
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json)
Hash identifier: IvGhM8BswB0pFc+QgVXJEazOHf6jQwzyWtMOtQHAqf4=
Subject key identifier: C0:27:7C:10:5E:59:36:9E:66:C3:78:1C:21:72:DD:5B:A3:D5:48:70
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial: 0CA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
Manifest number: 0CA2
Signing time: Mon 02 Mar 2026 01:05:20 +0000
Manifest this update: Mon 02 Mar 2026 01:05:19 +0000
Manifest next update: Mon 09 Mar 2026 01:05:19 +0000
Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: x7PNppy3T+xNY6Juctsb+AIQuF5dlojx0nJJAHP3DrA=)
2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Validity
Not Before: Mar 2 01:05:19 2026 GMT
Not After : Mar 9 01:05:19 2026 GMT
Subject: CN=69a4e250-b41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:d9:55:16:df:16:2e:c2:8a:35:ed:4c:10:
56:86:42:4c:b6:2c:41:b2:18:90:f2:2e:b2:c3:ed:
ef:29:36:70:4d:4d:ab:1d:3b:76:b2:3d:60:71:f6:
4c:19:84:25:b9:97:fa:7c:ad:f2:34:21:57:b5:44:
00:47:78:02:1b:d0:73:45:12:2c:ea:7e:ef:43:34:
df:14:f8:ff:5d:36:c6:b0:19:a8:04:e2:7f:d4:ae:
9b:7a:a5:d8:a3:86:47:47:ce:88:ed:68:dc:a8:42:
20:82:16:06:5c:56:55:a6:a5:a8:65:7e:6e:14:11:
c6:a1:d6:34:69:fc:d0:d1:fa:7f:9c:92:b6:35:03:
99:7e:1d:5e:10:35:aa:a2:5a:5c:84:12:88:cb:0d:
e5:c9:0a:bb:d4:f7:fc:dd:c7:83:07:52:39:4b:06:
58:95:98:13:48:69:0c:a2:81:a2:33:6f:8b:22:8e:
ea:98:ef:86:10:a6:52:07:be:b1:25:5b:29:a1:33:
ed:24:fc:fd:9e:70:a4:96:f1:51:af:94:fe:27:dc:
08:f8:b8:40:6f:a4:6d:6d:89:23:66:f3:a0:a0:59:
10:b9:6e:76:90:02:89:59:d3:b6:0b:17:40:85:86:
9e:dd:69:b4:86:c0:8a:52:31:9d:8a:20:b0:ef:bc:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:7C:10:5E:59:36:9E:66:C3:78:1C:21:72:DD:5B:A3:D5:48:70
X509v3 Authority Key Identifier:
keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:3e:5a:03:3e:34:05:b7:c5:dd:ba:01:a8:af:17:e7:d8:
91:a1:6f:3a:33:7b:3c:e7:3a:ec:77:b4:14:4e:66:ba:d9:ef:
a7:aa:e0:ff:bf:36:06:72:7d:bf:24:b4:d1:04:2a:ea:06:7a:
05:34:ba:fe:d5:0d:16:bb:b3:22:13:d3:af:d3:53:2c:b6:ac:
d4:90:bf:73:2c:42:17:e5:75:9d:8c:3a:ea:62:90:fe:05:3c:
ba:a0:71:c3:0d:76:72:d6:a9:69:52:32:9b:b6:25:1e:2c:a4:
a3:b8:41:8b:35:92:4f:c9:26:3c:40:c1:b9:4f:78:4f:32:21:
82:a3:ee:e2:50:bd:c8:89:4c:ea:5d:f5:36:df:6c:0b:d5:98:
93:ab:dc:b8:92:46:ad:e1:c1:1c:5c:42:8b:9f:41:32:2b:ed:
82:b0:8d:9e:de:13:ff:bc:ca:b8:34:91:49:95:65:55:98:f2:
5f:6e:98:7e:69:fc:d3:7a:9a:49:25:5c:0e:09:30:5d:90:9b:
01:45:3c:a3:cd:9c:76:c9:af:83:e0:7b:74:eb:fc:50:f8:f2:
18:bf:11:2b:48:fb:8c:c9:3d:95:d6:c5:83:c4:3c:29:0c:41:
ad:4b:f3:7e:d6:ff:ee:21:8f:ad:53:da:3d:f1:05:3f:f2:3f:
59:ee:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:15 2026 by rpki-client