
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json)
Hash identifier: gvh/Geh11hQnblb5u10Dm/IQI2X9HCyi0S+GWZ6Sq84=
Subject key identifier: 13:B7:D7:E9:77:4D:92:9D:39:6D:CB:F0:8B:98:91:EA:C3:52:44:91
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial: 0386
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
Manifest number: 0373
Signing time: Wed 29 Jul 2026 01:39:51 +0000
Manifest this update: Wed 29 Jul 2026 01:39:51 +0000
Manifest next update: Wed 05 Aug 2026 01:39:51 +0000
Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: QzQpU9xuez+n97AlkkiG9cuH2pINxjk/N8rcYl1wK88=)
2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=)
3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Validity
Not Before: Jul 29 01:39:51 2026 GMT
Not After : Aug 5 01:39:51 2026 GMT
Subject: CN=6a6959e7-388b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:7e:d9:d8:47:9e:c9:34:4f:a5:46:68:19:
82:69:a8:d0:fa:1e:b5:81:3d:b5:03:0b:4e:e4:d6:
a2:c9:30:f1:95:60:29:7a:9d:d1:88:72:d3:74:ab:
e3:e6:1d:e9:ff:aa:51:75:86:2d:e9:14:6b:22:30:
a3:8b:80:30:d6:f7:6d:1b:a3:c7:17:40:2d:c9:35:
db:e3:d0:7f:52:60:41:d7:fe:09:21:d3:4f:7b:98:
a5:1d:b6:50:90:55:b4:50:61:66:78:a9:eb:55:da:
02:f6:12:f7:5d:7b:d8:bf:03:64:54:be:73:82:78:
f1:18:97:da:5b:9b:e2:d2:55:84:5b:b9:2b:f4:46:
40:e4:34:38:34:2a:60:44:cd:77:34:90:cd:17:ba:
93:36:c0:73:6f:23:32:7d:33:be:cd:5f:2d:1f:15:
d7:86:f6:55:75:00:7f:89:53:c7:8f:3d:62:1b:90:
6d:03:fa:ed:86:fd:a7:a1:2e:17:ef:76:7a:2f:5b:
03:ac:6e:5a:dc:d3:d3:e9:bf:31:ab:f8:a2:a4:ec:
dd:31:1b:1e:9b:03:e6:e4:16:45:df:60:f4:45:f1:
e5:c0:a3:aa:03:d9:92:32:12:81:fa:04:72:3e:40:
c6:17:0f:8d:29:e3:1a:0a:6c:d7:85:0f:df:9f:eb:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:D7:E9:77:4D:92:9D:39:6D:CB:F0:8B:98:91:EA:C3:52:44:91
X509v3 Authority Key Identifier:
keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:ad:22:6a:95:04:d3:22:f7:0e:d5:2b:a9:d9:3a:4f:4b:
4e:d1:e9:a4:48:c8:30:7a:68:cf:c7:50:7c:06:17:05:45:d4:
7e:00:33:94:c3:56:d8:05:20:c6:bf:6d:c5:fa:82:d2:5e:7b:
d2:b4:2d:9f:55:5a:a4:25:b7:61:cc:fb:bf:8d:42:61:57:37:
73:dd:0f:c7:5f:52:c6:0b:ee:70:ee:73:ca:1c:25:b9:6c:75:
5c:7f:ff:5c:ca:d1:89:7a:84:02:f1:77:aa:13:36:33:4c:7d:
92:e1:91:3d:75:b2:89:f8:af:69:28:fb:43:e0:ba:81:d1:8f:
6b:e6:30:39:d6:04:52:a3:65:08:fc:53:72:0e:d4:2a:60:13:
e2:2b:70:4c:d9:aa:b1:20:94:5a:a9:07:ed:83:55:ec:99:ae:
a4:d7:bd:d5:f9:79:81:ea:83:b9:af:e3:b4:27:c1:e6:1c:28:
15:3e:f0:06:02:9c:a5:56:a9:25:5e:15:d7:4d:5c:3e:4e:7e:
be:d7:03:b4:06:18:04:b1:cf:04:98:3e:2d:53:c2:cb:72:bc:
d0:68:d3:9a:13:10:6c:55:3e:60:76:1e:5b:3a:51:8a:0f:9f:
e6:5e:f7:fb:5a:b6:0d:43:f2:0b:50:78:bd:3a:e2:58:f0:83:
f1:08:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:00 2026 by rpki-client