
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier: dIfQHLntKmS78iscdEKPi/q+qBFXJNzS1OvDWtMfQTc=
Subject key identifier: 0A:7B:FC:BF:07:D4:9B:C4:E9:43:EB:DB:14:56:11:F5:74:DC:A6:58
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial: 12F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number: 12D8
Signing time: Thu 16 Apr 2026 16:59:07 +0000
Manifest this update: Thu 16 Apr 2026 16:59:07 +0000
Manifest next update: Thu 23 Apr 2026 16:59:07 +0000
Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: emRqAT153Wcex6cu3KFX6jh4nKmkHd6EUdc8Nt26V3U=)
2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc=)
3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: h19/MR9hkMVPGpl7f/+5Vxrt7msI3muNoOIhYt+wOkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4853 (0x12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Validity
Not Before: Apr 16 16:59:07 2026 GMT
Not After : Apr 23 16:59:07 2026 GMT
Subject: CN=69e1155b-f49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:ed:46:9e:fb:3c:6f:61:75:ee:47:65:4f:
3a:a1:1e:2b:9a:c8:1a:e6:6f:40:43:07:87:ff:37:
5a:2f:b9:f3:52:ef:78:ea:40:6d:06:fa:9e:2e:a8:
60:c4:2c:c5:a1:19:73:f2:11:08:16:5c:c2:cb:f4:
4c:e3:6c:a5:4a:dc:09:ed:9d:6b:24:d0:24:29:2a:
4c:8c:9d:96:86:33:84:6b:e1:96:88:b0:41:7e:d9:
ca:fd:9a:1e:06:0e:f3:96:68:65:d0:ad:97:ef:7d:
2d:fa:c6:ab:25:87:fe:26:08:b0:88:ac:9b:06:2f:
5f:bb:8b:ac:f5:b4:5c:76:34:50:76:df:90:45:ca:
fb:16:fa:df:0b:f7:44:c0:ec:be:26:ec:3e:b3:ed:
1e:0a:fa:87:54:5a:a8:57:7c:e1:73:b2:c8:f7:cf:
9b:bf:12:d6:1e:d7:d2:6a:1a:16:c8:3a:be:1e:54:
f8:1c:9d:30:9b:18:1d:ee:a1:fc:e7:26:93:2f:82:
59:25:c4:57:eb:62:30:3e:6d:09:66:3e:42:2c:4e:
50:6c:29:92:be:d0:31:28:ea:a5:c9:fc:f0:5f:d4:
40:de:4c:b5:d0:08:0d:af:f2:a8:c5:33:ca:d8:f1:
5b:e5:cf:16:00:4e:47:cf:9e:c0:00:97:a5:92:e8:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:FC:BF:07:D4:9B:C4:E9:43:EB:DB:14:56:11:F5:74:DC:A6:58
X509v3 Authority Key Identifier:
keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:96:bd:64:55:b1:21:50:89:db:98:d6:39:d0:0d:31:fa:
01:4a:71:e1:b8:2e:93:8d:16:e2:20:e7:3c:df:af:64:65:a0:
a7:fa:48:21:2e:f7:ad:a5:46:ec:94:9f:80:95:be:0c:5d:e7:
b5:78:da:4d:22:88:9f:ff:38:08:1d:e0:cc:ff:24:6d:5c:d4:
c6:e6:12:e0:25:ff:3c:55:9b:3b:53:ac:01:1e:10:b4:57:50:
8a:42:14:38:49:2b:fc:cc:c4:7e:8e:c4:7b:47:f2:ea:12:83:
f4:91:86:29:97:54:ef:35:55:de:7e:bd:55:c0:35:3b:b6:eb:
7c:cf:56:ae:8e:41:60:59:4b:53:65:89:62:2c:8d:0f:06:18:
d6:0e:4b:2f:a0:83:a5:48:47:c9:32:c2:3a:e4:7f:5f:cf:da:
ee:d9:82:47:8c:50:12:a9:5e:c7:a1:38:01:7b:8f:88:23:6a:
07:02:41:e7:12:42:9f:9d:8d:df:68:cd:6b:e2:5c:37:18:42:
5e:48:09:ac:16:77:55:0f:f5:39:24:77:a9:e2:c9:2f:19:e8:
90:54:b6:36:35:fd:58:d6:dc:cc:44:f8:c0:f4:b1:bb:4d:b6:
29:d1:01:9c:ca:4b:b5:01:bb:88:a1:e2:32:26:5e:12:69:8d:
08:b3:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:35 2026 by rpki-client