
$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json)
Hash identifier: g5cLFz3mzCjvg07OSbfOo4WgonIHu7vi4TPATpJFn7A=
Subject key identifier: CA:5F:70:4E:E0:09:89:71:0C:11:25:D6:D3:78:D2:30:09:33:C5:8F
Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
Manifest number: 045E
Signing time: Fri 17 Apr 2026 00:04:36 +0000
Manifest this update: Fri 17 Apr 2026 00:04:36 +0000
Manifest next update: Fri 24 Apr 2026 00:04:36 +0000
Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: 8ws+jf0UJ75SHCUoYtwYn4PKk4OO5J90WIQS5pkou7I=)
2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: 24R9bP8FZGrYS8hzQsfu5XaVnVqMRb0ojEdqSMQzy6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Validity
Not Before: Apr 17 00:04:36 2026 GMT
Not After : Apr 24 00:04:36 2026 GMT
Subject: CN=69e17914-87b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:94:c3:c3:36:7b:e2:2f:6f:f0:65:d5:ba:
68:2e:02:7f:4c:a4:74:32:a9:15:19:6d:fb:7c:6f:
07:c2:6d:0b:78:a9:5a:f0:f3:da:6a:8d:64:31:bc:
e9:38:80:35:2f:98:14:d2:b2:c0:2c:af:7f:bd:ac:
0e:73:70:40:a9:e0:a3:78:99:4e:29:a0:b1:4a:74:
48:a3:87:f9:73:4b:f3:4b:2b:68:bb:7b:50:20:81:
56:2f:71:5f:fc:50:20:55:83:5d:26:7c:fc:4e:b4:
0b:91:45:4c:cf:b2:38:fb:54:f3:bf:5f:1f:3b:63:
20:31:eb:0f:99:24:a5:82:19:82:e8:f9:a4:e3:5f:
78:9a:33:8f:96:69:c7:9b:35:58:83:bb:78:35:95:
92:ad:2b:67:71:6d:b8:42:e6:35:30:e0:30:ad:c1:
7d:94:95:d1:37:67:1d:98:38:b6:3a:d4:9c:b1:08:
47:f5:25:51:56:4f:3b:45:b4:85:99:df:2f:7f:fb:
8b:00:f9:71:13:a7:77:0f:75:7f:65:09:d2:b1:cd:
49:1c:67:84:fe:4c:20:b1:1c:61:8a:14:3b:38:4a:
5b:55:03:98:a5:a9:1b:b8:bd:c8:65:e3:3b:85:b6:
03:c7:ed:9b:fa:3d:d7:c3:34:25:95:dd:13:ee:8a:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:70:4E:E0:09:89:71:0C:11:25:D6:D3:78:D2:30:09:33:C5:8F
X509v3 Authority Key Identifier:
keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:47:c0:cc:7c:0f:14:76:a2:0d:15:1d:a8:d5:6b:6a:b3:
fd:4c:08:e1:e7:98:a9:3c:89:77:4e:9e:91:56:ad:7c:5d:6f:
be:f1:97:8d:50:57:6d:e1:4e:10:27:d5:1d:34:de:d7:ca:5b:
0e:dd:11:14:dc:34:99:ee:19:69:76:ae:9a:e6:26:a7:c7:3e:
ed:8d:8a:86:98:2f:03:b7:19:6a:a1:fc:78:85:a4:da:f5:6e:
f4:35:87:c7:df:07:76:ee:a7:97:f1:a0:d8:8b:e6:ea:da:c4:
f6:fb:4b:77:30:12:2b:09:0d:d7:1d:e5:7c:84:af:5f:0a:74:
0c:a5:6e:8c:42:e9:56:2e:0a:5e:01:8a:37:43:91:1a:04:2f:
ab:2b:2e:4f:ee:96:72:e0:04:bb:08:5c:bc:8e:8b:6a:b6:d2:
6d:da:19:0b:9b:75:dd:be:41:8d:90:ca:48:2a:2e:57:13:65:
ce:b0:68:d6:41:99:a2:d7:40:c9:3e:5f:1e:73:64:ca:20:77:
57:00:71:cc:98:82:a7:58:4a:fe:2b:0e:5a:7d:68:63:fd:9b:
17:93:6d:12:aa:69:ef:b4:f0:3a:5b:5e:30:73:48:ff:d8:f4:
47:d1:61:41:70:fe:94:30:68:bc:04:95:65:1e:d2:39:3b:58:
3c:27:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:37 2026 by rpki-client