
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier: QKY77k5m/BejMdFOrPH1uvK2fz7Pql3u0RyOEzRXOi8=
Subject key identifier: 1D:14:38:CA:24:EE:E1:5A:92:5B:5A:E5:52:3B:0A:58:2F:18:54:52
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number: 0185
Signing time: Tue 13 Oct 2026 05:20:14 +0000
Manifest this update: Tue 13 Oct 2026 05:20:14 +0000
Manifest next update: Tue 20 Oct 2026 05:20:14 +0000
Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: drewCQHylaub8oJ2lkOpeMSnTHGCuLUC65m5JmMmSfM=)
2: A8E25556751F11F18B86DC2174A30FBC.roa (hash: PaNrYvdUMpaq7s0U71AzcQTmBAuCwKm8MHpRbLtcUiw=)
3: 9FFE9026751F11F1BBCD6C1F74A30FBC.roa (hash: XqfEc7ppA99lNnstkL3YjiVbqfe4gduuWVc96lLw1Bs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Validity
Not Before: Oct 13 05:20:14 2026 GMT
Not After : Oct 20 05:20:14 2026 GMT
Subject: CN=6acdbf8e-d95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:f7:16:a0:65:ad:3a:8d:82:15:d7:30:c8:
6f:47:6d:34:0a:62:bb:2b:65:da:fb:9f:14:3d:a5:
11:ae:5b:33:db:74:94:1b:23:59:4e:22:20:87:40:
f0:c9:cb:89:76:4d:c9:a0:f0:e6:c0:95:91:e1:1e:
a9:30:78:17:b5:5b:29:6b:66:39:39:d2:18:63:71:
1a:79:57:87:3c:6c:86:c7:85:0c:df:2f:04:dc:72:
eb:1a:98:d7:6d:f2:9f:08:92:4c:6e:1e:ad:65:9a:
8a:eb:85:cc:cd:21:78:e9:31:97:f2:92:46:c9:4c:
70:d4:72:f4:22:33:ad:02:96:02:e7:59:82:1c:d9:
5a:a8:f3:dc:13:15:71:75:94:35:ad:7e:dc:78:f6:
b5:6a:a4:4d:de:36:aa:3f:62:67:77:7e:6e:5b:a9:
6e:b0:1c:91:7e:e7:d7:40:3c:68:1f:6a:ed:b5:1b:
3d:c6:4f:e7:81:cf:55:7d:3f:fe:7c:0f:1f:d0:70:
34:76:7a:c8:21:78:90:fa:05:e8:c9:2e:71:a4:5f:
1d:e9:d6:e6:bb:53:af:f9:1a:97:26:6d:0a:85:ab:
af:ee:02:b6:cb:4d:97:a1:15:ea:43:5b:1e:19:96:
36:e0:ae:0b:a8:14:92:01:25:46:b3:43:22:be:02:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:14:38:CA:24:EE:E1:5A:92:5B:5A:E5:52:3B:0A:58:2F:18:54:52
X509v3 Authority Key Identifier:
keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:26:2c:13:23:ee:99:6c:80:34:b9:4c:2e:73:86:82:ec:a6:
61:43:72:35:98:72:01:94:9f:d8:1e:dd:67:e1:9b:e4:a5:a2:
50:af:76:81:99:e6:89:8a:5a:cb:09:24:46:20:e0:35:66:e1:
6f:65:1a:1f:fb:01:95:25:1d:66:76:85:f2:de:fd:f7:4d:2f:
76:54:bf:6d:ac:e9:b0:8d:3f:1d:78:26:84:e0:75:f2:56:81:
f1:1a:97:84:a4:14:cb:4c:09:7b:12:63:f3:b1:15:b2:87:c8:
94:80:8e:a8:22:5d:e4:d5:ba:45:95:d7:c2:99:fe:9a:36:38:
f6:a0:e7:85:4c:a0:2b:9c:9a:8d:9d:1d:9c:e6:eb:fa:77:03:
55:c7:32:48:6f:0d:55:7c:d9:7b:c9:b8:66:7a:6a:75:40:e8:
1a:86:7b:b4:ac:f8:75:3d:5b:de:b6:69:91:4b:c6:42:6c:6e:
7b:6b:d1:a1:e3:9b:00:5b:56:3a:ee:6a:3b:67:07:1a:18:2b:
49:32:79:bc:e3:d1:91:23:f2:8d:c4:59:78:14:61:73:4e:c2:
47:72:8a:fa:c7:a9:56:54:a8:80:99:9d:e9:59:c3:bd:fe:6a:
62:ed:ab:34:ad:0a:1d:1e:91:74:5f:0f:aa:d9:5b:cb:40:77:
78:b8:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:20:12 2026 by rpki-client