
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier: R/QR/uW1kgkCdO7jkaD08+OkeqDF+vDkDlpBxAP/dIQ=
Subject key identifier: 64:5C:B3:02:39:9C:E7:97:6D:B8:D2:9C:B9:E9:2E:45:99:8F:AA:FE
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number: 0682
Signing time: Thu 16 Apr 2026 22:25:24 +0000
Manifest this update: Thu 16 Apr 2026 22:25:24 +0000
Manifest next update: Thu 23 Apr 2026 22:25:24 +0000
Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: ei+I+1loWi4+BzUpvVsyOMCFOEP+mBBFutifioG0evs=)
2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: q1pTqOK64HYWoKgZSZ7XLFGjIcVEPgtKRHPpyD0S1+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Validity
Not Before: Apr 16 22:25:24 2026 GMT
Not After : Apr 23 22:25:24 2026 GMT
Subject: CN=69e161d4-cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:90:ab:e0:55:dc:b6:48:f1:24:ec:6a:b5:
cf:7a:e2:c0:53:a3:b4:cb:32:72:f7:d5:8f:93:5b:
17:35:b2:58:b2:35:67:6f:f4:25:e1:f4:dc:08:45:
f2:41:a0:5a:a8:ba:59:c6:c1:9d:62:ea:fd:0b:57:
21:44:26:00:70:48:29:c2:16:7f:89:86:f1:56:1b:
fd:b9:45:86:ec:e8:30:91:92:6c:c1:ee:33:03:68:
b1:5f:37:c0:16:10:c8:a0:0d:4c:b1:e1:f4:4c:06:
b3:88:ca:3b:11:05:95:ad:6e:ab:a9:e5:70:17:37:
98:ee:20:94:b5:89:f4:51:87:6c:fc:0a:74:ee:3b:
8e:2f:8f:de:c2:ec:4e:17:65:b1:41:e2:26:3b:63:
81:db:07:0d:03:51:0e:2e:b8:bc:30:c4:06:58:b2:
d2:96:63:60:84:20:63:9c:58:d9:19:a8:3c:5a:b6:
3d:6c:30:d2:82:88:e8:18:05:cf:27:67:56:6a:22:
ba:e8:d5:9e:36:02:be:28:a9:09:73:be:e4:52:d2:
f7:db:ba:80:03:70:e6:a2:23:58:a6:23:4c:15:27:
bb:10:9a:8d:e1:6e:dd:31:ca:27:2b:18:4b:3c:6b:
3f:74:8b:c1:9b:48:ea:e8:07:cf:85:1d:b1:d5:8a:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:B3:02:39:9C:E7:97:6D:B8:D2:9C:B9:E9:2E:45:99:8F:AA:FE
X509v3 Authority Key Identifier:
keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:44:59:fd:43:8d:02:b1:6f:e0:0d:68:e4:b7:b9:cb:20:3c:
ac:42:45:e0:14:05:47:8f:3b:44:ff:cf:5a:87:77:da:5b:49:
4d:11:fe:4e:aa:39:ff:79:9a:1d:b4:a2:d2:3c:7c:48:df:0d:
61:42:83:c9:7b:93:6f:2b:cb:71:8c:15:29:0d:c6:db:4c:52:
a2:a8:d9:63:55:ad:39:9e:9b:75:bd:42:c5:cf:b2:c6:75:92:
b1:a8:10:84:28:dc:54:db:df:21:ff:65:e5:31:e4:0b:e2:20:
87:23:61:dc:ec:1f:37:a7:70:ae:c7:d6:8f:04:09:34:64:62:
ba:d9:71:13:e9:31:86:dd:27:6f:88:74:b2:ec:bb:fc:68:7c:
ae:dd:33:75:ab:6d:40:d3:19:f7:83:b5:68:0a:d9:73:4c:5b:
67:10:04:f7:a7:15:d1:b4:ad:f7:db:b7:0e:9e:89:ac:08:a4:
16:d5:ae:02:26:e1:90:e9:58:1b:c0:5f:fe:ae:dc:1c:9f:ee:
b9:5e:42:c6:75:1b:84:6c:c5:28:e3:41:9b:2c:d3:14:50:d5:
8f:dd:27:17:f0:b4:38:6c:19:c7:95:02:72:a0:e1:0e:a9:93:
46:2a:2e:92:91:d5:80:3c:2f:28:6f:a2:50:7a:36:f2:5d:ca:
56:cf:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:14 2026 by rpki-client