
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: 0r8Shhk4i8+LUWrI/Hz8UufXhsMi2IWa2NQjPanGXGI=
Subject key identifier: 40:48:15:22:AD:F3:5A:6B:BD:34:40:CF:5F:D0:03:76:F2:5D:A3:F9
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: 8C
Signing time: Sun 01 Mar 2026 22:25:46 +0000
Manifest this update: Sun 01 Mar 2026 22:25:45 +0000
Manifest next update: Sun 08 Mar 2026 22:25:45 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: 448X2Ws71xieGNBuv3JMd16SGpSLnQeg+f/KwbjXNIU=)
2: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: M8odrWp11xwPayPr1xVWIoKWwAfvrI8IVkAjTpLwwzk=)
3: C24679DC741211F0808A8240C4F9AE02.roa (hash: mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=)
4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=)
5: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: V0mFWyb8wDT9djSAbQ4T53u6v/WrYdwA1bskEFmhhp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Mar 1 22:25:45 2026 GMT
Not After : Mar 8 22:25:45 2026 GMT
Subject: CN=69a4bcea-e629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:d1:cb:c7:9a:b6:62:64:ad:44:f5:7c:f1:
08:5a:0c:8a:d5:fe:b7:3e:7a:b0:86:af:68:2d:f3:
0d:71:dc:21:20:cd:39:90:d6:72:0d:a4:5d:01:2f:
90:61:c2:ce:c8:79:8f:08:f1:7c:67:70:ea:34:38:
56:ce:b0:b5:4e:9b:52:79:df:b7:1e:8e:31:a6:e3:
d3:2d:f8:8c:7a:90:3c:89:b8:a6:19:ab:94:11:de:
1b:ae:6d:b6:5e:31:d1:04:06:06:26:0a:ac:d6:b9:
d1:a4:78:06:4b:62:ab:c3:ff:b2:30:11:b8:77:d2:
c2:3a:f4:ad:42:b8:f1:12:ed:17:e1:19:75:dd:f0:
3e:43:85:cc:c5:d2:43:68:15:b4:d9:7a:54:45:c8:
75:87:d0:ba:0f:f6:67:44:6d:ac:a3:07:4c:f6:bf:
fb:9f:ec:77:05:e9:a4:a9:39:d3:52:da:0b:df:09:
08:fb:f9:0e:8b:16:3a:30:8d:10:f7:d6:ab:16:fe:
19:e7:e6:84:76:61:df:4e:57:b7:4d:d5:d6:45:ce:
72:f9:cf:19:71:1c:9c:91:8e:d8:33:3d:65:c4:56:
3c:e1:0e:84:6a:b8:be:1d:82:6a:cd:f1:7d:af:3a:
45:27:83:d8:36:4c:b1:87:1c:b1:8b:29:0e:b4:df:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:15:22:AD:F3:5A:6B:BD:34:40:CF:5F:D0:03:76:F2:5D:A3:F9
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:63:f1:97:ec:1f:b0:e3:9c:c3:68:2c:2d:06:4a:80:1a:
77:55:39:d2:14:22:e3:26:39:0d:91:0d:40:ef:84:7b:e4:b1:
33:0c:e3:11:a0:a5:3e:de:ff:4c:bd:29:78:83:bb:ac:e6:c5:
33:36:4a:b4:0e:3a:c7:3c:62:95:a5:d5:a7:47:12:cd:2d:b7:
2c:88:f6:a2:0e:09:99:e7:41:ad:ca:2d:62:4e:6d:dd:de:bc:
c1:c9:74:29:89:0e:b1:c5:76:03:cc:e2:20:fc:0f:ca:99:b4:
e4:89:1f:5c:12:2c:29:e7:69:16:f3:a3:3d:00:95:ec:78:df:
5b:69:ad:ba:d3:31:e7:fa:c7:78:5d:fe:23:50:38:e5:29:2a:
f0:af:03:ab:e6:6d:17:aa:fa:e2:33:66:da:65:b7:be:c1:23:
ca:25:fc:4a:1f:3c:a4:13:89:82:24:73:b4:3e:af:31:87:4c:
a3:6c:8c:00:21:d4:98:22:0a:de:05:bc:c9:ff:e5:70:e7:32:
d5:f7:b1:59:a4:c2:74:45:68:df:3d:16:b1:6b:50:65:44:f2:
b2:18:d0:fd:4a:7e:e1:7a:f5:d8:e0:fb:91:3c:30:50:7b:e0:
d6:f8:5f:87:02:bd:19:90:64:66:3a:60:f9:17:e7:3a:e4:63:
4a:8d:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:02 2026 by rpki-client