
$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json)
Hash identifier: vrgatq1Txuew5rEAK567rf+eAEux7etwnMc5JXq0gUA=
Subject key identifier: EA:95:14:34:5A:03:1D:E6:4F:89:09:3A:F4:7A:3C:4F:EA:71:BB:EF
Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
Manifest number: 36
Signing time: Sat 13 Jun 2026 08:40:49 +0000
Manifest this update: Sat 13 Jun 2026 08:40:49 +0000
Manifest next update: Sat 20 Jun 2026 08:40:49 +0000
Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: qRRzLiq9rX9VNeCL1GHnbLaKrytNH0Tvjo6t++2jeSA=)
2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Validity
Not Before: Jun 13 08:40:49 2026 GMT
Not After : Jun 20 08:40:49 2026 GMT
Subject: CN=6a2d1791-7405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:0b:3b:ab:d3:e9:fd:6d:1e:0a:dc:18:d5:
2a:27:bf:16:62:ac:07:c6:02:25:fa:1c:5c:6e:ed:
4e:ac:93:f1:5c:d6:a6:24:ad:e9:6e:27:ae:8e:52:
72:9c:c3:f8:02:de:6e:eb:e7:14:ac:4b:a8:aa:b4:
f9:19:9e:b7:7c:cc:54:5a:77:f0:87:37:8f:50:50:
67:b0:54:01:bf:29:e4:36:43:d0:57:ba:36:0f:b1:
3e:97:c3:31:cd:8a:85:24:ab:88:72:ab:46:3f:f6:
f8:f1:f8:04:0a:5b:9c:84:f2:06:81:03:82:e3:88:
f9:33:e7:69:24:62:01:71:5f:b8:be:62:7f:cb:11:
fb:e4:54:ed:e9:4d:a4:58:da:6e:fd:e9:57:3c:f6:
8a:9a:0b:f8:13:81:ce:11:e9:de:a8:a7:41:f6:6a:
99:a1:2b:fd:a2:b3:ef:3a:5d:7f:8b:ec:c5:fc:bd:
19:55:9f:69:97:96:18:3b:4d:9e:f4:17:54:94:30:
f5:d5:43:b2:eb:7e:64:35:67:ce:3e:aa:30:40:0a:
6e:f2:2a:12:cb:78:6b:62:64:2c:60:25:96:28:d5:
08:a0:a4:4e:d8:4a:ab:a8:ec:6a:73:f0:50:92:ee:
b3:f6:81:39:22:28:d7:99:c2:2f:68:3f:96:fc:2b:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:14:34:5A:03:1D:E6:4F:89:09:3A:F4:7A:3C:4F:EA:71:BB:EF
X509v3 Authority Key Identifier:
keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a1:94:5e:06:ea:c8:4c:60:4f:74:da:59:da:b3:12:18:14:
90:4e:04:79:14:be:0f:e5:9f:b3:03:33:93:a2:38:4e:ce:a9:
2b:9c:d2:a9:9b:7b:99:36:20:04:ad:14:8d:b6:7a:53:3c:65:
24:ce:01:ef:22:77:bd:db:f7:73:2a:fc:3a:fc:72:71:e3:29:
46:dd:39:84:b4:a6:19:37:3b:68:00:4b:63:0b:cf:84:ef:40:
a5:ed:58:64:0a:46:27:9f:42:0e:9d:7f:7a:53:ed:22:c4:91:
47:7c:81:6a:6b:7d:69:6f:f3:6d:19:4c:db:04:7b:f5:5d:37:
71:29:a3:37:c0:e9:44:fd:49:79:d6:44:82:eb:a3:2a:29:c0:
95:98:12:dc:7e:9c:3c:69:f7:fe:b5:28:aa:7e:d8:70:75:6f:
03:65:c7:ce:d8:2b:de:ca:76:4e:c4:24:b0:40:8e:2e:e1:52:
fd:62:41:54:9f:5b:2f:ed:d7:50:d5:28:00:dc:30:76:fe:b7:
45:8d:93:0c:5e:26:9e:85:b6:7d:6f:cc:3f:e6:07:33:ad:db:
27:67:40:de:eb:11:8e:d5:93:a7:f9:08:85:a4:18:92:e1:c9:
25:3a:50:75:0b:23:18:bd:b0:d2:99:c0:57:22:e8:49:de:92:
e2:ee:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:13 2026 by rpki-client