
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json)
Hash identifier: cem2fQzNE0fiwMgxl6sPvi+Ov3BG8Gdcz6TxenEh8aI=
Subject key identifier: 7E:17:CA:81:11:D4:FC:A5:BF:A7:29:CA:9E:40:13:21:4C:09:C2:47
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial: 0CFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
Manifest number: 0CF4
Signing time: Tue 28 Jul 2026 18:32:05 +0000
Manifest this update: Tue 28 Jul 2026 18:32:04 +0000
Manifest next update: Tue 04 Aug 2026 18:32:04 +0000
Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: V3ot39jhyNshFyRIzDg1bhOI+e4zSkTvQpQgnHNw6MA=)
2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=)
3: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=)
4: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Validity
Not Before: Jul 28 18:32:04 2026 GMT
Not After : Aug 4 18:32:04 2026 GMT
Subject: CN=6a68f5a5-a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:dd:37:be:53:e8:d7:b5:3e:97:6f:9e:52:
02:f7:d3:b3:c1:2a:6d:73:28:52:f3:45:b6:42:93:
5a:8d:2e:73:1f:9d:e4:9a:49:e8:66:3b:e3:3c:af:
bc:cf:31:2b:d3:23:55:ef:5d:1a:4f:dc:58:83:f6:
42:ec:9a:6b:62:32:41:f3:5a:2c:eb:0d:6c:69:6f:
64:70:ff:30:b3:60:3d:09:d1:97:4d:c6:c5:21:3d:
59:6c:13:41:75:39:40:01:12:bf:e8:ff:79:d0:33:
11:d6:43:a6:b3:ec:4f:df:dc:20:c8:b6:e9:85:c9:
b4:20:37:ca:31:bc:f9:50:3b:36:5f:44:63:03:21:
49:dc:43:68:a8:b6:d7:71:bf:a4:ba:37:5f:d1:a5:
9d:71:92:86:b0:10:d0:be:44:fc:8b:aa:48:ff:e3:
7c:78:3c:bc:d0:f7:ce:8e:76:fe:93:45:a6:7e:23:
75:10:20:1e:28:bf:ae:f6:51:25:4f:fc:44:48:ad:
95:1b:6d:f3:ec:54:ea:90:65:c8:a6:46:10:77:24:
e6:20:c2:33:99:69:5f:64:48:a7:28:75:90:f9:43:
ff:b1:99:e3:e1:f9:7c:bc:09:51:41:bb:b9:06:b2:
85:51:8a:b1:68:9c:d6:a7:dc:4a:7d:6b:17:bf:eb:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:CA:81:11:D4:FC:A5:BF:A7:29:CA:9E:40:13:21:4C:09:C2:47
X509v3 Authority Key Identifier:
keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:64:ca:5b:4b:fa:f8:ab:78:c8:33:47:02:da:cc:60:89:dc:
80:4f:0f:a6:c8:fc:9c:eb:18:68:82:90:a5:06:2d:0d:87:54:
c8:78:65:1d:9a:48:a1:27:02:87:c3:d1:9f:e1:01:5c:bf:27:
bb:61:06:18:61:d4:8f:2a:d7:f4:07:d1:ff:bb:cd:c3:6e:0c:
48:8d:0d:6b:e5:52:ef:c8:41:86:b0:40:f3:72:e7:ee:bc:af:
1f:1a:3c:c1:69:19:da:76:07:bb:04:b5:2a:7a:8e:5b:25:ec:
80:05:7d:8d:7f:15:56:17:7e:eb:34:ea:ca:78:50:72:fc:84:
bc:fa:ec:b4:a4:c1:27:98:52:e1:05:d9:0e:94:ef:c5:23:a7:
0e:b3:e2:d8:e1:66:ec:2d:9d:12:54:8f:5e:9e:90:73:e3:f4:
b6:52:a8:f8:19:05:b2:55:43:f6:53:1e:95:a3:9b:37:93:11:
a4:8c:a4:a0:91:30:d6:23:40:d2:63:05:a0:bb:55:2a:af:32:
cd:41:70:9d:e9:6d:4b:40:95:48:44:fc:9a:dd:45:39:6e:94:
37:3f:94:05:89:7b:e4:ae:00:b2:a1:79:9e:40:a3:e6:da:2e:
fb:78:4b:ba:1c:33:96:17:d7:9f:dd:c4:2a:f8:1c:ae:73:f8:
da:90:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:12 2026 by rpki-client