
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json)
Hash identifier: ryrz/ABtFRH7okZGI3XyINpIuywzXyA7F5SmO3nsHNI=
Subject key identifier: 2B:01:13:C6:20:09:56:2D:47:45:4E:36:12:54:18:F8:2B:3D:0C:99
Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Certificate serial: 2633
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
Manifest number: 2624
Signing time: Thu 16 Apr 2026 15:41:11 +0000
Manifest this update: Thu 16 Apr 2026 15:41:11 +0000
Manifest next update: Thu 23 Apr 2026 15:41:11 +0000
Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: Ua6OyMfuTQQ+itbw86H+KFy9g0WdeSRiQMYvcRN75hk=)
2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: T9SIi9mDgUlqLoammnb7erYFDZJKyrEKSkygd0pgH9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9779 (0x2633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6
Validity
Not Before: Apr 16 15:41:11 2026 GMT
Not After : Apr 23 15:41:11 2026 GMT
Subject: CN=69e10317-ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:9e:62:c4:21:9f:38:1e:99:65:94:fb:ef:
03:56:d6:60:25:61:d5:28:1a:87:80:bf:87:8a:f8:
4b:4b:dd:35:e7:c3:7b:a7:c9:53:db:55:75:2c:1f:
0f:01:c4:3a:dc:b7:6f:8d:b4:59:6a:f8:b1:9b:83:
20:ae:8e:30:9b:eb:35:60:c0:4f:5a:23:db:c1:3d:
fd:9f:21:5e:f2:b3:e2:8f:ec:cd:4f:85:93:35:cf:
01:3c:dd:f1:e1:31:c8:3c:76:8a:5b:b2:1b:ea:7f:
e8:ac:6c:92:74:f0:25:d4:2b:d6:1a:2c:19:c6:99:
ec:e7:d7:76:eb:df:fe:5c:f8:81:ee:2e:9b:dc:bf:
ee:a6:ff:58:7e:e8:68:31:a1:81:1e:1d:c3:c1:ff:
d5:eb:79:e1:0c:e9:28:4b:e3:5d:eb:f2:8a:c7:bb:
30:13:61:9f:59:f9:09:04:ff:4f:81:05:a2:2c:bf:
57:b4:c4:2b:ef:32:72:5b:11:ae:b5:31:15:46:a2:
1e:2f:39:2c:35:ce:4a:8d:cd:8c:87:b3:87:0e:2c:
f7:a0:15:94:e2:49:f9:ea:e1:5b:97:16:d8:2c:64:
f4:c5:0b:b4:46:54:82:53:f3:e1:a2:e4:ab:fc:7d:
fe:0a:be:41:d8:0f:4b:60:62:67:c5:68:cb:00:e9:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:13:C6:20:09:56:2D:47:45:4E:36:12:54:18:F8:2B:3D:0C:99
X509v3 Authority Key Identifier:
keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:10:5a:92:3f:88:20:45:15:be:b4:29:fd:82:9c:e1:53:
a4:b9:9e:98:87:26:4f:ee:17:90:c4:81:74:0b:7d:88:3c:5d:
be:3c:e8:16:d2:a6:7f:ec:1e:3a:5f:75:55:bd:df:50:ca:ab:
fc:83:24:7c:9d:dc:0f:93:b6:2f:6f:ea:0d:54:74:65:96:36:
56:49:16:ff:16:05:c4:7a:63:c0:1f:46:66:38:01:6e:1c:f5:
71:c0:5c:eb:91:25:d4:23:10:37:84:ab:e0:26:d4:60:7f:21:
dd:48:33:e3:cb:3a:6c:5e:8c:54:b9:79:ad:4e:56:fa:10:4d:
46:2c:b2:97:31:45:ed:60:90:b6:f6:54:b2:50:39:10:45:44:
cf:f6:68:80:6c:18:c0:e9:b6:0f:f0:f9:ab:7e:bc:a1:96:38:
16:f6:93:50:ea:ea:f0:0b:cc:f1:5c:af:70:f6:ca:7e:94:2a:
14:d7:0d:39:82:65:3a:a5:6b:6e:a2:91:5c:ce:e8:c2:a6:b6:
04:cc:4b:0e:31:c0:45:20:48:68:08:14:ff:fc:8d:58:a4:b4:
85:b3:cd:4c:c1:42:52:48:2c:af:19:93:0b:bb:95:16:b7:70:
20:ac:43:bc:44:aa:84:47:66:34:9a:fa:22:65:01:73:34:73:
2f:80:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:34 2026 by rpki-client