
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier: f5+u+AzoOKXYxzTiylqNmoaBqM63BIqAuOaYEiIuKUQ=
Subject key identifier: D9:A7:97:72:38:52:9A:F3:78:A3:E8:B5:B5:CF:1F:B8:BA:BF:32:38
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number: 03D3
Signing time: Fri 17 Apr 2026 00:29:22 +0000
Manifest this update: Fri 17 Apr 2026 00:29:21 +0000
Manifest next update: Fri 24 Apr 2026 00:29:21 +0000
Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: hNf1oPpsF76gIRZl27LEo2fRVHh2jmfJxgfobCJyATw=)
2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
3: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Validity
Not Before: Apr 17 00:29:21 2026 GMT
Not After : Apr 24 00:29:21 2026 GMT
Subject: CN=69e17ee2-a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:89:85:d8:8b:7d:69:81:4b:96:76:f7:dd:
90:e1:7d:fa:3f:bd:f1:83:b2:47:89:f4:9d:bf:c4:
9f:1d:3d:bb:73:b0:67:3b:36:c5:82:03:ad:28:f7:
08:7f:0b:0e:52:29:7b:bb:5b:a0:c9:e7:3f:da:9e:
4a:83:b1:00:5f:b2:b5:31:23:2a:f6:75:97:c3:04:
d3:fb:91:52:77:14:37:e5:b5:68:6a:eb:6a:dc:54:
e5:54:80:34:8e:0c:31:d3:0e:d9:56:46:97:2f:eb:
22:3d:23:e9:cc:68:ef:a3:94:d6:1e:6d:4e:7f:f2:
d6:32:f3:62:77:0c:cf:ac:34:6e:37:a1:95:ca:ab:
36:b7:ea:91:b4:05:65:d6:d9:b2:8b:c4:29:a0:bb:
d3:0c:23:61:21:cd:94:df:2b:3a:cb:e0:c8:46:cd:
c2:44:50:f1:28:34:a3:66:a7:61:c8:80:e4:0a:88:
c7:56:90:eb:9b:d9:69:e2:2d:fa:91:d7:af:18:1d:
38:b4:e6:55:fd:91:2a:14:e9:61:c1:9d:f6:8a:62:
c8:39:22:52:79:09:d0:56:59:ae:3a:f6:82:e9:60:
7d:15:c7:05:e4:bf:74:71:82:13:44:3f:49:63:2a:
91:d1:bd:8e:4d:50:99:b8:08:1b:eb:67:aa:07:87:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:97:72:38:52:9A:F3:78:A3:E8:B5:B5:CF:1F:B8:BA:BF:32:38
X509v3 Authority Key Identifier:
keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:78:35:b7:07:98:f4:c9:35:36:1b:47:bf:8e:d2:76:c3:
76:b5:64:b7:db:64:23:ff:91:bd:2c:c3:2c:2d:ce:34:93:e6:
cb:4a:30:87:a5:0d:ea:07:38:d2:85:86:00:e8:d8:1e:cf:7f:
02:a2:90:f0:a0:c0:d5:47:df:f9:c0:2b:10:1a:e4:eb:b6:cf:
a8:7d:c2:f0:b0:19:fe:e1:6e:02:f8:da:a3:d4:1c:9d:d4:a1:
d7:47:ca:6a:56:ea:27:7e:36:fe:af:06:63:f2:0b:82:5e:4e:
1c:8e:b9:e5:be:b2:73:02:5b:fa:15:06:b5:ff:05:9b:48:a7:
e9:1e:4a:6c:e3:31:e7:ed:62:87:07:71:21:5e:55:e2:ec:f1:
9c:95:3d:96:38:a6:d5:dd:92:32:22:4e:47:28:e7:c8:98:0a:
78:0c:d0:46:ae:42:0c:2a:d0:ad:a6:ac:0d:ef:18:91:1e:21:
fc:4e:55:35:74:fc:e1:b7:38:39:82:43:4a:60:36:8a:36:90:
6c:f9:1a:ab:80:f0:60:f0:15:f4:5b:70:d8:45:72:5a:f6:5c:
93:a1:03:02:13:e6:b4:1a:bb:c1:cd:bc:89:48:03:88:cb:21:
c7:7c:fb:dd:68:aa:04:8d:51:95:2a:c8:0d:2f:eb:ea:a9:ad:
0c:b1:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:15 2026 by rpki-client