
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: Bbg8i1nkqcDzq/NlcffZwLNWsAAKnp81yDn3Td0up04=
Subject key identifier: B5:FA:03:33:D6:83:33:64:B6:E2:1F:08:83:90:FB:0C:C3:1E:58:CE
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: DE
Signing time: Mon 27 Jul 2026 08:58:31 +0000
Manifest this update: Mon 27 Jul 2026 08:58:31 +0000
Manifest next update: Mon 03 Aug 2026 08:58:31 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: Ca74uXLEk6+r6ZOlc+XN+HiuZV/DrkMh63yahXE7q38=)
2: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=)
3: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=)
4: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=)
5: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=)
6: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Jul 27 08:58:31 2026 GMT
Not After : Aug 3 08:58:31 2026 GMT
Subject: CN=6a671db7-4122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:c6:73:d7:2f:62:a6:ad:8d:f6:e3:f7:b7:
73:61:54:f6:b0:e2:bd:66:9a:76:3c:93:31:95:c3:
5d:42:59:c0:96:0c:3b:05:27:a9:c8:9a:0b:c5:48:
0a:a7:36:31:6a:5d:01:1b:d4:ee:47:ff:73:38:ec:
68:bf:d0:1d:7c:c9:52:c3:81:6b:9d:08:a5:17:1b:
48:49:10:5a:aa:18:fe:6d:e2:ab:8a:d6:4d:bd:ba:
ca:95:15:91:80:02:c4:3f:62:91:1a:e1:e7:aa:cc:
c5:36:73:80:42:e4:26:65:65:b8:f6:7f:dd:b1:d7:
e3:8a:54:86:21:28:e5:e7:0e:2b:f1:ab:1b:47:49:
93:6a:b2:36:9b:3a:fb:76:94:cb:c7:91:74:bc:21:
67:95:96:fe:dd:8c:bf:51:db:5b:5e:de:80:10:76:
2e:b4:c0:45:81:30:d8:e6:15:40:db:98:28:06:65:
0c:b3:29:79:9d:d4:61:d1:de:e7:7c:39:52:84:02:
36:cb:74:34:7f:28:61:4c:1d:19:16:5a:48:6b:da:
99:41:7c:92:99:7c:de:ee:63:d4:50:cb:72:90:50:
47:5b:bb:04:c2:63:10:68:26:ed:4b:4f:0a:55:5e:
c7:80:56:51:38:ff:a2:62:5c:3e:1a:3c:7a:42:50:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:03:33:D6:83:33:64:B6:E2:1F:08:83:90:FB:0C:C3:1E:58:CE
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:52:25:64:bc:c1:a0:b0:2d:28:1d:92:0d:5c:f7:67:81:47:
44:d9:fc:81:cf:9f:f6:c6:d2:0c:53:6e:c7:5e:98:c5:c8:97:
d1:68:e9:63:d6:e5:fc:7e:ee:78:14:c5:d5:9e:94:28:da:59:
f2:b7:4a:ac:15:27:41:61:59:34:1c:39:4f:31:7c:ae:06:46:
61:f3:3e:d0:df:99:d2:ee:35:d7:c9:24:71:fe:70:a8:ef:13:
84:12:cd:af:3b:47:3f:04:c8:32:29:86:ce:81:e9:c4:36:21:
59:20:af:8f:9c:5f:b1:29:79:44:27:b9:d6:f3:26:51:69:18:
33:70:86:3c:3c:df:8d:e5:8f:ab:09:90:03:c7:42:73:21:3a:
db:57:e2:bf:95:47:14:57:52:ec:24:8b:ac:23:ed:2a:28:75:
3a:28:dd:94:2b:4e:d4:47:c8:5c:e4:31:e4:98:24:4c:87:73:
c0:1b:24:1d:58:5f:a0:45:6d:6b:26:61:8a:f0:43:f9:fa:26:
00:db:df:ad:f7:6e:cf:86:b2:ec:cd:12:87:27:68:22:2f:90:
c7:bb:44:56:a1:64:ae:10:d9:92:c2:b7:15:06:e2:09:59:05:
a8:63:fc:9d:af:9a:8e:82:85:a1:01:fb:cd:4e:eb:82:6f:64:
17:65:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:45 2026 by rpki-client