
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: WppiitZ7JAtPP6mKEoLUkLdxpBPFfgeCejpkzo6mkSY=
Subject key identifier: A2:BB:70:DC:71:C7:A6:AA:F2:AC:85:6B:3E:BE:E2:A8:62:95:F9:3F
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B42
Signing time: Thu 16 Apr 2026 19:10:51 +0000
Manifest this update: Thu 16 Apr 2026 19:10:51 +0000
Manifest next update: Thu 23 Apr 2026 19:10:51 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: EHT7i6LHqnLRZlXwCMWIsbtb0YoBmX7n/8Whg5jOAm0=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Apr 16 19:10:51 2026 GMT
Not After : Apr 23 19:10:51 2026 GMT
Subject: CN=69e1343b-6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:d9:17:87:dd:c9:b7:e4:a1:11:85:85:6b:
60:80:f8:e9:ac:00:82:fa:d1:c8:d4:8c:5e:51:17:
f0:3d:41:95:ad:cc:0b:bd:af:85:d2:9e:c0:16:21:
72:fe:74:71:b2:7a:e7:f3:e5:ee:2b:78:03:a7:3e:
a4:83:fa:98:4a:2f:7e:c1:b7:0c:b8:b1:20:eb:06:
e3:70:1d:99:5d:73:e0:cb:1f:2e:e2:18:12:50:5a:
df:89:a0:1f:e6:65:d5:58:34:81:e4:9e:f5:dd:6e:
c2:f4:bb:90:0e:eb:f4:6b:61:b3:08:c5:9f:87:84:
cf:82:fb:78:bf:0f:75:b1:70:d4:01:ca:10:61:30:
52:e8:58:7e:07:d1:4b:a6:ab:45:f3:1b:ba:61:0e:
36:82:f1:83:a5:86:8e:3e:7a:fc:14:70:4e:b8:4b:
f5:3a:ed:c0:de:7b:96:25:cb:5b:32:86:82:77:18:
53:a7:54:6c:e0:97:cb:bc:79:3a:50:87:86:fb:ee:
b1:70:29:31:12:3e:3b:f6:c1:99:f9:b5:ea:c7:6e:
75:ee:ca:a1:79:5b:9c:ae:7e:d5:2b:61:02:89:1f:
45:d6:f1:95:74:96:e2:d9:a6:0d:4f:36:d5:dc:84:
5d:76:c3:d8:24:6a:f3:11:39:72:68:94:10:48:86:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:70:DC:71:C7:A6:AA:F2:AC:85:6B:3E:BE:E2:A8:62:95:F9:3F
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:37:91:8c:9c:b4:7f:4c:d6:86:45:ce:ff:67:c9:08:6d:92:
4d:1b:25:ea:5b:5d:18:87:b3:48:ea:6f:9c:41:3c:8a:8a:61:
1f:21:d3:73:7f:69:09:4c:42:a7:ff:2c:2d:c5:e1:75:a1:42:
0c:63:96:7e:5d:ba:99:e6:6f:0f:ea:33:1c:aa:f4:f5:11:29:
cf:3b:8c:13:b3:52:b6:55:6c:f2:ac:af:be:59:14:e0:56:fb:
1b:51:21:e3:99:47:51:b5:d4:b3:48:ed:cf:f6:d4:d5:ee:71:
8f:05:10:27:96:be:66:a2:b4:64:8f:5d:9d:af:ba:bc:e7:eb:
e6:b1:1f:6b:73:3e:f5:5e:c8:b4:16:12:56:06:74:ea:5d:f7:
cc:97:d0:77:13:b1:59:eb:1e:6d:cc:d4:96:6e:6d:67:c3:c5:
8a:ca:91:34:72:e0:18:00:a6:4c:5a:2f:17:53:db:c6:dd:de:
9e:7e:73:06:bd:8a:36:84:47:81:8a:e7:63:4c:16:5b:6e:dc:
eb:92:cb:39:d8:59:65:b5:26:b7:3d:5d:17:de:62:ca:3b:cb:
1c:1e:c3:ac:d8:7a:34:d9:b0:99:ab:3d:bd:69:db:ad:6e:bd:
f3:2b:6f:5f:6c:88:39:ee:be:0a:be:2b:b0:ad:89:df:e8:6d:
a2:e2:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:51 2026 by rpki-client