
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json)
Hash identifier: BJZr0b5GANG9Le46o60ZTJmBG4RY2RVUeUXRyenbGOw=
Subject key identifier: 33:C1:BA:A5:8F:58:88:E5:A2:8F:4D:84:0C:5C:9B:08:CC:B1:33:A8
Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
Manifest number: 47
Signing time: Tue 13 Oct 2026 09:14:36 +0000
Manifest this update: Tue 13 Oct 2026 09:14:35 +0000
Manifest next update: Tue 20 Oct 2026 09:14:35 +0000
Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: dPTeeOFwKk9xeDxLF4uiRv3ntBUj/cM6nqrkifyg/I4=)
2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Validity
Not Before: Oct 13 09:14:35 2026 GMT
Not After : Oct 20 09:14:35 2026 GMT
Subject: CN=6acdf67c-8bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:55:85:05:68:bd:a6:56:4d:da:d2:20:c9:
6b:b6:c2:f8:26:f6:c1:c4:0a:08:b3:c8:58:86:c2:
2d:1d:17:9e:ad:e0:e5:f9:ee:74:f7:b4:a1:c8:82:
fe:66:44:74:f8:a3:b3:1d:2f:5e:2a:4a:79:08:46:
53:78:46:5b:6f:2e:92:19:7b:3b:a4:7e:31:2f:49:
4b:72:cd:b2:20:61:8a:b1:27:11:08:4d:b1:95:a9:
5a:d2:e2:20:bc:e6:15:4e:15:21:ae:d0:1e:02:4f:
4f:8a:85:3a:72:80:04:f6:16:e5:40:55:bd:ca:50:
2d:16:1b:17:b0:c2:1f:ad:e4:84:38:ed:f9:a2:df:
64:09:5b:13:b8:5b:3d:f0:91:82:76:7e:f7:25:1d:
4f:26:f3:6a:0a:f1:8e:4b:a9:42:f2:d6:12:a3:78:
94:e1:ce:92:a3:3b:69:09:bf:28:1c:a4:cc:58:24:
d7:b7:df:4a:9a:3e:19:35:51:13:75:b7:ce:e9:2f:
ca:dc:12:2d:60:24:b2:bd:95:5a:6d:a4:94:4c:0d:
b4:50:af:12:6f:f9:f7:fa:dd:29:81:29:76:d9:f8:
70:04:a9:56:93:c6:bc:d2:15:9f:19:9a:7b:9d:6a:
ed:42:8c:86:89:cc:98:93:dd:27:d3:f8:79:30:08:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:BA:A5:8F:58:88:E5:A2:8F:4D:84:0C:5C:9B:08:CC:B1:33:A8
X509v3 Authority Key Identifier:
keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cd:6b:c0:19:62:99:fb:39:60:b1:7e:d2:72:84:08:80:64:
54:5f:89:8c:96:71:f9:10:ef:35:84:3c:4a:da:82:e0:1b:71:
46:a1:ce:eb:93:ff:28:9a:ab:37:bb:c5:53:49:de:47:9a:38:
bb:6c:53:7a:c6:85:6f:ad:4c:87:bd:61:fe:e1:08:cc:93:45:
07:78:b7:5c:83:66:15:49:d7:37:7d:aa:ae:a2:1a:68:ef:76:
2e:23:e3:00:63:8b:74:ea:8f:cc:4b:9c:79:87:af:dd:18:4c:
54:0c:2d:9c:d5:d4:30:09:c7:d2:38:09:a7:a7:e3:6f:76:92:
26:23:3e:46:2e:ab:1e:ff:40:98:6f:9b:ea:3a:6d:d6:72:5a:
bd:5f:02:68:46:50:89:53:2f:55:de:13:2d:a9:bd:bb:d0:3d:
f1:ed:35:31:ed:03:05:a9:6b:6a:4e:ed:d6:39:7d:fc:04:c8:
38:1b:47:4e:ad:01:8f:e5:93:42:93:76:df:e4:f7:ac:bc:ab:
67:ea:ef:b5:7b:c6:d5:22:73:32:df:5c:e0:7b:84:99:f0:ac:
f6:29:b7:4a:bb:e6:8d:83:b8:a8:ec:b3:ce:3e:10:d4:a1:92:
09:61:49:84:f0:81:c8:de:35:c8:4c:8f:59:b4:ae:16:ae:ab:
1c:22:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:12:25 2026 by rpki-client