
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier: Csi0zDKH05Yb1IPoK7/nj0i8un08EUv8VCg1V2hYlJI=
Subject key identifier: EC:DB:5F:13:E0:41:41:AF:B1:F6:F5:55:97:75:42:69:B9:32:9A:AD
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 09BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number: 09AB
Signing time: Fri 12 Jun 2026 19:59:32 +0000
Manifest this update: Fri 12 Jun 2026 19:59:32 +0000
Manifest next update: Fri 19 Jun 2026 19:59:32 +0000
Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: EZVTer0/10fLfIhvFxu0i3tRFeGLXQO53FbRRxFlntI=)
2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: NAdkxGEriD41T4r2Hs9G1ZaoxJyebhWdoS8t42aFjpU=)
3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: jAKvnhGGumY3r7ewKcT9Lzim+X/g3AItHLNz64M4NG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jun 12 19:59:32 2026 GMT
Not After : Jun 19 19:59:32 2026 GMT
Subject: CN=6a2c6524-d3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:1a:be:fa:02:bd:46:32:e4:b9:ab:90:96:
2a:fa:47:05:55:bf:63:e2:ce:07:99:72:59:35:65:
30:d2:7b:8c:bf:07:fb:76:5d:a2:55:e8:f5:35:4e:
9f:a1:d2:96:df:57:bc:61:41:4e:e9:df:fb:ef:ae:
bc:37:b9:41:ef:9a:48:64:fa:12:b9:f0:1c:73:23:
cf:f1:75:e4:fc:14:5c:1a:2c:96:2c:03:98:33:3f:
48:7f:c4:e5:a3:24:54:41:12:d3:6f:bf:f4:8c:fd:
00:89:59:d3:cc:4e:72:7e:cf:70:96:e8:a3:54:ed:
c0:e8:07:1b:d7:13:57:7a:74:fc:33:31:00:a3:6f:
cc:e2:57:71:03:0c:22:9c:53:65:dc:5b:56:16:76:
9c:3b:1c:a6:68:70:39:49:0f:2f:e5:b1:b3:41:e9:
40:2f:ff:eb:6b:35:70:c9:84:9c:7c:a3:a8:94:90:
66:3c:d1:60:f8:d9:b3:b7:f0:de:a6:56:f6:7d:8d:
2b:1a:ec:dc:45:d3:ce:5d:bb:06:c2:85:69:a8:46:
c1:a5:4d:f2:a8:9a:d0:16:a6:89:e6:ee:10:70:8d:
64:33:9f:32:0e:d7:10:93:cc:d7:b5:74:0e:83:f1:
d7:69:90:4f:c9:c9:85:2d:43:ef:2c:a4:be:2d:ab:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:5F:13:E0:41:41:AF:B1:F6:F5:55:97:75:42:69:B9:32:9A:AD
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:90:40:48:44:0e:4f:14:ea:fe:98:2b:4b:4d:87:99:91:
22:ad:08:a1:5a:ac:89:8d:89:a4:0b:aa:dd:95:e4:14:ac:85:
c0:a7:45:c8:c2:9c:4e:43:24:af:03:8e:98:9e:ad:cc:dd:8c:
8d:5b:59:dd:6f:b3:eb:f0:68:3a:7c:d2:c4:15:4f:2a:93:8a:
4a:9f:27:53:91:41:6f:ab:1b:44:b3:64:22:3f:29:66:ca:2b:
4e:9d:df:80:59:7a:80:d1:2c:d5:1b:67:ee:ca:e3:4f:b8:73:
a0:77:fe:6f:22:3c:a4:c7:d4:02:41:19:99:0a:8f:57:7a:1e:
bd:d3:15:1a:7d:bb:d6:0e:d4:b0:b1:7f:c7:aa:4e:18:dc:1a:
31:97:84:2e:6c:48:9b:54:3b:24:6a:31:77:a5:c3:70:a5:b6:
e1:cb:1b:6e:83:2a:4d:63:a1:e4:52:a0:70:83:0b:90:6f:15:
90:41:70:1e:ba:be:64:f8:f9:b4:48:af:0e:11:0b:64:43:de:
28:a6:7d:d0:b4:c9:47:35:bb:c7:81:3a:34:53:a1:ea:74:9d:
d6:e1:eb:9e:5e:65:c9:11:22:b8:97:42:4f:91:cf:40:79:85:
0d:d0:4c:c0:c6:25:e2:cc:39:be:42:e0:ac:08:a0:33:a4:8e:
7f:61:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:08 2026 by rpki-client