
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier: jkX9refygPWxtqob3idzLbvDYjw+u5q/57i7pp6gU8Y=
Subject key identifier: CE:17:82:A4:D0:F5:81:BF:3C:A7:2C:B4:EF:2D:B8:74:39:79:5C:3D
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number: 013E
Signing time: Sat 13 Jun 2026 05:24:40 +0000
Manifest this update: Sat 13 Jun 2026 05:24:39 +0000
Manifest next update: Sat 20 Jun 2026 05:24:39 +0000
Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: I+SZm+IZY0P7tAhFFFJD/wLoqVghL9i+mYQAB6syoOU=)
2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: l3eydfjGEoMs5mo5Jx4Wnn5QeJIXXCfrBKeGcyLZ8Fs=)
3: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: FGzuhrRvwprB5KpbvWYZLSjwv3h28HP8C3ekeqhOVdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Validity
Not Before: Jun 13 05:24:39 2026 GMT
Not After : Jun 20 05:24:39 2026 GMT
Subject: CN=6a2ce998-4920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:b8:db:51:94:dd:e9:46:01:2b:a3:6e:94:
a2:07:35:e4:dd:c8:ef:fa:f1:78:cc:64:83:2b:f4:
f6:c9:ed:5f:07:2e:3a:d5:3b:b9:0e:8f:d0:2d:36:
95:08:3e:ec:4c:81:46:f4:b6:2e:7c:cc:f9:d1:ee:
54:a9:9e:a1:05:84:b7:8c:60:f8:a1:82:0f:54:8e:
fa:73:28:40:2e:27:59:c0:62:33:1e:56:8a:eb:1d:
83:13:0f:55:d5:d5:af:6a:87:58:24:b9:c3:e9:ed:
b0:5f:44:6f:cc:a9:ba:e1:da:ac:0f:38:f2:29:88:
b6:d4:bf:f9:3e:35:66:79:aa:39:7b:78:14:1c:e7:
8c:bc:a4:81:3e:a7:0d:34:d8:65:cc:cd:4e:75:57:
dd:04:2c:cf:8e:ec:9e:e7:6a:fa:18:2d:4e:48:8c:
d3:f0:f5:c5:dc:17:8c:2c:08:37:45:73:84:c9:29:
e2:6d:93:5a:b9:ac:3d:bd:43:bc:e1:22:7c:3f:dc:
6f:1c:4f:84:e2:c6:6b:e8:c4:43:b4:85:d0:65:59:
64:d5:03:9f:27:fb:5c:5a:60:2c:d6:18:f2:2e:0e:
32:94:66:73:57:12:56:c3:1e:4d:76:4f:4e:3e:ac:
39:7c:72:03:73:ec:00:35:3c:71:c9:3b:ea:63:09:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:82:A4:D0:F5:81:BF:3C:A7:2C:B4:EF:2D:B8:74:39:79:5C:3D
X509v3 Authority Key Identifier:
keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fc:cd:e7:10:0d:6c:e0:46:9e:a8:7c:db:8e:12:8e:f4:32:
36:a8:e1:09:0d:5c:8d:4f:43:b0:05:68:0d:20:ae:8c:c6:68:
63:df:4a:43:88:98:08:69:46:5f:9a:3e:d8:01:c2:de:54:2f:
8b:16:c9:91:94:79:17:65:fb:56:a6:39:2b:4b:20:21:30:9e:
1b:20:1d:5e:a2:a3:06:15:ed:ea:c1:6c:b8:ee:0c:4a:82:00:
ee:f9:be:a6:42:f0:bb:b7:99:82:18:ed:9e:e6:63:e0:2e:40:
ad:a7:62:fe:1e:2a:3f:03:8b:7d:47:24:12:75:10:39:b8:e3:
b3:08:53:c7:31:33:47:97:6a:9e:96:d3:5d:92:e3:51:41:9d:
65:f9:1a:d9:dd:39:ff:71:3f:c1:73:a2:60:e7:3d:ea:67:bc:
b2:f2:36:c6:82:81:a1:8e:b2:7a:d1:34:a1:ae:91:41:49:95:
44:57:43:b8:ba:ed:b4:20:22:58:ba:aa:16:b3:77:00:de:bf:
44:59:58:6a:49:67:71:ee:c4:7c:04:d3:e9:7f:c7:25:a4:cf:
ec:75:f0:39:ce:2d:27:d3:20:23:a1:7d:18:4f:60:d5:0b:9b:
b2:c5:a7:05:8d:dc:ba:36:4d:03:1d:1e:69:f6:f6:20:a9:23:
42:a3:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:09 2026 by rpki-client