
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json)
Hash identifier: 5Zj/r7c/60D73B+8EVANAUf7pQYUp8f+8qKzYY1+Vis=
Subject key identifier: F3:DB:B7:84:CA:4B:CF:24:90:8D:6C:03:D4:24:84:42:A0:A2:9E:53
Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
Manifest number: C5
Signing time: Mon 27 Jul 2026 09:00:46 +0000
Manifest this update: Mon 27 Jul 2026 09:00:46 +0000
Manifest next update: Mon 03 Aug 2026 09:00:46 +0000
Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: jRYOQhwRxS8RW5MvUqHOL3ZfdCwmks0LA5O4zf1Sno0=)
2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: 5cgf0ISAMxYWm7zrPrCKiC5371eZ0TJcko/OPv9sPXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Validity
Not Before: Jul 27 09:00:46 2026 GMT
Not After : Aug 3 09:00:46 2026 GMT
Subject: CN=6a671e3e-8124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:c7:3c:eb:e4:1d:da:07:b3:7f:fe:1a:36:
9a:56:4e:df:2a:2a:33:a7:e2:b8:ef:19:bc:4e:72:
34:84:8f:04:c3:fa:5d:64:55:98:ef:dd:e5:a8:57:
c5:58:4d:6c:6f:0c:74:45:14:98:5a:a4:d3:7e:6c:
a3:ec:6c:e5:f7:85:d5:05:ae:bf:52:8f:b3:8b:df:
74:81:4b:df:55:e8:42:50:e1:ff:24:38:8d:93:82:
89:de:09:ca:db:18:83:00:4d:e3:7d:d7:f0:b4:c5:
5b:eb:d6:79:04:c6:cd:05:dd:a9:83:21:41:ad:ef:
46:fc:3c:ea:65:f5:77:ab:0d:6d:95:5f:82:3c:4b:
1d:98:40:47:e0:e8:fe:88:39:74:20:6b:17:02:c3:
28:2b:66:47:82:63:ec:64:be:9a:43:08:4b:4a:a1:
c3:e9:38:ff:72:a6:95:b8:85:1b:43:ba:9c:72:ae:
a2:34:42:b9:ae:77:44:54:d0:20:cb:aa:62:84:ae:
d1:5d:9a:32:8f:f5:5f:13:f7:0b:14:09:76:a7:78:
a7:fd:2a:0b:7f:9d:da:4a:7a:ed:23:f2:63:7c:a4:
4f:a9:c8:80:fc:9e:c2:8c:4d:1e:55:92:9e:83:7b:
b8:0f:64:90:cb:dc:0b:4e:9f:9d:58:fe:da:6e:68:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:B7:84:CA:4B:CF:24:90:8D:6C:03:D4:24:84:42:A0:A2:9E:53
X509v3 Authority Key Identifier:
keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:98:52:16:7d:4f:65:b0:38:99:0c:9d:3b:e4:d3:18:88:af:
ae:05:1e:ee:68:eb:13:c3:9d:8f:46:a1:ac:d3:ae:f8:9f:36:
b9:9f:15:13:67:af:7e:60:38:fd:ab:d7:e7:82:5e:07:5c:d5:
55:23:46:95:ef:7c:bb:2f:19:63:b2:a4:a4:dc:c8:b0:e0:fc:
18:70:27:52:65:7a:c1:0a:44:4e:62:0b:ea:51:b7:9d:f7:09:
8c:75:17:f7:d6:28:8e:cd:32:95:73:d7:8d:fb:c5:10:60:7f:
9d:55:20:37:d0:bf:9d:0a:44:0a:cd:a4:c9:76:25:80:34:fb:
74:52:45:1f:f2:0b:39:fa:ac:ca:3b:5c:46:02:7f:6f:11:5c:
4b:6b:56:c6:61:96:55:7e:9e:a7:6f:b5:0c:45:9f:19:4a:3d:
a3:a2:a2:0a:20:b7:f2:4a:7b:fc:59:23:05:6e:d1:56:cf:6f:
aa:2c:f1:63:08:28:73:fa:1e:87:f7:10:9e:97:28:ff:90:e4:
c4:db:06:de:b6:5a:ec:a0:3d:d0:56:b5:f0:8f:fe:5b:9e:ea:
16:68:a9:9f:3f:d6:b9:88:6f:b2:a6:89:9c:93:55:48:8c:9e:
eb:1f:2d:a9:8d:46:f7:dd:54:72:d2:dd:8b:7b:9d:a7:70:04:
ac:fb:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:19 2026 by rpki-client