
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier: +zGJWRzmNWLQhUkX/ZAN4msvp3nhc72jUvRbFjhW1oU=
Subject key identifier: 21:5E:BA:D4:DC:90:7E:7A:01:63:CF:C3:14:27:6D:E8:70:F9:85:DF
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 341E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number: 33A9
Signing time: Tue 28 Jul 2026 15:29:05 +0000
Manifest this update: Tue 28 Jul 2026 15:29:05 +0000
Manifest next update: Tue 04 Aug 2026 15:29:05 +0000
Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: V3wd2rWFPXiB+BKgD/CzmECViTAc2IlJxfynifp80yM=)
2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
5: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13342 (0x341e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Jul 28 15:29:05 2026 GMT
Not After : Aug 4 15:29:05 2026 GMT
Subject: CN=6a68cac1-eca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:17:27:24:c9:72:e6:70:3d:41:85:d3:54:
23:4c:d9:8a:64:d4:f9:26:96:06:17:f1:25:66:1e:
c9:5d:52:8f:f6:fa:b2:55:0a:55:9e:a9:71:65:e0:
47:40:66:5e:0d:6f:98:fe:ca:dd:48:35:2e:b0:9d:
6a:62:3d:da:dd:16:23:f8:1a:b6:59:32:55:1d:fc:
06:01:65:92:95:cb:bd:ae:d2:94:98:f5:d6:a6:ec:
fe:9d:04:fe:ad:7f:13:65:1c:f0:98:63:bf:47:6a:
19:12:b7:cf:0f:79:10:1f:5d:b2:cb:79:e4:14:70:
15:17:b8:d8:0d:27:6b:25:26:01:64:e8:25:a3:0d:
51:cd:c9:43:f9:98:16:17:7d:77:34:c4:d2:1e:df:
53:d8:60:db:78:19:55:c7:35:85:ad:74:19:14:b4:
e1:f5:26:af:9d:ec:2d:ec:c2:f5:0b:b5:85:c5:20:
d2:59:56:9c:f4:43:c9:d4:7c:01:57:eb:f3:93:8c:
87:1e:ba:e0:c6:cd:79:52:29:6d:a0:f4:3d:2e:d2:
ac:9c:71:4d:19:ea:4d:ef:21:ce:e5:c3:0c:06:73:
ca:ae:f6:d2:3d:b7:22:af:36:c2:17:c0:b9:5b:fb:
08:de:2c:db:de:43:e6:86:5b:b2:d2:2c:a2:f5:f7:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:BA:D4:DC:90:7E:7A:01:63:CF:C3:14:27:6D:E8:70:F9:85:DF
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:be:d3:20:04:a3:a4:16:b5:4a:06:22:0f:b9:9c:2e:64:
25:c8:eb:3e:f6:ab:3e:5f:e0:7b:75:a4:01:0c:c7:24:9d:0b:
d7:ce:4f:bb:32:6c:e0:46:84:fc:9a:b8:c7:d6:07:37:da:5b:
af:99:66:aa:76:85:0f:cc:41:ed:a5:94:bc:ef:ed:dd:49:96:
0a:c4:e8:89:b2:ae:7f:74:eb:fd:f0:96:29:68:8c:2e:0e:37:
79:19:50:1a:24:ba:da:f8:fa:6a:75:de:50:a1:ec:62:7f:8b:
fd:fe:a6:72:3f:f5:10:72:47:e4:ae:53:e9:4e:20:e4:24:be:
28:6d:a3:99:ce:d1:d3:c6:d4:40:0c:61:4d:50:65:f4:6e:22:
5c:40:2e:92:09:81:49:81:80:ad:0e:eb:df:11:5c:2c:a1:26:
1f:24:d1:0e:6c:24:de:c5:d5:fd:76:39:ff:66:cb:a5:ce:a5:
f9:f3:50:b4:3d:e9:0b:dd:36:c3:a4:57:a8:81:39:40:05:58:
9f:7a:b7:90:e6:12:02:1e:3a:99:32:36:c1:cd:97:cc:0e:bf:
da:fe:e3:c4:b1:ec:1f:6d:e8:cf:8d:5d:b4:66:9a:5e:8a:4f:
14:62:38:d4:1c:cd:d4:ee:03:39:b3:ef:1e:fd:d1:b2:b8:3c:
90:5c:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:52 2026 by rpki-client