
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: d8CmP8/RbDFf7l7Foh3BIeO7kttBCUFlL9EQ/Wp3SwY=
Subject key identifier: 6C:25:7B:05:D2:99:11:33:19:51:8C:C4:E0:AB:2C:58:22:F6:51:75
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 0405
Signing time: Mon 27 Jul 2026 01:29:03 +0000
Manifest this update: Mon 27 Jul 2026 01:29:03 +0000
Manifest next update: Mon 03 Aug 2026 01:29:03 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: WpbEqGSDhrK5QJyxG1egt/pWvrka4Hm4TEfsgW8Wd+U=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Jul 27 01:29:03 2026 GMT
Not After : Aug 3 01:29:03 2026 GMT
Subject: CN=6a66b45f-1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:4f:cf:82:e0:c1:a9:e3:00:2c:d2:fe:13:
42:a4:95:ca:85:f8:2f:75:16:c0:a2:05:87:ec:23:
a9:f1:be:09:3d:6e:8c:31:78:81:3c:37:f2:5b:62:
99:82:9e:7a:da:11:de:e6:7a:ca:6f:2b:77:81:99:
1c:b4:6f:ca:71:5a:cc:66:0b:e1:75:4b:0b:ee:31:
69:e2:f6:ff:fe:68:0a:5f:f3:95:ab:fe:3c:d7:ff:
51:5d:24:fb:6f:17:bf:ae:c3:0e:e4:dd:28:6c:b1:
3c:a9:53:8f:1f:37:9c:52:e7:16:ee:18:29:23:ba:
64:10:b7:52:62:8b:a7:27:c4:e9:9f:c8:b5:66:00:
a2:a7:72:b1:a0:27:61:c1:e6:be:4b:0c:7c:a4:f5:
9c:d4:4d:7b:9c:6c:43:26:51:7b:2b:01:41:5b:8f:
a1:a1:cc:3d:05:3d:7f:b2:5a:29:c2:9a:97:42:c1:
c1:4c:8b:34:b1:dc:5d:35:81:05:77:36:6d:b3:db:
56:13:60:ea:fc:e5:1c:6c:05:2a:78:1f:6a:ac:ba:
e3:d1:b8:5f:9f:f7:29:a3:a5:b7:f0:cb:60:45:55:
f1:e4:2c:50:fa:6d:ee:66:21:26:04:4b:2a:2b:43:
84:36:81:e2:8c:48:1d:30:11:8a:64:56:ad:4d:63:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:25:7B:05:D2:99:11:33:19:51:8C:C4:E0:AB:2C:58:22:F6:51:75
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e6:be:82:dc:77:be:a3:d4:e5:08:58:4f:2f:28:75:86:c4:
61:41:7a:71:e9:b1:bb:9e:de:13:0d:bf:b6:9b:f7:8e:f7:d6:
8f:13:ee:cf:87:67:3e:4b:e1:c3:dd:5d:94:06:e7:60:57:e8:
e8:1f:cf:ef:de:84:51:fa:b8:52:c5:a0:9b:91:2a:d9:38:c2:
f4:a8:b2:5a:fc:03:02:f5:40:d6:e1:51:3f:a4:1c:85:57:1f:
8b:27:c8:f3:ba:eb:9e:ef:c9:93:db:7c:86:5b:f1:0a:43:a8:
40:c4:8c:d7:57:eb:2e:93:b8:ad:a6:3b:52:c0:b8:2c:57:ad:
0d:74:cd:1c:85:cd:b8:f7:a7:7e:43:c1:7d:3f:f2:ee:c2:7d:
bc:0f:4e:d3:e5:aa:f1:75:c6:87:52:a7:b2:82:f6:99:af:4a:
f5:8f:f4:9b:64:32:71:14:40:fa:65:80:07:8b:7d:86:da:f9:
2f:51:37:e5:3b:a0:e3:67:9a:6f:aa:9f:19:b1:c9:aa:06:bb:
ed:2b:06:50:4b:5a:07:0c:93:83:e3:fa:21:b6:d7:bc:e7:30:
56:fe:d8:ab:dc:2e:8f:87:67:ea:ab:65:a2:f1:2b:6f:a6:78:
59:f5:88:f0:76:1a:b0:d3:a0:a1:a3:55:4c:3b:c0:68:17:71:
f7:8f:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:54 2026 by rpki-client