
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier: 8kgDGyUlMOaPLTqZGgOGrrYBC13Vsj3TMdwmxc47fUU=
Subject key identifier: 6D:E6:8F:65:7F:E5:CC:2A:2B:F5:A0:4E:47:17:00:10:A7:AB:C9:E3
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number: 015C
Signing time: Wed 29 Jul 2026 06:27:02 +0000
Manifest this update: Wed 29 Jul 2026 06:27:02 +0000
Manifest next update: Wed 05 Aug 2026 06:27:02 +0000
Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: mlOaZjN9pM47ByGl73xTk028hzmXTI/GSnmQpGpJPUw=)
2: 9FFE9026751F11F1BBCD6C1F74A30FBC.roa (hash: XrIZ022hr5ecAsAKZgLQvfOGr3m4kyUdyD7IG0BaLXY=)
3: A8E25556751F11F18B86DC2174A30FBC.roa (hash: T5VvDjawF4KbmQBm6oXv7txmPHz68zeGZ3ul549ljEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Validity
Not Before: Jul 29 06:27:02 2026 GMT
Not After : Aug 5 06:27:02 2026 GMT
Subject: CN=6a699d36-4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:24:8a:8b:a7:31:da:49:97:9c:c0:88:74:
42:9f:4f:76:1f:3e:05:2f:cd:ca:dc:16:a0:7e:78:
b1:85:23:f3:2a:18:30:71:23:56:91:3a:b6:27:43:
3d:24:6b:9d:70:86:b0:37:33:1c:19:90:66:fc:2e:
6f:3b:bd:9c:a6:60:ad:0e:34:c9:23:54:da:98:69:
0d:75:74:08:f6:0d:03:99:6f:e8:80:84:be:5e:53:
9d:54:0e:4f:86:b4:e8:b8:a1:6f:da:bb:2a:21:05:
4d:c9:df:ee:dc:10:02:b9:34:20:d4:ce:99:12:08:
a5:e4:67:1a:d2:dd:5d:b6:e0:25:da:9c:44:65:d7:
de:ce:78:5c:dd:99:32:84:65:92:81:d6:22:c4:48:
fc:5b:f2:1d:f0:7e:1b:82:00:88:7c:7c:71:26:8c:
62:f7:1b:2f:fe:20:9f:20:5a:59:83:ce:a2:14:e8:
60:de:fe:34:d9:a6:e8:29:6f:af:fc:0d:4b:7d:27:
9f:8e:00:19:df:2d:97:0f:0a:98:8b:97:d6:cc:6c:
66:2a:bb:be:cc:af:77:6a:47:e6:ab:a6:80:60:20:
cb:45:f7:b0:57:02:9d:da:19:71:ac:22:bd:ff:bf:
6b:7b:cd:5b:31:27:68:f1:90:d3:4e:8a:82:36:47:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:8F:65:7F:E5:CC:2A:2B:F5:A0:4E:47:17:00:10:A7:AB:C9:E3
X509v3 Authority Key Identifier:
keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:65:ea:39:d0:83:39:4d:40:c7:4b:9c:0d:7d:e6:db:69:
a7:76:7d:12:54:63:5a:cc:80:48:65:d5:c7:59:0d:80:80:82:
90:db:b5:7f:e1:3f:e6:1f:7c:c3:11:f1:97:b5:a7:76:ce:33:
62:9f:00:0b:f5:8b:0a:98:4f:24:7c:1f:7b:17:30:9d:a9:17:
7b:e0:b5:5a:e0:15:cf:fe:43:ce:4b:43:73:9a:12:38:f2:ec:
10:aa:8a:47:8f:28:5c:ee:39:e2:96:3b:b9:25:c2:50:ce:63:
ca:6c:ab:e4:95:c6:9c:06:e6:ad:1d:b4:43:08:80:b3:94:e2:
e8:04:4c:56:10:d1:a1:63:af:a1:89:f6:f4:d8:79:39:1c:3c:
4f:48:f2:b1:6a:92:6c:52:5d:31:e2:ea:60:0c:e7:d3:17:c5:
8b:8a:8d:31:8a:5c:b4:80:db:34:57:29:2d:3b:9b:b6:25:bb:
35:05:fb:55:fd:10:fd:c9:79:81:06:a3:e2:9e:5e:90:b0:11:
f7:3b:3d:77:97:53:6f:e8:93:a9:f9:54:1d:c2:92:35:d3:a4:
57:6b:65:08:3e:63:88:92:47:7d:de:d6:5f:88:36:3e:d9:ff:
78:6e:59:43:a5:1a:94:40:45:76:56:a4:bc:79:f9:8f:88:f8:
52:10:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:01 2026 by rpki-client