
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json)
Hash identifier: FQ87ufBQBL+F9NMi8yjuY9N5Nte01zh3E+VwSMm6g3g=
Subject key identifier: 10:20:2A:ED:EA:88:3F:8B:45:F2:91:EC:F1:AA:61:36:D1:E8:9B:8C
Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
Manifest number: 03D7
Signing time: Sun 01 Mar 2026 01:22:49 +0000
Manifest this update: Sun 01 Mar 2026 01:22:48 +0000
Manifest next update: Sun 08 Mar 2026 01:22:48 +0000
Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: swbWpMNMWG9RAPH1iFrods0W+U9doQdfHEGdlHlkOsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Validity
Not Before: Mar 1 01:22:48 2026 GMT
Not After : Mar 8 01:22:48 2026 GMT
Subject: CN=69a394e9-8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:cf:51:5e:87:f3:81:13:fd:8a:f1:be:48:
51:3f:3c:9c:21:c9:24:21:cc:16:0f:08:03:8d:79:
98:fc:11:eb:65:a9:06:57:54:24:cb:aa:96:27:8c:
b6:55:c7:c2:f0:32:ae:d0:2a:61:2f:50:4e:cd:64:
85:8b:28:57:06:ff:f9:66:15:0b:d6:e5:78:22:9f:
67:bb:ce:5d:52:ab:10:d9:d7:69:88:b6:62:8a:52:
8b:5a:89:e0:2e:58:80:f9:23:b1:e1:43:dc:ab:85:
ee:25:7f:33:d4:74:09:bf:5b:d2:d5:f6:07:17:83:
d3:cb:87:07:c3:c5:fb:92:00:d6:00:8c:c9:07:2d:
46:1a:bc:04:4b:93:99:7b:a1:8c:d6:fb:f9:c3:7c:
7b:db:66:9e:23:6b:4c:af:17:0d:94:b0:da:90:45:
44:a7:f2:3a:dd:11:ea:19:b2:76:c8:60:59:08:d4:
a5:42:50:99:93:ea:ce:aa:d1:e7:ae:21:1f:56:1a:
9c:d4:bc:a1:e4:3f:65:1a:05:fb:73:82:8e:f5:e9:
a1:d8:ea:c4:18:0e:8b:d9:70:30:38:0d:8a:59:bc:
90:ab:7d:6a:16:b7:be:36:b9:3d:15:89:a8:2b:3f:
b7:5a:c8:70:f7:2d:d1:c3:c6:01:8c:06:2a:43:61:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:2A:ED:EA:88:3F:8B:45:F2:91:EC:F1:AA:61:36:D1:E8:9B:8C
X509v3 Authority Key Identifier:
keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:cb:b0:95:22:51:8e:1f:fe:15:2e:bf:95:ac:98:f4:37:
9b:52:db:ba:0f:f2:58:c1:d1:82:02:2c:91:62:49:e0:43:c2:
2b:3d:c2:76:20:c6:37:f8:28:e9:41:4a:77:42:32:19:d1:ca:
dc:1a:31:a0:29:e0:b5:ba:9b:8f:2b:91:a5:c3:b1:48:ac:d8:
32:52:72:13:78:62:8f:71:42:41:f5:57:23:fd:56:60:6f:e8:
d2:96:b1:39:f4:9f:6e:b6:d2:b9:eb:66:e6:19:42:bd:42:69:
66:56:c9:2b:ff:28:dc:6b:da:b7:1e:36:56:1e:d3:63:cf:ce:
47:1a:cf:8d:01:a9:c3:28:72:95:3b:6d:38:0f:3d:cc:06:0e:
ce:63:53:b0:46:a9:6e:87:fe:3c:9c:9f:c6:8a:30:fb:11:b2:
c8:e5:b6:bc:76:9a:b1:95:63:bf:22:07:ae:c6:8c:ea:7c:e4:
f0:84:31:f6:21:6b:04:2d:aa:80:7f:2f:1b:37:fb:83:15:65:
51:0a:cf:95:a0:4b:e9:f3:3b:c3:cd:18:57:d1:9a:56:e1:82:
42:d0:d1:78:4c:28:16:4a:63:87:7d:42:90:20:2b:12:15:43:
2e:16:0b:3d:70:84:55:e7:30:c6:56:da:ed:97:4a:e4:85:ee:
81:86:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:33 2026 by rpki-client