
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: OTVlG3dEJWvkq+g2zmVkhJNRv/QEytAbGbph6CzJdOM=
Subject key identifier: 69:0D:8F:B5:4C:12:61:9D:3E:04:B1:52:7C:6B:6E:69:A6:7E:60:93
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 0480
Signing time: Sat 18 Apr 2026 23:59:03 +0000
Manifest this update: Sat 18 Apr 2026 23:59:03 +0000
Manifest next update: Sat 25 Apr 2026 23:59:03 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: XmV/kBTPF8+Qknw7xJVXoVSMbTfFkHVfTsp/cXYI+sM=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: qu+ajiL1JZYRW5m42zxrTG99jy7/rsQd9oPljdycO/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Apr 18 23:59:03 2026 GMT
Not After : Apr 25 23:59:03 2026 GMT
Subject: CN=69e41ac7-299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:57:c7:e9:69:e9:a8:a0:ed:a9:02:b9:d8:
3f:1b:79:8c:e0:b8:8b:27:cb:4f:16:e6:76:16:46:
ef:c8:bc:57:e2:40:41:18:05:2d:b3:6e:64:d6:93:
29:d0:7f:48:52:fb:b1:a4:05:b4:2d:b8:2d:cd:ce:
2d:d1:b1:b9:d2:ba:74:85:29:3b:25:e2:ae:da:72:
b4:53:f9:74:4c:c7:b5:48:8a:77:b8:07:b3:66:48:
5b:a7:f5:9a:50:5f:b4:55:76:b3:5d:5e:bf:5b:20:
75:d1:c5:52:4d:48:b8:cc:4c:da:7e:aa:e6:89:a1:
12:f3:b2:f6:ef:3f:c1:a4:3f:94:c9:9b:60:c5:e7:
6d:73:c9:d2:ba:d4:50:01:73:27:ae:43:94:7c:08:
b0:51:0a:78:56:e9:1a:30:2b:65:70:df:59:80:48:
0a:10:ae:be:2c:d3:4e:60:d1:b2:db:2a:54:03:59:
fe:b8:bb:6c:c5:e5:68:73:ac:d8:c1:2f:26:1c:cd:
a5:09:cd:d7:e8:4e:ac:0b:e4:41:e6:2a:16:fc:28:
0e:fe:e1:8d:0d:1c:22:61:45:ad:31:83:db:f5:e4:
cf:6e:a5:98:a8:a5:04:db:37:fc:54:0e:ba:69:87:
12:17:de:cd:15:3a:c5:8b:82:79:a3:78:3b:2e:b0:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:8F:B5:4C:12:61:9D:3E:04:B1:52:7C:6B:6E:69:A6:7E:60:93
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c4:5d:50:c0:79:30:01:93:da:ae:44:7d:78:50:9e:87:1e:
51:ee:4e:50:d7:43:f8:41:31:25:91:80:bc:ae:6d:74:de:9f:
fc:8f:8a:ee:13:47:1c:63:95:3b:33:8d:a2:1b:d7:9a:6f:9c:
f5:c7:77:36:89:89:0b:34:31:87:a8:64:63:d6:cf:19:be:57:
4a:b0:53:02:9f:3f:47:17:88:b5:04:3b:f1:e1:27:15:98:65:
27:85:ad:08:a5:89:d2:49:a6:64:1e:e8:0c:93:e0:e5:e2:6a:
6c:11:13:a7:0d:34:74:ab:82:e0:95:a9:a5:06:f4:d4:0a:75:
2f:5e:ee:56:75:9f:26:5a:aa:5f:26:d4:1c:70:c1:d9:49:37:
6f:7b:3b:f1:d0:48:3e:b8:13:6e:ba:97:d8:b2:dc:a2:e2:18:
c0:52:06:68:13:8b:46:24:9d:f8:2c:97:6c:e4:68:fc:0f:05:
49:93:cb:56:52:91:57:7c:1f:38:8b:6c:d8:7d:dd:cb:cc:a7:
60:ea:43:9b:bd:39:4e:c9:b8:0f:c9:5b:7c:db:32:0c:59:83:
fd:b0:ae:1e:c6:6b:fe:08:46:94:7e:9f:1f:f2:c3:1f:8b:6c:
f9:a0:2a:a3:31:e5:c5:c0:b9:be:dc:42:ec:3e:73:76:28:4e:
53:73:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:23 2026 by rpki-client