
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json)
Hash identifier: MyBw4LL6riQvXaAQCM7ImVSA5hAG+XGdO/u/R0Zq7Z8=
Subject key identifier: 9C:B0:8E:5E:98:47:C3:97:85:75:85:BD:B6:21:84:D0:54:BD:CE:D6
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
Manifest number: 013A
Signing time: Wed 29 Jul 2026 07:03:17 +0000
Manifest this update: Wed 29 Jul 2026 07:03:16 +0000
Manifest next update: Wed 05 Aug 2026 07:03:16 +0000
Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: TWHNqMZrudAan0T0Jw4pEtDS7NcIWELN83+zg1rdBPg=)
2: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=)
3: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Jul 29 07:03:16 2026 GMT
Not After : Aug 5 07:03:16 2026 GMT
Subject: CN=6a69a5b5-6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:1e:3c:c5:5c:56:cc:96:8c:bf:8b:99:08:
8d:84:17:e0:af:7f:d5:ba:99:c4:08:96:af:9d:8b:
97:3b:50:67:87:0e:cd:71:39:12:c9:a7:29:f7:d2:
f3:02:e4:cf:f9:15:e1:90:52:64:60:b5:7c:ec:3a:
cb:02:2b:f6:87:d5:91:cf:17:ac:43:c6:30:fe:67:
14:57:0e:46:b2:57:7a:e0:d0:6c:90:86:49:66:9e:
b4:4d:ab:80:f0:0c:49:5e:63:62:a2:3e:06:c4:d0:
e9:79:25:22:f3:e4:2d:44:c7:c0:6e:c2:36:c8:64:
12:5f:a0:6c:0e:4b:3b:01:44:39:53:ba:2f:72:7a:
44:9a:48:69:02:b9:2a:08:b9:31:92:3c:4d:16:3f:
19:5f:49:20:30:85:c7:45:2b:3f:cc:0b:90:64:45:
89:c4:cf:db:3b:92:b3:ca:db:d4:4e:e0:36:f8:c0:
07:8d:a1:20:e5:1e:da:9e:3b:a5:03:86:02:d8:7d:
4a:88:97:b8:b3:24:f6:d5:dc:42:d1:b9:21:44:8f:
2c:9a:9d:24:ba:e6:f8:52:0f:89:ef:10:54:6a:c2:
53:4d:fe:e2:30:3f:fe:0a:ce:38:ce:c9:4d:52:6f:
83:e6:7f:a4:4f:e0:44:88:ff:bb:54:60:ea:4b:bd:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B0:8E:5E:98:47:C3:97:85:75:85:BD:B6:21:84:D0:54:BD:CE:D6
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:85:4e:6c:f8:0c:74:ec:e5:a3:1f:2d:71:ce:71:6c:47:1d:
2e:7f:ec:88:11:47:5f:d6:bc:84:8e:78:60:f6:91:c5:39:6c:
cb:05:6e:84:c1:02:db:dd:13:47:cf:59:68:a1:fb:3c:de:7c:
10:ea:bf:1d:47:31:a3:27:a2:7e:99:c2:1b:2d:ec:b3:61:30:
1c:01:36:b8:b8:67:6b:ef:72:84:28:dc:9e:7d:3a:65:84:db:
15:b0:96:bd:ba:be:f2:4c:82:34:ce:5f:c3:20:38:d7:bb:ac:
f0:2c:f0:61:9b:07:71:3c:ea:6a:36:55:a4:36:f2:0e:fd:6d:
be:99:55:c0:65:0e:01:a7:f8:f8:a4:e5:a1:29:23:54:5b:98:
b1:9f:76:de:11:53:91:8c:2b:a6:69:39:4f:e1:48:0c:99:34:
43:64:d7:c1:43:7a:df:e2:40:3d:d0:ac:c1:57:5c:76:9a:06:
e1:cf:29:32:a6:c3:67:f6:98:87:ca:b8:cb:17:e9:b3:23:44:
5b:ed:7c:ec:b3:bc:34:83:da:48:c6:87:d6:96:b6:d6:40:5c:
71:8a:b1:8f:6f:30:b8:b0:4e:5e:82:67:a2:52:8d:77:23:f9:
69:c2:d4:5d:b3:50:12:44:68:5b:22:b9:b4:ef:6f:b8:43:d1:
f8:03:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:22 2026 by rpki-client