
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: fjIfj4lyeNYtgok4f8aq2NlQK6IpKaPV8eMjAq25e8I=
Subject key identifier: 3A:9D:48:B4:5C:A5:4A:A8:C8:0A:A7:21:DE:5F:0D:F5:BF:D2:9B:44
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 0423
Signing time: Tue 22 Sep 2026 23:56:08 +0000
Manifest this update: Tue 22 Sep 2026 23:56:07 +0000
Manifest next update: Tue 29 Sep 2026 23:56:07 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: 0x5h6HvRS7MTgGlw8+8ZdKd+d35xVOxwXK0Ahgr2J5A=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Sep 22 23:56:07 2026 GMT
Not After : Sep 29 23:56:07 2026 GMT
Subject: CN=6ab31598-e5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:ab:ba:10:5e:21:48:4d:88:bb:2a:0c:92:
75:36:7d:a1:7f:09:07:7d:ba:04:71:4f:84:91:9c:
d3:07:a8:a6:7c:85:26:07:eb:66:5e:bf:9e:18:24:
a8:2e:53:55:34:61:67:47:e7:25:43:0a:15:8c:40:
2a:bd:62:96:7c:48:74:7e:14:97:5a:07:04:16:12:
c1:35:6e:97:1d:d0:b9:e2:03:7d:53:f1:d3:a3:c1:
ff:63:af:38:a3:93:7f:34:86:1f:ae:54:14:ad:e6:
d7:ff:74:b3:c7:37:18:19:3a:66:e8:8a:c9:91:dc:
d3:82:7c:2d:64:a2:8e:f8:4c:62:29:0f:d8:2d:63:
a6:6e:3c:08:b8:a0:7a:30:34:d8:55:c9:5a:a2:41:
31:a2:53:38:fc:f9:9d:57:c6:32:42:47:e9:0e:fc:
be:7b:be:5b:ed:ba:dc:9d:4a:21:37:9d:21:fd:e2:
1b:e2:08:ad:ff:a7:4e:67:ed:46:ae:0d:39:0e:d2:
09:ba:70:85:e8:01:47:41:0b:3c:d9:29:84:93:4a:
6c:6a:8c:ff:6a:94:98:3d:5b:8b:59:10:25:6a:0c:
ed:a6:d3:b2:26:d0:a3:5b:e8:bd:ae:a8:5b:de:2d:
e0:ef:9a:74:97:ba:b3:3e:4a:01:c9:59:83:34:b0:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:48:B4:5C:A5:4A:A8:C8:0A:A7:21:DE:5F:0D:F5:BF:D2:9B:44
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:f0:4a:7e:08:c5:3c:ed:96:c5:7b:bc:d4:44:dd:86:2a:
9d:1f:c3:a5:0b:76:29:2e:af:43:0d:0f:b8:74:a1:61:07:8a:
ef:5f:a7:92:32:81:87:e9:16:70:be:c7:5e:f0:37:92:4a:58:
89:8e:0d:86:72:f6:ca:00:12:20:8d:2a:fa:b6:78:f7:14:e2:
ed:87:99:35:d8:12:c7:0c:a1:f7:67:bd:8f:ae:de:56:c1:6f:
1c:e3:9b:5b:ad:3f:87:24:0b:1d:20:e3:9a:8b:04:4c:95:8c:
c7:65:1d:58:87:a3:05:02:e3:8c:75:54:17:31:7e:08:88:f2:
ac:bd:78:79:6b:de:d3:47:85:17:91:24:6d:d5:bd:80:0e:6d:
db:4c:4d:8f:be:66:a8:27:d1:f5:60:7e:02:8d:f0:7a:1a:13:
6a:d8:9d:e7:07:16:d1:9a:d1:21:b4:1d:d4:79:f0:54:26:89:
56:98:a7:ba:8f:c8:cc:f2:92:ba:6e:df:0a:9c:b3:03:84:dc:
32:f6:a3:b2:bd:ad:43:b7:66:e6:6a:c9:60:f3:dc:03:3e:34:
f6:0f:63:f6:0d:65:e8:60:88:b5:f4:f8:84:ea:2e:ac:64:c1:
9f:3d:35:a8:91:26:5b:09:51:54:b9:fc:46:70:63:09:f2:eb:
7f:04:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:20 2026 by rpki-client