
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: tIvBrwVwwABiW9jN18fahM80GA14rOHICI0htQbI7jM=
Subject key identifier: 35:B8:57:01:79:0B:07:9D:C5:1C:F4:25:06:13:1C:68:70:79:35:75
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 0259
Signing time: Fri 17 Apr 2026 02:02:56 +0000
Manifest this update: Fri 17 Apr 2026 02:02:55 +0000
Manifest next update: Fri 24 Apr 2026 02:02:55 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: ONOvDQQdyH9cY+em/sBtuhkniPudbN1uvBJbcYXjcyU=)
2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Apr 17 02:02:55 2026 GMT
Not After : Apr 24 02:02:55 2026 GMT
Subject: CN=69e194d0-c7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:81:5d:71:a6:af:f0:b5:f9:99:4a:2a:b2:
d6:63:2f:c9:48:ad:ec:22:9b:da:6c:52:bb:7d:6c:
ae:fd:c5:7f:2d:3a:43:c2:ea:eb:c0:82:82:4f:b0:
65:4f:4a:e5:12:bb:20:25:d4:78:c9:a5:c5:93:c0:
71:cb:3b:47:3f:51:84:00:14:1e:f8:c5:d5:55:0d:
ce:f6:40:16:79:d8:f2:85:9a:42:30:22:53:92:e4:
45:d2:9e:12:ee:0b:7f:64:e2:2a:8e:67:26:bd:91:
fc:16:d1:05:f5:7c:e2:aa:55:27:e4:b8:d9:29:e4:
4e:f7:94:60:ba:e2:36:26:8f:a2:ba:cd:c3:6a:cc:
dd:da:dd:ac:66:f4:3b:1e:86:3e:b6:cc:dc:5e:84:
f2:5c:bb:08:95:ae:53:eb:24:8e:dc:11:de:0b:22:
a1:23:88:89:e9:02:60:36:5b:6a:59:36:d2:eb:b3:
78:40:3a:4a:ed:0d:15:e4:1b:96:5e:60:f8:29:ff:
4e:d5:8a:84:80:6a:47:3f:26:70:a0:22:71:b4:5d:
d4:45:91:4a:c4:09:32:15:69:62:94:85:4f:e5:ba:
58:e2:e0:5e:a5:a0:3c:65:22:92:7f:fb:e1:98:2d:
42:9b:b4:e1:96:59:67:e1:77:f2:ee:33:2e:c2:f5:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:57:01:79:0B:07:9D:C5:1C:F4:25:06:13:1C:68:70:79:35:75
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:f0:7f:35:18:eb:67:d6:2c:87:a5:a6:3b:37:b8:8f:74:
26:90:ce:e2:f4:0f:ae:f5:3a:30:7c:f0:fd:96:e4:d2:e2:cd:
25:54:6a:e3:15:c7:51:0d:3f:14:75:6d:a8:26:e8:08:80:b2:
c4:0d:95:49:dd:7f:21:49:ca:a8:bd:41:7b:ca:5f:bf:33:c5:
4c:8e:f1:05:73:5e:ea:5f:32:ec:4d:fb:a7:a1:e5:97:c7:83:
d2:43:10:1e:88:17:26:65:ed:af:fd:f2:a6:a5:9a:c1:ac:79:
f7:0b:37:83:55:ab:55:93:8a:29:0a:83:8a:76:87:32:75:85:
ac:3e:53:04:66:f4:37:87:1a:d8:b6:0c:d4:76:71:0a:45:cf:
4a:54:42:26:7f:31:48:82:a8:e3:51:e1:82:2f:d0:09:44:ab:
13:28:b5:f0:13:5c:2e:b4:11:f2:02:a3:c5:28:71:c8:76:5f:
13:6e:f1:55:5f:5d:7a:41:ea:c7:d2:77:ad:d9:72:51:39:89:
af:30:b0:4b:81:57:f6:3e:f5:d3:b2:09:57:25:d1:16:ec:16:
53:a6:23:0b:cc:e0:83:5a:a4:0f:8c:af:8d:ad:9f:20:ed:2a:
99:1f:e5:26:04:8d:b7:83:18:54:4a:1a:d7:98:27:34:2f:5c:
0c:b6:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:42 2026 by rpki-client