
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier: uPhaqejVsdKDYop3fQY48LMLwO62k5zk7TnuVyUbxD4=
Subject key identifier: 45:78:89:61:61:EF:F1:38:47:B5:A8:A4:6D:2C:23:3C:7B:89:26:9E
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number: 0694
Signing time: Sat 28 Feb 2026 22:57:46 +0000
Manifest this update: Sat 28 Feb 2026 22:57:45 +0000
Manifest next update: Sat 07 Mar 2026 22:57:45 +0000
Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: ofVZ1fFSSUk63ZKmQtwf1h7zUhAK2VTxA7iIb5sjZFY=)
2: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=)
3: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Validity
Not Before: Feb 28 22:57:45 2026 GMT
Not After : Mar 7 22:57:45 2026 GMT
Subject: CN=69a372e9-f026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:7a:d8:b4:73:37:d9:0d:65:37:d6:70:e0:
75:5c:a8:72:f0:80:93:b8:54:2c:01:82:78:7d:f0:
7f:54:1b:b7:cc:09:eb:6f:c6:48:96:92:00:39:76:
56:12:5a:1a:b0:29:96:49:81:e7:84:09:2f:aa:e7:
fb:c0:b3:9c:12:f7:ff:13:48:fe:4f:ee:4e:f5:b8:
f4:0e:8a:09:2a:e8:85:fe:c2:13:b1:e6:5c:25:3b:
6d:3a:75:fc:9f:96:71:cf:38:55:18:0c:68:c5:37:
3e:17:0f:90:33:d1:0e:d7:e5:3d:16:c1:e3:d5:09:
fb:a3:e1:2d:e9:46:aa:f6:22:09:37:9a:0b:7c:a8:
5d:98:81:b7:06:df:00:3d:1a:af:24:0c:a9:d7:d1:
37:05:39:9d:b2:c9:04:f1:66:25:2d:b9:bd:cb:a3:
ef:e4:0e:ca:68:29:91:88:85:06:30:9d:53:93:90:
42:9f:d5:2f:52:8d:81:0a:82:4f:e4:bd:0c:ee:2d:
f8:de:4a:eb:6d:36:65:92:a1:e1:05:96:0b:da:06:
67:47:e4:f4:94:41:34:e1:d1:97:cd:20:01:68:64:
58:c3:63:76:b6:26:e4:26:f0:1e:18:be:22:b1:b7:
62:87:4f:47:28:b5:30:6e:dc:fe:22:a6:26:77:55:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:89:61:61:EF:F1:38:47:B5:A8:A4:6D:2C:23:3C:7B:89:26:9E
X509v3 Authority Key Identifier:
keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:04:14:43:29:d6:06:b8:79:45:1f:2b:be:11:60:98:48:
06:b3:dd:59:eb:68:99:63:89:66:af:28:11:8b:f5:46:8c:47:
e6:eb:76:be:93:26:f4:d5:47:3f:02:e9:10:eb:a6:d4:ec:38:
bd:73:8d:90:77:bb:8d:72:b2:61:c3:35:92:40:11:6f:05:75:
8a:22:59:33:ec:89:77:1c:c7:f5:90:4b:48:e0:35:78:63:42:
7d:66:2c:53:08:bf:c6:c6:46:7e:5d:e2:c5:cf:eb:04:22:3d:
f3:18:00:0a:21:82:ff:ea:6a:a6:c5:ee:7f:cf:90:52:70:1b:
ca:5b:7a:85:fd:4f:ae:2c:5b:09:48:25:5c:75:c6:54:db:57:
c0:6d:86:dc:f6:db:49:57:f6:90:7e:6c:c6:aa:ee:56:27:7a:
07:d0:20:5d:be:03:26:cc:3c:6a:f1:26:a7:5b:32:1e:dd:5e:
c4:22:c5:79:9a:5b:04:46:4e:3a:80:11:b1:51:5a:e3:84:19:
69:5a:d0:fa:b6:d7:0c:35:23:26:a3:50:d0:76:dc:85:b1:2c:
f2:26:87:f5:a5:99:6e:93:a9:41:b7:2d:9d:88:e6:be:b8:71:
23:b2:47:4b:25:65:5c:8e:61:1a:cc:04:4c:f0:dd:f3:50:d3:
e1:cc:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:25 2026 by rpki-client