
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier: 2xXr8QBbi9DA0i3hcv5NMKCaef0JK+RxZxNQ5L/OOXU=
Subject key identifier: C5:56:E2:D9:48:F2:73:2A:B9:C8:58:AC:6F:9F:D3:F1:32:A2:DA:13
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial: 066F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number: 0668
Signing time: Sat 28 Feb 2026 23:06:23 +0000
Manifest this update: Sat 28 Feb 2026 23:06:22 +0000
Manifest next update: Sat 07 Mar 2026 23:06:22 +0000
Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: lFK1ZVWR1ypKiJM/ShysiAbTLRRIjD9fb+ps+s636HA=)
2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Validity
Not Before: Feb 28 23:06:22 2026 GMT
Not After : Mar 7 23:06:22 2026 GMT
Subject: CN=69a374ef-8b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:86:0f:d9:a9:b1:83:c7:ec:7e:86:cd:d9:
9e:a9:4f:87:01:8d:17:40:9f:75:0e:54:9b:a6:92:
01:00:74:a1:b0:68:0f:d4:a2:74:05:df:6a:37:fc:
8c:0f:9c:80:05:88:56:46:25:3a:1e:2c:c8:9a:c3:
3b:11:90:43:22:20:e9:a2:5f:8c:08:cb:44:9b:66:
67:b2:d8:c5:23:67:a0:d9:46:73:0a:bf:a4:9a:a1:
25:a2:f3:32:23:ec:9c:8b:a9:0e:95:9d:c2:bc:b5:
79:fc:fe:fb:57:27:f4:54:33:ef:f7:88:49:b2:82:
9c:7e:f5:1a:80:e0:4b:31:27:fb:6d:90:53:3d:64:
57:68:f6:30:37:0a:50:7f:89:01:24:b6:6d:29:ed:
e6:57:bc:09:7c:ff:1f:ab:60:86:15:e0:40:93:93:
bc:ae:98:90:ce:55:fa:2f:dc:35:1a:7d:6b:06:c5:
e0:66:e9:05:bc:e7:4f:09:26:5d:14:a4:ef:60:97:
f0:2e:8a:62:88:54:9b:9f:fc:be:77:09:87:e1:75:
ff:36:ab:64:d5:89:db:0d:6e:62:73:3c:0f:29:a9:
14:bf:d5:96:8f:4a:89:c2:b2:29:a5:38:57:c2:a2:
e7:11:0b:8b:93:d7:56:83:ce:e6:29:9b:87:c5:15:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:E2:D9:48:F2:73:2A:B9:C8:58:AC:6F:9F:D3:F1:32:A2:DA:13
X509v3 Authority Key Identifier:
keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:16:04:fd:43:09:1a:88:a4:cf:51:28:ff:c4:a9:bf:cd:09:
f6:c1:ea:4e:53:ff:5c:99:3e:3c:d6:fc:35:c6:6c:df:e6:86:
fa:95:4e:f0:c7:83:37:6b:0d:a5:b0:a6:56:da:0a:33:da:59:
d2:f7:18:55:05:f1:50:86:39:a9:fe:46:14:3c:c2:c1:7a:1f:
16:1f:8b:ce:4e:5f:ce:7e:76:77:17:60:93:ee:ff:ff:b5:20:
3f:5c:8b:cc:fc:23:69:9f:00:75:42:7b:58:f0:85:d4:84:b4:
84:cd:fd:f7:c0:67:3f:ce:ac:b8:09:df:9c:16:43:ad:38:b3:
db:ac:27:f4:f3:13:da:bf:48:b0:d6:f1:c3:e1:f2:1c:96:6c:
2c:5e:56:5c:70:1e:dd:18:45:e4:03:7d:2f:cb:39:c9:de:8c:
ef:67:71:cd:08:72:c8:c3:05:27:e4:45:f0:70:56:15:a4:69:
81:85:f9:db:4b:85:e2:62:7a:95:fd:dd:aa:d1:62:df:83:bc:
92:56:fb:81:81:0f:9b:24:a6:b8:49:bf:27:c4:84:f2:7c:85:
9b:1a:96:45:fd:31:03:18:ee:89:72:5c:f3:a9:b3:ca:e3:8c:
c5:12:44:71:dc:53:a6:84:93:2d:57:54:dd:f9:d9:6e:22:fd:
e2:94:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:12 2026 by rpki-client