
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier: lE5EAOHZbjdLdkWrQ6K1maFCU+mgUm/idWt7EGXNJTc=
Subject key identifier: 0F:BF:F4:6F:42:AA:34:D1:8B:89:86:75:0B:8F:73:D8:95:CD:51:E0
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number: 0197
Signing time: Fri 17 Apr 2026 02:08:44 +0000
Manifest this update: Fri 17 Apr 2026 02:08:44 +0000
Manifest next update: Fri 24 Apr 2026 02:08:44 +0000
Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: p4ovBkACGhJvnFUhnD9LCxWqyxfsJOQVgVxPf5ToY5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Validity
Not Before: Apr 17 02:08:44 2026 GMT
Not After : Apr 24 02:08:44 2026 GMT
Subject: CN=69e1962c-f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:a5:3e:b2:b6:5f:e7:b9:3e:85:7f:78:a5:
2e:9e:7e:1b:0c:19:f2:18:c1:8b:c7:c3:09:e0:f0:
b1:e6:71:3a:e3:07:ed:07:8a:f8:68:dd:98:0a:ef:
c1:b9:df:fa:0c:fd:b1:ba:32:17:0e:fa:11:c8:70:
1c:a6:1c:f8:6b:a2:01:5a:c7:37:e0:54:bb:85:13:
58:b4:d5:46:23:b9:03:e3:c5:42:74:c2:2e:7b:81:
25:56:bf:c3:bf:04:ec:2b:c3:14:0d:61:89:5f:e0:
66:37:20:82:a4:c4:5f:95:8e:4b:77:02:62:3a:7d:
ca:55:8c:a0:5e:5e:ec:03:cb:f4:03:70:c1:ca:6a:
79:4e:be:e2:c4:3f:58:ac:36:b8:36:aa:91:07:4b:
bc:0b:45:07:6e:ff:31:fa:81:f3:0a:e8:0b:1f:5e:
79:cb:8b:1e:44:3f:7c:6c:76:3d:40:4f:94:d9:c4:
6e:6c:25:7c:c9:4e:b2:7e:99:c6:ec:44:df:e6:19:
18:31:19:ad:eb:36:1b:3f:53:24:0f:a0:70:f1:cc:
97:ad:d2:04:3f:41:9c:cf:d1:28:76:81:ab:d6:38:
47:3b:64:76:d3:79:e2:59:6b:88:55:06:79:e6:2f:
9e:c2:68:68:52:a2:b0:f5:29:be:db:58:f9:80:1a:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:F4:6F:42:AA:34:D1:8B:89:86:75:0B:8F:73:D8:95:CD:51:E0
X509v3 Authority Key Identifier:
keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:6d:bf:3c:e4:a8:2f:40:4b:9c:99:0b:63:06:d7:ab:9d:
bd:79:60:0d:d6:61:95:55:b9:21:bd:5c:73:c3:2e:24:ba:d6:
ae:9d:14:f0:44:72:59:eb:e0:15:de:a2:ee:b9:75:53:5c:a4:
78:06:93:c7:9d:64:e9:52:82:07:0d:19:1b:42:65:50:f0:65:
14:04:0d:a6:c8:df:95:a9:ad:27:f9:55:8e:8e:50:e8:db:54:
9b:b3:f6:3e:93:64:94:4a:cc:73:17:08:9d:7d:06:0c:12:21:
32:b3:be:28:37:5e:b1:df:d0:ad:1c:94:bc:1a:cf:32:32:ff:
38:c8:89:68:cb:fe:2c:18:52:49:0c:c8:d1:51:56:e9:11:36:
b3:f4:71:8f:a6:a6:ab:26:a2:8d:e0:81:8b:82:b3:f6:60:18:
41:90:aa:d3:b1:c0:c9:5f:8a:7d:10:1a:90:a6:d5:e6:02:20:
c5:d4:34:e7:77:df:af:0e:b4:33:8a:62:f9:2f:fd:bd:a1:48:
19:54:7b:57:c4:e4:a6:12:c1:d8:1d:55:10:a3:32:99:8f:cd:
f7:31:1c:10:59:bc:e8:cc:80:dc:3a:30:b2:2b:bb:a2:b5:d6:
8f:94:b3:71:3e:0c:59:51:f4:fe:58:e6:9d:89:24:fe:51:cc:
34:9a:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:15 2026 by rpki-client