
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json)
Hash identifier: ZsTBFBGMe9fwh28bJ8wCE0PnZ8Xapz0xA4r1HTo19Zk=
Subject key identifier: 0E:4A:5E:32:25:13:4B:A8:D9:21:63:A2:C7:00:42:69:96:D1:8A:E4
Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
Manifest number: 01A9
Signing time: Sun 01 Mar 2026 04:59:36 +0000
Manifest this update: Sun 01 Mar 2026 04:59:35 +0000
Manifest next update: Sun 08 Mar 2026 04:59:35 +0000
Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: yIh3p3flMmTG3+YrRHK1Noeaqc8qtOLViZ7+ZZcI5s0=)
2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: T7R8nJe2MmGkA+MfYtiQhvIQ2foWHqQ+M3uuOBpD0wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl
rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Validity
Not Before: Mar 1 04:59:35 2026 GMT
Not After : Mar 8 04:59:35 2026 GMT
Subject: CN=69a3c7b8-8bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:ff:12:ba:70:ac:a7:1e:72:b9:72:d7:85:
8a:f1:94:d3:eb:85:be:1a:03:63:6f:37:11:a8:37:
15:f4:19:ab:56:e7:aa:23:05:b9:fe:7f:44:3c:12:
4d:66:64:85:f0:48:22:f4:b3:d6:ee:5f:5c:19:09:
cf:c6:8b:84:96:92:2b:f1:12:9c:ed:98:b9:c1:ff:
98:94:f4:02:7e:60:36:54:99:f3:67:77:c7:5a:1e:
be:50:7e:42:23:00:b2:40:d8:6d:09:c2:56:cb:80:
6d:f0:92:dc:40:b8:e7:82:7b:f4:3b:9b:40:8f:20:
61:36:8f:68:79:8f:38:a4:b1:e4:42:c9:96:17:3b:
ae:a1:dc:c8:18:41:5b:f0:b5:60:ed:e3:77:ca:7e:
ed:e6:44:5c:66:86:94:88:0e:85:96:43:fc:02:d9:
73:28:b1:45:96:67:da:4c:a3:bf:c2:d1:9c:86:d1:
24:4d:70:71:c2:3d:c7:7d:73:2c:51:64:ac:6e:8e:
5a:93:3d:dc:3d:01:c5:54:25:52:25:f4:41:47:a0:
bb:e3:d6:bf:1c:19:48:3e:63:7a:5e:5f:18:03:33:
f5:20:2a:60:c3:27:b3:18:c8:66:9a:54:c8:ec:a6:
cf:dd:94:dc:d3:c2:1b:33:79:68:f6:73:2e:df:a2:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:5E:32:25:13:4B:A8:D9:21:63:A2:C7:00:42:69:96:D1:8A:E4
X509v3 Authority Key Identifier:
keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b2:e0:39:7c:68:c8:d6:1a:f7:0e:69:57:b3:17:7d:fe:93:
62:12:2a:94:fb:82:38:27:a0:73:08:d8:c2:4a:8d:a5:93:ef:
a8:45:56:a1:47:98:31:6d:1f:86:d1:00:b5:0c:5b:88:b4:3a:
15:9b:0a:be:f7:6f:97:2f:04:d7:60:7b:82:a5:1e:1f:7e:6f:
ee:9c:2c:b6:53:ee:c1:98:10:01:37:b2:fb:94:21:67:84:1e:
cb:b7:b3:56:d3:3e:78:c1:09:0c:5f:6d:cd:b0:c8:f9:dd:5b:
14:c3:b3:65:a8:d7:e2:a0:e3:11:99:d0:49:65:29:8b:45:30:
14:50:49:ae:14:a7:7e:7a:b8:9e:66:4b:69:03:a9:51:26:9a:
74:7a:08:cb:4f:5c:de:c1:da:be:4b:df:da:9a:06:ea:9a:a5:
12:99:53:24:cb:30:a4:62:68:78:3e:4c:f8:7e:30:cc:1c:bf:
ef:a3:51:56:df:3f:ff:45:63:c5:27:0b:ec:ab:9a:75:22:85:
38:35:78:81:cc:0e:bd:11:76:11:d0:34:8b:d4:e4:37:d8:21:
96:de:8c:40:9d:43:20:d2:7a:60:f7:56:1b:5b:fe:ff:f4:c1:
04:6b:95:c8:d8:30:a5:f6:3a:47:f3:6e:de:bb:91:3d:66:53:
3c:d4:a5:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB
NkEyQTY0RDgwHhcNMjYwMzAxMDQ1OTM1WhcNMjYwMzA4MDQ1OTM1WjAYMRYwFAYD
VQQDDA02OWEzYzdiOC04YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZL/ErpwrKcecrly14WK8ZTT64W+GgNjbzcRqDcV9BmrVueqIwW5/n9EPBJN
ZmSF8Egi9LPW7l9cGQnPxouElpIr8RKc7Zi5wf+YlPQCfmA2VJnzZ3fHWh6+UH5C
IwCyQNhtCcJWy4Bt8JLcQLjngnv0O5tAjyBhNo9oeY84pLHkQsmWFzuuodzIGEFb
8LVg7eN3yn7t5kRcZoaUiA6FlkP8AtlzKLFFlmfaTKO/wtGchtEkTXBxwj3HfXMs
UWSsbo5akz3cPQHFVCVSJfRBR6C749a/HBlIPmN6Xl8YAzP1ICpgwyezGMhmmlTI
7KbP3ZTc08IbM3lo9nMu36KevwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5KXjIl
E0uo2SFjoscAQmmW0YrkMB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3
RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4
eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLLgOXxoyNYa9w5pV7MXff6TYhIqlPuCOCegcwjYwkqNpZPvqEVWoUeYMW0f
htEAtQxbiLQ6FZsKvvdvly8E12B7gqUeH35v7pwstlPuwZgQATey+5QhZ4Qey7ez
VtM+eMEJDF9tzbDI+d1bFMOzZajX4qDjEZnQSWUpi0UwFFBJrhSnfnq4nmZLaQOp
USaadHoIy09c3sHavkvf2poG6pqlEplTJMswpGJoeD5M+H4wzBy/76NRVt8//0Vj
xScL7KuadSKFODV4gcwOvRF2EdA0i9TkN9ghlt6MQJ1DINJ6YPdWG1v+//TBBGuV
yNgwpfY6R/Nu3ruRPWZTPNSlGw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:04 2026 by rpki-client