
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier: VsZ4BuSRLaDVatcxUETx79GKObNDfSBITaEhm9VyY20=
Subject key identifier: 74:AA:84:16:68:9A:AF:A9:13:A7:C2:C2:9A:71:7A:2A:84:63:AD:2E
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial: 1430
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number: 1421
Signing time: Fri 12 Jun 2026 16:52:08 +0000
Manifest this update: Fri 12 Jun 2026 16:52:08 +0000
Manifest next update: Fri 19 Jun 2026 16:52:08 +0000
Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: Zizxas+Uo90yY8JSI+xaxXpSmyBK4E/mmDS9nEy9Fbo=)
2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5168 (0x1430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Validity
Not Before: Jun 12 16:52:08 2026 GMT
Not After : Jun 19 16:52:08 2026 GMT
Subject: CN=6a2c3938-7d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:66:86:70:e1:d8:8f:02:0c:04:4c:3b:a9:
d0:e3:21:be:32:8b:89:73:25:d3:6d:97:d4:71:31:
d2:ef:a5:95:54:0b:c4:d9:a0:c3:1c:cc:8e:b8:47:
d4:6a:8c:69:73:8d:e2:8b:6e:e1:a2:9b:dd:3c:23:
2e:72:59:85:73:e6:99:65:d5:61:52:2a:ee:8f:b9:
53:5a:8c:ea:ff:c2:45:e2:6a:5c:c8:b0:8c:dc:f0:
b0:ab:32:50:3c:c9:24:1d:34:c6:39:37:9a:8c:97:
26:9e:2c:d9:b1:94:28:42:06:8a:95:77:e7:88:d1:
4e:24:b2:15:24:53:aa:3e:cb:a4:f9:fe:51:d8:1c:
c6:de:aa:b3:19:e4:4e:b1:fa:85:a3:aa:0c:79:7f:
8d:14:2a:3a:3a:82:72:62:2b:34:bb:0d:41:d1:25:
69:93:02:00:ea:ea:ad:1d:35:cb:ec:77:0f:0b:f7:
29:03:dc:b6:c5:a4:9c:d7:5d:84:1b:12:2d:fe:0a:
54:65:8e:5a:67:0b:66:4e:70:2b:74:df:c8:03:7a:
52:2f:3e:ab:87:5a:af:31:06:b0:24:c6:4a:39:16:
02:85:c7:25:f1:4b:24:7f:16:f5:20:56:fd:d5:8d:
80:f9:79:1a:40:e4:fe:d2:5f:ad:47:38:80:82:7c:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:84:16:68:9A:AF:A9:13:A7:C2:C2:9A:71:7A:2A:84:63:AD:2E
X509v3 Authority Key Identifier:
keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:4d:a7:75:ad:ff:fd:0f:fb:46:0a:1b:26:61:b6:7b:d9:
b0:02:ee:08:7a:56:bb:47:48:b8:46:06:5e:2d:43:c1:e1:04:
ff:59:47:69:b9:0a:59:17:91:0b:59:c2:07:8b:36:19:65:a3:
5f:cf:a1:03:d8:49:42:f1:99:12:9e:a5:03:aa:ef:eb:4a:8a:
51:05:d6:26:98:7d:c0:d4:58:78:a0:ee:79:5b:0d:ce:b6:5b:
4d:db:08:99:03:43:66:78:4e:41:8f:11:f0:8e:9e:9d:2c:c5:
e8:b7:1e:60:23:7e:3d:e2:be:d9:51:ba:46:5e:dd:73:b4:97:
c6:b0:a8:d9:29:28:17:ea:dd:99:eb:43:74:1a:50:32:71:c6:
ce:cc:b2:55:be:87:12:12:8a:b9:bf:22:7f:f5:2b:22:12:f7:
ca:0b:3f:68:af:38:75:69:73:ee:9f:66:bf:fa:ec:94:b7:25:
59:8b:c0:97:f0:49:e7:e1:7f:7f:d8:5f:e7:4d:bf:5f:5c:00:
48:8b:e2:f1:d9:d2:8e:70:bf:00:ba:07:7d:2c:f4:d9:91:b7:
64:56:fa:1d:1f:9e:81:78:b8:70:88:9c:d4:fd:57:9b:ce:a3:
92:49:b1:ce:4f:9e:f7:2b:e2:42:46:4f:aa:d1:55:5a:e6:d7:
2d:e0:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:08 2026 by rpki-client