
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json)
Hash identifier: mQXhoris8WE844NOndZfmexsvVwTrEUNU0SRhPlUAHE=
Subject key identifier: ED:10:CE:EF:5D:AA:ED:52:65:59:95:5D:77:E6:04:2F:89:17:13:52
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
Manifest number: 01E3
Signing time: Sat 13 Jun 2026 03:40:13 +0000
Manifest this update: Sat 13 Jun 2026 03:40:13 +0000
Manifest next update: Sat 20 Jun 2026 03:40:13 +0000
Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: 7eQR6xwWlbM2AAaR0/SgQXv8D65Kb5nVF6pAVu1BGPY=)
2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Validity
Not Before: Jun 13 03:40:13 2026 GMT
Not After : Jun 20 03:40:13 2026 GMT
Subject: CN=6a2cd11d-3beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:0a:38:bc:f7:94:3e:7e:13:bc:17:1b:31:
33:0c:99:cf:bc:69:a6:6a:42:83:63:8f:9c:fb:d5:
45:5a:03:ba:95:1c:03:78:13:55:2d:99:3a:44:b5:
47:03:b4:d5:86:ec:5b:a8:eb:e5:75:35:82:fc:d9:
ae:d7:43:0a:51:ea:7e:88:52:4e:8c:31:24:ea:9c:
26:42:a5:bc:67:dd:83:a1:72:20:cb:ee:32:f1:a7:
f4:45:d6:0d:62:dd:79:47:91:df:0f:42:55:aa:ac:
6c:a3:e2:da:a6:09:ec:e5:42:af:d3:39:3d:49:5c:
8f:49:d6:ba:d5:bb:84:35:b3:ae:4e:68:cb:e8:f7:
04:4f:ab:5c:7c:3a:c6:d2:79:f6:c7:2c:e9:30:94:
30:22:be:49:e8:73:4b:ae:6a:94:fb:5b:a4:2f:50:
60:53:ef:39:e8:1a:ad:20:ec:58:5c:87:ab:a5:95:
5d:45:ae:39:b2:1a:70:b2:18:35:6d:52:96:da:17:
72:c4:f8:67:07:fe:6e:09:96:1a:cb:bb:26:27:68:
d4:22:4c:8d:05:67:14:6e:84:3e:a3:e6:8b:60:5c:
fe:64:4e:b7:3e:36:ad:f9:dc:46:56:5b:3c:97:e8:
06:58:bc:70:67:cf:0b:bf:5e:ab:bf:42:42:d9:27:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:CE:EF:5D:AA:ED:52:65:59:95:5D:77:E6:04:2F:89:17:13:52
X509v3 Authority Key Identifier:
keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f5:4f:39:f4:d7:5a:6e:1a:39:a8:77:cd:4f:ee:5f:5c:42:
0f:af:08:25:6b:79:95:5a:0b:f5:a6:2a:35:f3:67:f3:27:32:
4e:00:fa:4f:d1:9a:16:05:50:2d:ca:47:9f:7d:c0:b4:c2:60:
e7:f9:42:59:be:75:51:cd:6a:11:64:d4:ec:38:03:9a:41:1a:
5c:57:e2:a8:17:8f:a2:7e:cb:2e:e0:9a:f5:e8:6b:14:f0:99:
1b:f1:34:2b:78:58:da:3e:69:56:2d:e1:d8:84:57:24:f8:e3:
cf:ce:c7:9b:b5:8e:7b:fa:57:71:9b:5c:59:3e:a9:ea:1a:24:
c4:09:12:3e:be:a0:40:b8:d1:e9:4c:81:81:c1:c1:bc:35:dd:
37:0f:56:90:56:1d:90:4e:7c:28:23:aa:af:a9:f6:22:e7:88:
b1:9f:2e:0d:f2:df:59:95:0b:b3:62:9c:12:06:11:f3:99:38:
90:b0:6c:87:15:90:24:13:27:4d:69:ac:5e:5d:bb:57:68:33:
3a:ca:0a:ae:61:f9:f0:a4:c0:8d:16:e3:b2:93:c8:b0:9e:54:
e3:35:a8:b2:eb:ee:11:2a:52:34:40:26:e3:bb:d3:3d:48:63:
4b:2c:bf:2f:dc:af:92:85:a0:77:de:a0:7d:02:d0:9d:87:39:
3d:80:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:26 2026 by rpki-client