
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: JfaQgD2yfJdOdQrWBokCuopzL7LjMhFNVD0nqgSVrmI=
Subject key identifier: 51:45:3B:9D:FB:19:85:B3:DD:A4:C2:64:A3:8B:E2:61:C0:A5:58:65
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 02B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 02A8
Signing time: Mon 21 Sep 2026 01:34:45 +0000
Manifest this update: Mon 21 Sep 2026 01:34:44 +0000
Manifest next update: Mon 28 Sep 2026 01:34:44 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: rGMcYRma/b4Hs7N/CBMWGwFZEgyS3Qv/BWZg17EfDeE=)
2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Sep 21 01:34:44 2026 GMT
Not After : Sep 28 01:34:44 2026 GMT
Subject: CN=6ab089b4-e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:58:b4:3b:4f:2a:7c:20:c2:92:af:7c:91:
eb:19:e0:21:26:a9:86:53:1f:da:16:38:22:c2:c4:
78:65:e9:c6:a5:52:81:da:26:e9:7f:d1:56:92:58:
24:6a:05:68:86:70:be:a4:07:92:cf:f3:d7:c6:55:
07:08:c9:64:89:c0:f8:28:d9:24:f3:2e:a3:4b:ce:
03:c0:99:08:8b:bf:75:88:f6:d7:7f:ba:a2:04:b9:
f5:9d:4c:a0:22:34:65:af:3e:80:99:b9:72:0d:24:
b7:c6:60:8d:f9:c0:8e:82:81:14:74:cf:af:de:36:
56:e8:67:15:a1:0c:c1:bf:99:95:6d:42:73:87:fc:
71:08:36:6c:ef:2c:75:43:cd:b8:c9:69:1d:19:cc:
24:7c:e8:f5:d5:49:f4:f9:83:27:ae:59:c3:24:c1:
7b:76:d0:4d:9d:11:83:78:ae:75:bb:27:42:d7:97:
12:bc:cd:c1:90:d0:67:69:f6:8d:43:91:11:fe:5b:
c8:0f:f0:33:f5:4a:10:a4:73:b9:bd:06:e9:1d:69:
f5:e9:df:73:c1:b1:0f:b6:c9:b6:be:dc:e1:62:84:
4d:07:95:a9:7d:d0:8e:6a:b6:5a:73:da:92:b8:80:
46:24:5a:4a:aa:ae:97:99:23:43:e4:b2:ad:84:df:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:45:3B:9D:FB:19:85:B3:DD:A4:C2:64:A3:8B:E2:61:C0:A5:58:65
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:03:d5:90:4c:d0:dd:78:f2:e7:3a:34:25:bd:cb:29:7d:
42:27:63:29:0f:28:f8:5b:f9:05:92:43:3d:40:65:36:4e:f7:
51:a4:bf:7d:e2:6d:9f:5a:b9:f7:82:8b:f3:96:72:ab:a6:3e:
b3:60:b5:55:fb:67:46:fe:0e:4a:f4:3a:e5:ac:cc:37:f8:fa:
73:b4:aa:4f:e1:38:bf:ea:cf:78:34:32:d5:45:0d:d3:53:08:
94:78:2f:33:ab:3c:db:c7:3f:d0:d4:85:4e:52:83:70:11:69:
b2:94:98:a7:41:f0:33:5f:85:3c:9c:ee:e7:09:a4:e7:79:d7:
0f:3b:1d:be:64:b6:71:2f:0c:c9:6d:72:f7:6b:b9:18:bf:ce:
33:2f:55:58:f4:8c:d0:9c:38:96:c7:13:d7:bf:67:54:9f:d7:
05:03:0c:f8:ec:55:32:e9:86:e5:0d:c6:fe:de:a1:4d:a1:5c:
d6:ca:b9:5e:5e:6b:60:bb:65:dc:ea:2c:50:5c:34:de:62:ae:
fc:e9:05:a6:c4:7e:23:36:8d:48:0c:79:29:32:dd:c6:33:e8:
fc:26:22:b5:13:e5:b4:7b:1d:ac:a3:cc:40:54:bf:f1:d1:49:
cb:ec:45:35:02:e4:7c:3e:4a:3b:31:92:41:79:b2:f0:a8:5c:
c6:7e:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:45 2026 by rpki-client