
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json)
Hash identifier: 84qstQz82HxgPKT9ntlFIjTg2BI+47SZI2sh5YJkAD0=
Subject key identifier: A4:3E:6B:AF:F0:85:A5:35:0B:EC:25:9E:E1:1D:D0:40:3D:94:AC:00
Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
Manifest number: 0272
Signing time: Fri 17 Apr 2026 01:48:24 +0000
Manifest this update: Fri 17 Apr 2026 01:48:23 +0000
Manifest next update: Fri 24 Apr 2026 01:48:23 +0000
Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: wIqi9Di2F89h+XZdSpGBcUqA1laW/W9Ba50BWiPbP7g=)
2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl
rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Validity
Not Before: Apr 17 01:48:23 2026 GMT
Not After : Apr 24 01:48:23 2026 GMT
Subject: CN=69e19168-d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:4c:56:d4:2a:93:22:2c:52:70:40:ae:73:
69:1e:81:d5:47:ec:d4:85:5a:19:0e:c5:37:f7:fd:
25:c5:b3:f9:cb:cc:b2:c2:93:85:1f:41:75:a1:a5:
3c:75:07:7d:e2:1a:ac:93:a6:1b:f5:86:e9:18:43:
bb:92:42:0d:70:75:7e:73:bd:0e:b4:4d:9b:6c:0b:
55:ee:94:54:5d:5f:ec:8a:4d:ad:44:25:06:92:86:
ee:44:40:cb:8c:86:c6:41:80:0c:c1:51:06:00:f0:
bf:40:0a:2e:8c:22:fc:af:3d:ec:b8:f6:34:c6:51:
52:be:44:5f:d4:70:10:b3:dd:7f:52:e9:2a:b7:6d:
f1:41:e8:e1:e3:8c:41:df:16:13:7c:e3:0a:bc:0b:
0e:75:43:2b:5d:2f:9d:81:57:0e:88:4f:cb:64:81:
f9:5a:03:b0:b0:6e:2f:9c:c9:61:b2:6a:0d:5a:11:
d1:d3:6c:98:68:65:c6:b8:cf:e0:01:6a:ce:27:43:
36:2c:fe:c0:f1:87:a6:e2:0b:db:a8:3c:85:cd:48:
2f:1b:cb:13:0d:c1:e7:5b:ef:a8:21:47:81:fb:27:
4a:62:15:57:cb:b9:ef:42:43:91:d6:0b:25:0f:af:
e0:67:70:90:81:75:4b:33:ec:aa:dc:e1:ee:0a:09:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:6B:AF:F0:85:A5:35:0B:EC:25:9E:E1:1D:D0:40:3D:94:AC:00
X509v3 Authority Key Identifier:
keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:52:54:ff:d1:49:70:fd:11:27:93:dc:08:26:1c:b6:55:17:
97:7c:8e:2b:cd:4e:54:2f:67:ba:e3:45:73:a2:06:0d:9d:00:
06:ac:4b:c9:51:f3:ae:4b:92:02:c1:39:97:05:0a:a4:71:79:
c3:7f:81:b8:3a:ad:43:56:1f:71:e4:78:50:f6:af:84:6c:36:
98:eb:44:c0:9d:86:fc:eb:6d:15:1e:95:ca:af:e1:9a:bb:bf:
07:c8:ca:ca:9a:d8:60:0e:e8:ec:dc:8e:64:ce:6d:60:fe:18:
a0:71:10:2b:d6:10:68:fb:01:9a:1c:f2:cf:fd:58:5b:ba:c9:
a5:7c:a6:fe:1e:f7:f8:c5:89:29:0b:91:12:c7:d4:8b:0c:93:
f2:cf:4b:06:3f:e2:57:68:51:54:46:af:50:cc:c1:c6:f8:c1:
f9:f9:bb:38:06:9a:98:4a:47:40:48:47:75:d5:d9:f6:2d:9a:
74:2a:6f:9a:b0:9c:de:d1:47:32:55:bc:b1:28:ae:10:f6:9f:
18:d6:95:46:e6:77:43:c2:e7:3d:22:01:22:60:f4:22:d5:1b:
cd:24:c0:de:70:6a:c3:b3:3f:f0:bf:43:dc:8a:47:ed:07:82:
e6:fe:57:e1:6a:6c:43:98:c0:66:2d:b3:a4:26:9e:b1:d9:01:
ab:f8:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:34 2026 by rpki-client