
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier: 3g6vKa73tuLUMPWNWNfh2Zti/iPaYecm/YwQQvA3+go=
Subject key identifier: A6:7D:F0:01:CD:4D:FD:C2:8F:22:7D:F7:89:81:2C:6B:19:FB:95:10
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number: 03BB
Signing time: Sun 01 Mar 2026 23:49:08 +0000
Manifest this update: Sun 01 Mar 2026 23:49:08 +0000
Manifest next update: Sun 08 Mar 2026 23:49:08 +0000
Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: Z/dZ8/a1bGrhGvgNsQKm/r9XvOdOo9qrx2CIUg6ZfzU=)
2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
3: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Validity
Not Before: Mar 1 23:49:08 2026 GMT
Not After : Mar 8 23:49:08 2026 GMT
Subject: CN=69a4d074-21c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:86:34:01:d6:7c:a8:7e:41:3a:67:b0:9c:
10:90:f4:11:89:c0:d1:99:ce:41:2d:db:9c:cb:53:
11:2c:9a:9d:9a:0b:72:4c:a4:73:76:a0:74:67:f9:
1c:22:f7:f2:3a:83:09:0b:db:3c:b2:40:48:d7:b4:
a7:24:82:fd:9e:73:60:7f:6a:2c:e5:de:a6:30:8e:
0f:c9:dd:d4:df:c5:76:fc:b1:17:74:8e:b5:98:3a:
2a:b7:0f:2b:a3:aa:8a:76:67:cd:0c:55:1a:73:2e:
31:d0:7b:4d:f3:0f:e0:e2:0b:41:32:da:16:2e:9d:
3f:4d:a2:45:ec:54:3e:5f:26:c9:df:26:c6:11:c1:
72:6c:1d:db:da:5f:f7:10:31:3b:5a:c4:44:e8:7e:
2b:79:12:f3:af:34:0e:f8:29:ed:9d:08:eb:29:c6:
28:1f:d4:51:2f:e4:a1:12:d3:1f:ed:b6:30:ce:66:
8d:5d:f3:15:9b:2b:c5:71:76:d4:6e:d1:12:32:b0:
ab:80:a9:c1:6c:12:11:e7:a8:26:08:af:f9:b7:ab:
27:7c:1e:7c:c8:00:a8:6c:47:f1:30:71:fd:b5:2c:
e2:5a:33:c5:4a:d7:3a:c7:48:db:71:ed:c2:17:44:
d6:71:ad:93:71:20:1d:93:7e:15:62:3d:e0:45:34:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:F0:01:CD:4D:FD:C2:8F:22:7D:F7:89:81:2C:6B:19:FB:95:10
X509v3 Authority Key Identifier:
keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ad:d5:a8:4e:69:fe:29:04:ce:c1:0f:4a:76:db:e8:99:9f:
06:91:c8:cf:db:00:17:7c:a5:4f:4a:c2:08:8a:6d:eb:75:84:
58:42:d3:a9:96:e9:d7:aa:aa:2e:6f:fd:5e:8b:30:0d:76:d7:
e7:99:78:a4:a1:2a:39:a8:97:d3:96:16:b5:60:69:30:25:ac:
83:68:3b:d5:f2:06:0d:1b:4d:29:cc:3b:71:05:2e:78:a4:db:
01:c2:3a:21:44:23:90:59:ab:77:78:c7:9e:e5:a6:6b:c2:ef:
d5:39:8f:6e:d4:b7:fa:79:52:b1:00:e5:a1:34:90:14:1c:74:
fc:0d:9c:a0:35:5d:ea:e6:74:7e:10:ae:99:e7:dd:9e:4a:10:
8f:ad:41:6d:6e:39:2f:b1:89:db:37:4d:25:53:c5:64:77:34:
9a:c8:4b:22:87:9d:7e:c9:2f:77:11:33:b1:93:2a:80:fa:79:
60:be:83:a9:dc:f3:0e:f3:86:dc:78:30:c6:18:f4:82:09:80:
c0:a3:34:d3:a1:de:2e:a2:56:f7:bf:25:0d:01:2d:8a:7f:13:
90:a6:17:d7:29:cc:e2:49:d5:df:e6:04:b2:c6:c7:3f:e0:12:
c1:4f:7e:0b:c6:66:73:d1:7b:c7:c2:18:5b:3e:f8:a2:d9:66:
69:f6:64:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:52 2026 by rpki-client