
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier: v+zNrJWhz3Ei/sDHIuZU1+QYfBeqOPlnQjIA2knpBZo=
Subject key identifier: 6C:DA:75:60:72:F5:25:B8:27:35:0B:0A:C7:33:D5:3B:10:48:40:79
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial: 1413
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number: 1404
Signing time: Thu 16 Apr 2026 16:51:23 +0000
Manifest this update: Thu 16 Apr 2026 16:51:23 +0000
Manifest next update: Thu 23 Apr 2026 16:51:23 +0000
Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: IaK/J54SFHKsXZNAOEJ+kwkUuxdYN2lfM8MHAQ84eeU=)
2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5139 (0x1413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Validity
Not Before: Apr 16 16:51:23 2026 GMT
Not After : Apr 23 16:51:23 2026 GMT
Subject: CN=69e1138b-37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:f1:78:9f:b1:13:99:ed:10:78:21:6c:10:
4c:26:4d:b2:37:cc:d7:46:b5:f9:e1:03:f5:88:63:
66:35:0e:b6:c6:bf:c2:85:37:0a:2d:10:73:42:4b:
2a:c0:17:74:93:23:f7:ac:09:04:31:39:3e:4e:34:
35:9b:cf:a1:75:21:34:ff:3f:ad:ed:e0:da:d1:1e:
11:7f:34:49:19:de:a9:68:4a:ee:8c:f9:81:6d:ab:
83:a0:61:8d:b9:84:84:5e:a3:49:73:1f:d1:6a:5c:
0f:74:b8:2b:44:4d:03:ce:ed:0d:36:0f:db:33:f0:
2f:b5:e8:c8:3f:2d:2d:47:9b:f2:5b:4c:56:ec:f8:
ef:07:cd:50:e3:63:5b:85:62:e0:f3:ef:e0:d1:4f:
ff:7e:d2:cc:69:6c:f6:2b:18:eb:6d:e7:a4:dd:c6:
b8:f4:ce:8e:9b:ec:6f:e2:ec:a8:71:d9:23:2d:7a:
a0:3e:16:b2:14:3a:c6:01:0f:b7:48:01:a3:ca:f1:
16:56:72:4b:2c:e7:05:ba:a8:31:95:0b:a6:f5:58:
8f:52:7b:a6:da:8b:32:df:d2:17:30:4f:3d:c8:35:
79:92:5c:f6:54:e2:7e:db:2f:54:15:33:f0:8b:03:
b6:ea:39:f7:91:c1:d5:39:c7:2e:13:bf:35:1b:4d:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:75:60:72:F5:25:B8:27:35:0B:0A:C7:33:D5:3B:10:48:40:79
X509v3 Authority Key Identifier:
keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:43:ca:6e:e2:f7:14:27:90:71:fb:2c:f6:dc:00:93:78:
fa:aa:b1:88:cb:50:fa:cb:ec:95:46:17:ee:36:fb:b6:fc:e2:
99:0f:1e:9f:33:b4:e5:c8:c8:13:b1:0b:11:f8:00:5f:bc:5e:
67:5d:8b:c0:7d:26:d1:63:34:43:2c:ea:64:f6:58:e2:f8:82:
ae:5b:aa:2f:4f:6f:7b:4a:f6:31:25:d3:46:d4:ca:44:4d:80:
30:3e:02:aa:33:bd:5d:9a:7d:1a:4b:16:bd:b8:50:52:58:19:
9d:a9:31:ee:d0:da:e0:57:12:30:f5:da:5c:8c:c9:5d:76:9d:
7c:8f:b1:be:bf:0b:3c:0e:ce:3d:45:3f:be:9f:30:9b:43:41:
43:12:c9:2f:92:2d:d8:11:c3:b1:a7:84:86:50:31:33:18:2f:
a0:88:18:eb:ba:10:83:45:92:43:98:bf:fb:92:de:1f:c8:97:
20:2b:73:a5:45:b1:0f:60:25:d7:f6:58:19:d0:ef:95:18:80:
7b:e9:ed:f2:09:0d:01:42:05:20:02:c6:ac:88:7d:4a:f6:33:
10:88:3f:19:b8:55:92:8a:10:91:4b:00:91:ae:eb:ca:22:17:
25:58:f0:12:26:d0:62:38:22:dc:2c:d8:9d:75:88:15:76:de:
50:e9:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:35 2026 by rpki-client