
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier: S2GIykEUO5BaGTAlQ2WiMVNXaBwMSERumple4CkL44A=
Subject key identifier: 20:11:1D:BB:AC:CB:7D:77:1F:03:7C:18:DF:86:FB:07:D8:5D:06:21
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number: 0158
Signing time: Sun 01 Mar 2026 06:01:43 +0000
Manifest this update: Sun 01 Mar 2026 06:01:42 +0000
Manifest next update: Sun 08 Mar 2026 06:01:42 +0000
Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: RA4lUmxyaVItwB5pc0gT58ak64646YVlg/Pg9V0R2JM=)
2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: oPEA+euS8au7/G3eWPC6qnxCCEjdK5yKYosNW4PVWb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Validity
Not Before: Mar 1 06:01:42 2026 GMT
Not After : Mar 8 06:01:42 2026 GMT
Subject: CN=69a3d646-3918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:80:c1:fa:87:4d:26:90:d4:40:42:d4:bb:
4a:d7:97:a2:95:a6:14:30:e8:6d:cb:10:19:93:f7:
6e:99:85:91:b0:f4:01:16:3a:32:4e:03:ee:4e:ea:
1a:87:e4:e5:1c:6b:fe:26:2e:1c:1e:39:da:2a:66:
46:3c:64:10:27:a8:6e:93:2c:af:33:64:5c:09:16:
2c:9a:91:b9:49:79:52:b1:78:42:a7:e8:db:14:46:
b1:ea:d6:62:dc:e4:5f:1c:b5:d7:1c:e9:b6:ff:22:
40:0e:23:25:63:ac:ca:f1:c0:dd:cc:c7:98:82:21:
57:e1:bc:92:35:af:de:c9:dc:d9:eb:0d:91:2e:0a:
d6:fa:d6:c7:fd:78:41:79:2e:81:da:44:af:97:ae:
e7:b4:f6:6a:1d:e5:39:63:ab:24:cc:c0:c6:fc:d8:
8f:58:3f:f3:a5:e1:9d:a4:d9:f5:0f:22:c3:7b:d1:
94:60:d8:e9:c4:ca:bf:a0:9e:96:ab:69:5d:b4:c1:
d5:35:fc:98:6b:eb:7e:f6:ca:3e:f7:80:1c:91:08:
52:71:e8:ed:a0:82:d4:97:8a:4d:c9:bc:55:df:d8:
4c:e8:45:61:78:05:2f:26:e6:ba:68:c8:d6:17:8d:
70:4b:5e:cb:a4:11:eb:57:d8:f7:bc:96:75:ac:f3:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:1D:BB:AC:CB:7D:77:1F:03:7C:18:DF:86:FB:07:D8:5D:06:21
X509v3 Authority Key Identifier:
keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:61:62:9d:4b:3e:66:f1:32:83:ec:4f:c0:7f:2b:4b:0b:52:
62:6b:ea:f4:28:ea:09:1e:f2:c1:94:07:7c:bc:77:f0:e9:86:
17:e1:d9:4a:bb:15:13:a2:3c:95:1e:eb:2d:11:63:0c:77:28:
ad:ec:97:91:14:cb:e3:65:50:d5:c0:2e:d7:c0:7e:d0:93:27:
57:b7:a6:ac:9e:95:ca:50:91:bf:fd:7c:02:e7:95:2f:b0:6c:
6b:20:72:e7:94:68:db:27:12:e8:50:10:1f:97:f6:df:7b:4c:
b6:58:3c:54:cd:15:2c:0a:ac:46:55:65:5c:20:90:59:b2:f9:
28:3e:f6:c9:59:86:db:7c:72:ac:dd:ed:55:25:b5:ab:74:ab:
f5:7f:35:1d:14:b1:71:d3:ce:e4:bf:5b:08:41:b0:25:24:b4:
6f:7b:e8:eb:a9:7b:b5:06:68:43:2b:07:d4:50:20:40:81:02:
af:63:dc:4a:cc:94:9d:ad:47:02:87:3b:f3:c6:5e:11:77:b2:
6d:8e:81:bb:4d:7a:9f:17:20:01:ea:02:c2:dc:1c:c4:58:17:
06:0f:d7:9f:71:66:d5:53:f0:cc:5f:64:0e:d0:83:54:4d:f6:
d1:9e:61:06:1b:e3:3f:3f:68:43:e5:72:ae:ee:6e:47:03:b3:
31:07:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:35 2026 by rpki-client