
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier: 6cJgRd7ovjemAjMgcpaOKCj+LG2WtmOyG0mSUzjg1OE=
Subject key identifier: 57:CD:5F:BF:58:C4:AC:9B:A0:0A:28:54:FE:6F:AB:98:88:11:94:84
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial: 06DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number: 06CD
Signing time: Fri 12 Jun 2026 22:19:49 +0000
Manifest this update: Fri 12 Jun 2026 22:19:49 +0000
Manifest next update: Fri 19 Jun 2026 22:19:49 +0000
Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: hEyvRriF2sSjxkd8VyP1o0dS9N3m7+DzjvZ9FTqk3LQ=)
2: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: VCL+P+tlT04cGlwm1f1o27ry1Et64gaCgM2IBSbvp04=)
3: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: XhJX3NfcbvmnSUAkmSliLE4bj9pTRieX/8IuPGpMoeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Validity
Not Before: Jun 12 22:19:49 2026 GMT
Not After : Jun 19 22:19:49 2026 GMT
Subject: CN=6a2c8605-69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:ac:f8:ca:69:33:1c:e3:bd:48:69:1d:5d:
b7:ad:93:4e:d6:bb:1c:f3:aa:11:3f:f2:98:11:8e:
f3:74:e5:d3:10:38:7e:ee:55:dc:d6:db:08:bc:ab:
82:cb:d1:a4:60:5a:93:89:49:eb:46:43:d6:ed:35:
2e:f8:83:c3:30:f3:f2:92:1b:2f:da:cf:5d:ef:ca:
80:6a:c8:47:4e:36:e5:da:ad:2e:1a:02:34:50:b1:
44:87:b6:75:22:7c:32:ca:f1:ba:6a:7c:53:77:71:
99:6e:ad:9a:74:e4:ec:1e:c0:f0:57:12:74:1a:c9:
32:81:b1:ed:3b:21:55:a9:c5:7f:4b:83:37:0a:c2:
23:5c:e1:f1:e0:63:1a:cd:1e:62:2b:42:45:d2:91:
e9:bb:ee:f3:a3:c7:a3:dd:bb:12:e6:2d:b0:1d:0c:
2b:be:63:bd:fc:b8:62:e3:71:cb:fd:69:a7:ab:a4:
c0:65:a6:d6:84:7e:60:cf:a4:6e:4b:d5:e6:51:0e:
95:9e:0c:0b:f4:f7:b1:f9:93:cf:67:6d:1a:1e:b4:
21:f2:4b:69:b8:84:87:0a:ef:19:f0:c6:02:52:7e:
39:0f:d0:0b:3e:df:a8:71:b4:72:16:86:54:b4:2a:
95:1d:47:34:cd:e2:f2:0e:e3:77:73:2b:95:c1:3a:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CD:5F:BF:58:C4:AC:9B:A0:0A:28:54:FE:6F:AB:98:88:11:94:84
X509v3 Authority Key Identifier:
keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:85:24:a4:a0:72:c6:24:28:ee:47:fc:2b:d0:b4:a1:26:b8:
57:99:91:30:8e:a5:9a:d8:d8:2f:f9:1f:f9:6a:a6:cb:18:b8:
c3:5b:55:84:5e:9f:fb:d3:a5:68:b1:10:c0:b8:6c:ed:2b:b0:
db:c8:e0:e1:ae:dc:43:0a:b7:11:bb:f7:dc:52:c3:44:54:aa:
8a:a5:c8:77:6e:45:43:43:91:89:38:08:17:a0:fc:db:69:57:
05:58:e4:38:fd:ad:54:43:19:fc:e5:c5:1f:ef:90:3c:b0:95:
f0:9e:72:45:34:ee:84:6d:91:5c:12:f2:33:09:e7:bd:70:1b:
11:97:74:24:c5:67:03:d2:52:d0:ad:2c:2b:f2:36:aa:47:98:
fd:8d:1a:e2:ad:fd:4a:06:bd:ee:21:f3:3e:6d:ea:5b:bf:3e:
5f:59:48:93:8a:ca:aa:f6:0d:50:28:a4:65:72:eb:40:0f:91:
06:db:a7:aa:c9:51:26:99:f1:7a:98:8d:a4:a4:91:fd:91:69:
b7:9c:55:da:85:34:4c:b5:0f:da:13:0a:08:cb:61:7f:df:46:
64:4d:ce:f2:68:fa:97:b5:13:8c:be:6a:2b:c9:05:f8:ac:95:
e3:86:3c:bd:75:b1:f4:87:60:a1:0a:e8:40:cc:2e:6c:9b:48:
60:ca:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:01 2026 by rpki-client