
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: /Jdwtx29ZXlWhOWxOiSgCn2UDpMno1CwGlmjZYNLflk=
Subject key identifier: BC:1D:FE:94:12:89:34:21:21:A9:16:A9:ED:B5:22:A5:90:13:16:0F
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 221E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 2212
Signing time: Thu 16 Apr 2026 15:50:39 +0000
Manifest this update: Thu 16 Apr 2026 15:50:38 +0000
Manifest next update: Thu 23 Apr 2026 15:50:38 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: DihpgCmZ88TtYUDUfGz1dLgDPMjqG6ilGLgDZhRe/bQ=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 42CVSUWYduLQVb9MG+B2vLMlfp0/6VbB2Jlt8i5PPHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8734 (0x221e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: Apr 16 15:50:38 2026 GMT
Not After : Apr 23 15:50:38 2026 GMT
Subject: CN=69e1054f-8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:2d:6d:38:51:3f:44:81:01:1b:b2:45:ec:
d1:cf:e4:db:4e:77:44:e6:49:cf:eb:2f:6a:48:a2:
c8:1c:af:7d:9b:eb:f6:b5:ab:eb:67:3d:9b:e7:c5:
11:88:94:74:2e:cb:37:2e:79:1d:5d:96:1a:03:fe:
b8:89:32:36:4d:1b:b9:6b:c8:27:93:7b:d2:03:ea:
4c:2e:c3:5f:b3:94:3e:a7:ee:30:8f:0f:64:05:f2:
29:60:6f:42:bb:a5:68:05:32:07:7f:a4:df:2d:2d:
56:2d:bd:8e:a2:03:15:27:c9:23:4b:01:50:d9:93:
88:ff:da:d1:6f:c2:fe:5b:e7:31:6c:cb:b1:67:20:
07:cf:5f:fc:93:74:a3:87:44:e3:a3:75:78:34:1f:
00:c7:83:f4:f5:17:ea:20:74:45:19:79:e8:e5:92:
31:64:75:64:27:86:3c:09:23:61:1e:4d:49:62:5c:
5b:eb:46:38:37:ff:b9:5b:96:87:1d:fc:2f:49:2e:
54:a0:9f:d2:a8:81:97:84:ad:6f:d2:24:73:e2:a3:
51:cf:83:fb:9e:c3:98:a1:f7:a0:a3:24:78:af:82:
f3:4d:80:dc:d7:fa:6e:17:e4:b0:fb:9f:1b:f0:1a:
2e:96:01:29:f6:b5:98:a4:df:be:54:45:08:9a:52:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:FE:94:12:89:34:21:21:A9:16:A9:ED:B5:22:A5:90:13:16:0F
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:d6:75:0c:da:b4:6e:2c:94:27:24:c3:e0:ed:6c:85:02:
e3:ca:0f:d9:99:d9:1d:84:f1:26:00:d6:56:c2:24:08:c5:b3:
52:4b:98:6b:b5:b2:84:29:00:13:45:92:38:b7:e9:6b:32:bf:
4c:70:ca:d9:4a:3d:54:c1:b2:e8:d4:bd:0a:2b:92:a0:19:bc:
aa:d7:ef:3a:d6:62:2b:28:73:be:09:29:91:bf:5d:5f:a6:9b:
4e:e2:71:03:ad:fb:84:22:9b:6c:25:b8:0e:2a:4e:32:7f:a5:
9f:b5:78:d1:3b:23:06:e1:4d:1d:db:98:3b:4f:6e:8b:b3:c6:
72:ac:de:4e:5b:e6:2f:15:18:94:2e:7a:c8:16:10:68:4a:b2:
a6:89:1e:06:aa:cc:d4:1f:92:5c:4c:0b:f5:b1:8f:81:12:ac:
e5:96:a4:70:20:2c:8f:0f:61:0e:e4:6a:7b:11:d3:28:84:6e:
77:da:71:ef:c4:f1:72:ac:ed:82:28:62:e4:7c:84:d9:49:2a:
80:fd:e4:28:33:a1:77:f7:ec:c9:ff:30:27:db:11:1c:0c:be:
b0:67:da:56:3f:79:ef:da:d8:ae:98:c6:85:a3:2a:6c:ac:0c:
70:88:96:ce:13:eb:8a:72:5a:2f:f4:26:90:e1:84:e8:13:b1:
40:8a:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:34 2026 by rpki-client