
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: k/ktieIMt1sT2Bdb0p7deqi4rXEV3brkrALPEj0QRDQ=
Subject key identifier: 84:A5:EC:60:F7:D8:36:35:58:98:4C:78:79:2D:4F:BE:C6:9D:4C:51
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 0275
Signing time: Sat 13 Jun 2026 02:02:46 +0000
Manifest this update: Sat 13 Jun 2026 02:02:45 +0000
Manifest next update: Sat 20 Jun 2026 02:02:45 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: pUrHw5S+gPsIxzKaqdvGPYJoerFt7GvgKWDvttkxkhI=)
2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Jun 13 02:02:45 2026 GMT
Not After : Jun 20 02:02:45 2026 GMT
Subject: CN=6a2cba46-1e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:8b:bb:27:dd:67:90:62:1e:98:cb:56:84:
52:87:cf:65:44:76:42:18:66:f5:4b:3f:e3:ca:9c:
75:41:80:89:bc:68:c2:3d:63:5e:df:e4:5d:90:0c:
f5:bd:8c:dc:15:4b:d7:f4:ad:8f:66:08:29:48:ce:
d3:c3:62:98:45:2f:2a:80:47:d2:75:5b:46:93:a1:
6f:2b:9a:e4:ce:d9:cd:c6:75:3a:ed:5d:33:33:34:
ea:60:0d:3a:c2:99:04:58:a8:a9:fa:25:61:68:53:
c2:d2:02:62:09:31:40:ae:d2:ef:97:8a:4f:1b:cd:
c3:72:ce:eb:5e:9c:6f:7a:b7:ac:c7:5b:ea:0d:a9:
53:86:c0:66:31:11:13:a3:79:2c:55:0b:7a:41:04:
98:fe:08:ac:af:12:49:35:74:6c:7c:3c:32:34:d9:
7d:c9:61:8f:5f:38:19:fc:65:d2:70:ee:a2:58:d6:
ce:b8:c0:f2:46:17:2c:4f:e4:71:2f:4e:bd:cc:f8:
7f:12:9e:d5:ea:99:bb:e5:cd:71:14:c0:c7:83:e6:
96:24:04:cf:f0:d4:bb:c2:8d:b5:b9:0b:6d:18:ad:
80:a5:f2:8e:72:12:cb:07:ac:96:7e:6f:87:15:e0:
71:b7:57:7d:c2:e2:e3:19:c2:95:dd:e2:4a:08:e2:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:EC:60:F7:D8:36:35:58:98:4C:78:79:2D:4F:BE:C6:9D:4C:51
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:89:51:87:ba:36:d9:8d:fc:df:7a:e6:87:73:ed:03:ae:06:
b1:06:82:a4:d6:ae:66:ba:ad:b8:ee:96:fe:f2:b8:6f:97:0e:
cf:6a:a0:11:4c:d7:1e:d3:e9:15:3f:a5:39:14:f3:31:f3:75:
47:08:d3:00:81:1e:3f:fa:49:31:5a:5d:7b:7b:58:a4:b5:52:
c4:95:80:7f:70:76:fc:48:fd:2c:2a:20:56:eb:ac:18:3b:70:
46:24:dd:7c:2e:ea:76:18:93:ad:4a:dc:91:4f:01:f7:bb:b6:
a3:19:78:3c:f9:15:b9:2e:5b:3f:a7:18:bd:57:5b:b1:f9:7a:
57:ae:ae:3c:a1:16:60:dc:31:17:a6:60:ed:a8:a1:61:e9:32:
80:6a:d1:fc:a5:b7:e1:91:66:84:ea:f6:00:55:44:b4:5d:84:
87:fd:92:a0:9c:35:5d:ae:57:33:c7:98:f5:02:65:f8:c4:83:
93:01:99:f4:f7:6a:3a:ff:f0:05:03:c7:e2:1c:29:76:e9:9a:
61:5c:f1:af:cb:4c:5a:95:ee:d8:fd:8f:d8:62:ba:f3:d6:78:
ce:b6:b4:3b:4e:8c:43:e3:47:58:3c:20:2a:ae:0b:ce:cf:32:
4d:63:b1:10:08:e8:be:fb:4a:12:17:77:72:a2:79:31:88:fb:
4c:db:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:40:47 2026 by rpki-client