
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: 140vfR7l7cEBVT1BxUB+Qy+gxqKCfJMuCvXYdSSRSHA=
Subject key identifier: 61:4B:50:B4:14:23:99:7A:F3:7E:A1:D3:2A:78:A8:9D:39:97:4E:5F
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 033C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 0335
Signing time: Mon 02 Mar 2026 03:12:43 +0000
Manifest this update: Mon 02 Mar 2026 03:12:41 +0000
Manifest next update: Mon 09 Mar 2026 03:12:41 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: w/2VHJgMzpsXCYbeR9SeTkXTwJZefUv2uYIPSnMgoCY=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: W6FG+9qCV45ghc4JJDXwCJLeIEHXPGHuRL+5uDqENoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Mar 2 03:12:41 2026 GMT
Not After : Mar 9 03:12:41 2026 GMT
Subject: CN=69a5002a-b84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:be:f7:c0:b5:de:02:db:28:d1:ac:d1:71:
f1:c9:25:74:e3:da:5b:c9:b1:b6:a4:70:e5:35:91:
dc:d0:ac:99:91:66:08:cb:67:16:84:23:97:55:1b:
53:ef:c4:b4:74:75:6a:70:79:10:c2:f7:17:ce:8a:
a7:6e:75:11:17:17:36:ca:53:0e:d3:58:06:35:7f:
96:dd:9b:97:87:ea:0c:ed:06:c8:d0:67:1e:cf:66:
b4:e1:9a:9e:d0:3a:2a:f2:a5:f9:cc:9f:bc:b1:d4:
7e:71:07:63:1a:c2:69:31:b3:3c:77:ce:d3:68:ec:
97:0d:5e:d4:a1:1d:e6:52:ca:22:45:45:9a:1a:b0:
1b:09:c2:b4:82:9d:c4:2f:ed:3b:5a:aa:23:bb:42:
79:f6:2e:4d:1e:07:53:20:27:b7:55:24:19:aa:90:
c3:7b:47:9b:ba:92:c7:a7:65:72:00:e6:a1:a3:f4:
08:b5:b5:76:c9:a4:b0:45:fc:21:e3:da:91:a9:79:
d8:be:45:e6:21:54:1f:2f:d1:fe:aa:50:28:5e:ab:
6c:e0:6b:ef:83:16:e5:26:18:68:c0:47:b7:1d:ac:
25:24:c9:9b:f0:7f:14:94:56:28:0b:48:83:d6:68:
95:6e:17:4f:8f:6c:62:79:fe:a5:53:5a:e5:18:b3:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:50:B4:14:23:99:7A:F3:7E:A1:D3:2A:78:A8:9D:39:97:4E:5F
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b0:0c:2a:c6:b3:18:df:a9:f4:12:36:87:af:e7:71:6d:3f:
21:bf:42:71:52:bf:d2:7a:95:73:9d:12:90:8a:ed:d2:5a:d6:
f4:20:b4:28:03:48:8a:a0:c8:ce:ba:47:c9:c4:e1:24:84:57:
df:1b:5f:d6:66:6b:04:69:11:7b:34:7c:82:22:3e:40:81:8c:
a2:6e:64:a2:b4:c8:7f:37:92:ad:57:dc:7e:b4:d2:5e:f7:19:
e6:fe:fa:2e:92:7c:7a:f9:7c:7d:3f:66:52:51:10:dc:95:71:
29:f9:e2:1f:f1:a6:17:b7:b3:9e:2e:77:04:04:c8:99:1b:a5:
b9:f0:da:05:1f:ef:7b:2f:1d:95:21:ad:1c:b5:e3:49:8c:36:
37:62:6e:f8:7f:96:8f:90:d2:c7:6d:cb:92:38:22:b8:b4:1f:
ba:9f:f2:9c:6b:b9:eb:23:5b:40:32:90:7e:ee:5f:66:11:a6:
78:39:42:b6:88:eb:ee:3c:42:9c:56:d8:c0:58:a6:74:3d:a5:
fc:c4:cd:05:d8:74:c7:8e:42:ae:8f:7d:aa:21:74:57:ed:7e:
2b:ce:5f:01:64:b3:df:88:d0:cc:76:68:07:74:b7:96:87:7c:
8a:aa:ac:75:fc:a3:1c:ca:70:02:d3:80:a0:ae:5d:02:57:61:
0c:d5:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:55 2026 by rpki-client