
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier: wLb0QCF9jfweaKaNIcOERCx36nAi6qgOfdWCmvQdkX8=
Subject key identifier: 41:23:25:C1:0B:15:15:57:7D:4D:84:E3:8A:DD:DA:26:59:50:C8:70
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number: 01BD
Signing time: Fri 17 Apr 2026 03:35:12 +0000
Manifest this update: Fri 17 Apr 2026 03:35:11 +0000
Manifest next update: Fri 24 Apr 2026 03:35:11 +0000
Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: jrrWVzZI7wv50MwqthmMsw+7MB3UE2KNj8mRwBso9Y0=)
2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Validity
Not Before: Apr 17 03:35:11 2026 GMT
Not After : Apr 24 03:35:11 2026 GMT
Subject: CN=69e1aa70-f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:5e:b0:7d:da:28:7e:1c:c9:aa:19:18:f4:
28:d8:3f:98:6d:f3:ea:c1:cd:71:07:d5:10:0b:85:
ae:69:41:7b:21:b2:89:9e:24:a6:1c:76:08:6c:94:
fd:21:6d:58:b0:bd:c6:b7:73:f5:c6:b4:87:52:83:
b0:cf:45:98:13:af:15:3e:bf:5e:16:8e:26:7a:b2:
f3:04:35:40:d9:28:14:2d:fa:a3:25:5b:0c:b9:13:
27:5c:22:cc:1e:ea:75:f1:8e:b6:b3:13:3f:78:a7:
f8:51:ac:1e:2b:e2:59:02:40:d7:16:b6:aa:dc:1d:
85:88:2a:bf:33:d7:7d:0d:d8:3d:aa:51:65:6b:42:
54:62:c7:47:04:a4:ae:4d:cc:2e:e0:8e:1e:57:af:
43:cf:3d:b8:c3:41:ad:9d:c0:b0:ea:c2:7c:5d:14:
ae:77:06:6d:f2:ce:ef:5b:f7:ac:bf:5e:cf:ca:c2:
c7:30:af:fe:f3:9c:84:bf:b0:e2:ca:99:19:38:86:
f0:29:a8:9f:e4:14:92:a8:c2:f1:a5:eb:48:3d:6b:
42:df:9c:b6:b7:7d:3b:29:1f:f7:3c:b7:c7:13:e0:
5f:1e:34:10:53:68:b8:cc:76:f5:0e:a3:d8:ed:1a:
ae:db:70:4f:f7:19:ef:c0:fe:88:66:58:36:d8:ec:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:25:C1:0B:15:15:57:7D:4D:84:E3:8A:DD:DA:26:59:50:C8:70
X509v3 Authority Key Identifier:
keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:22:d4:78:99:25:7e:3c:0f:0c:94:a1:9c:27:e1:36:27:
b2:5c:5a:42:7d:d3:78:4a:5d:8e:a6:ba:bf:9a:1e:54:09:75:
bb:f5:f2:31:76:ac:0c:45:a3:46:67:73:a5:a5:c1:84:7c:d9:
89:6b:f0:4d:de:f5:cd:da:1c:f6:40:67:f7:dc:60:ef:18:9b:
7c:90:2a:bc:81:2e:a3:85:8a:84:de:46:ee:91:ee:d4:54:f8:
7b:83:4b:ce:94:cb:31:06:1e:a4:1c:61:c9:03:52:ce:5d:4e:
72:65:4c:62:38:de:af:4d:40:8b:f9:d0:7b:c8:dc:51:83:56:
82:d5:9a:2a:d8:c3:79:81:ba:c6:26:f0:a4:57:6d:bd:8f:84:
e0:c5:e3:ff:43:66:fb:8d:dd:90:46:11:4f:74:7f:51:fa:61:
43:32:dc:69:a1:90:85:f4:41:50:db:5b:32:c6:40:ec:ee:c8:
19:08:42:b6:eb:6c:3d:6a:b0:a7:80:4a:2a:87:12:1a:b8:2b:
e0:db:22:b9:8a:22:c7:c1:0f:32:62:cf:75:d2:b9:4f:89:c5:
44:37:64:8d:8f:1a:a5:c2:30:28:ce:8a:b3:35:e4:85:3c:d4:
6b:56:55:ab:d5:9e:93:ed:d0:80:94:6f:39:da:4b:e2:bc:5c:
35:02:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:46 2026 by rpki-client