94:d1:75:2f:9b:ae:90:e8:db:64:d3:63:3f:b0:94:d0:
d4:80:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:01 2026 by rpki-client