
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier: PaeekF04P2PI7tPf8w/wyz1z5TN3y5HNodam6Yjww84=
Subject key identifier: D6:DD:B9:4E:51:27:CD:DE:DC:66:33:84:10:64:E6:18:B5:77:67:64
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number: 0450
Signing time: Sun 01 Mar 2026 00:58:56 +0000
Manifest this update: Sun 01 Mar 2026 00:58:56 +0000
Manifest next update: Sun 08 Mar 2026 00:58:56 +0000
Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: +iqWHvf0jQleHvumR4zUq2GHNMLTsIsKKVpqzzWs9Rk=)
2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: 4x/Olp6Wfirdg1HlLYkSYa7GrPvykTA5trQIvSH8vS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Validity
Not Before: Mar 1 00:58:56 2026 GMT
Not After : Mar 8 00:58:56 2026 GMT
Subject: CN=69a38f50-0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:84:3a:65:c5:de:f5:8c:c7:fd:d2:74:77:
03:15:0a:09:92:35:af:ea:1a:fa:d8:48:a2:be:50:
fc:c3:0b:9b:c5:39:09:5b:56:9f:bd:b4:2d:9d:be:
35:ec:bb:f6:3d:9f:52:2e:46:b0:00:32:fd:09:47:
05:5f:52:31:0d:c2:3a:3d:13:00:35:28:0d:25:3c:
fc:e0:98:51:39:b6:4e:02:5d:f0:8e:72:53:93:32:
ba:cc:de:d3:6d:67:6f:b5:22:dc:08:a5:e7:e4:0e:
b9:51:50:11:67:19:8f:2a:f6:66:82:c6:64:58:10:
f8:c7:28:57:d4:09:93:f7:67:a9:b6:81:9b:6b:fc:
6d:be:f9:38:6d:e0:01:e3:20:9b:f4:a6:30:4c:55:
99:89:6c:47:7f:df:98:27:9a:e5:31:33:f8:95:df:
2d:99:d6:99:9b:c8:19:47:f1:bf:a6:f6:b2:82:88:
6e:b1:5e:06:a7:d7:06:64:22:9a:9a:f9:fc:5f:ba:
88:f3:fd:09:32:d8:20:6a:60:ef:2d:e7:41:b5:a4:
01:aa:69:8f:2b:15:70:e1:64:f2:fa:64:64:1e:65:
9d:6c:11:9c:71:20:cd:b8:ca:66:4a:9d:1b:ef:25:
52:8a:35:39:58:8e:bd:55:78:90:3a:89:13:9c:5b:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:B9:4E:51:27:CD:DE:DC:66:33:84:10:64:E6:18:B5:77:67:64
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:4d:99:ee:58:1a:82:51:ba:fe:a4:e5:f9:9e:df:51:d3:17:
97:ba:c1:7e:e5:a4:83:55:7a:c8:90:57:33:51:e2:3a:10:04:
d1:c7:79:d5:e1:ff:be:08:2f:aa:84:f6:89:08:90:2a:6c:1a:
7f:e1:4e:1d:98:98:66:18:e5:80:c5:6b:90:4a:66:4c:a2:58:
fa:79:38:1b:81:de:71:6e:45:78:a5:5a:a9:97:2a:ff:db:11:
12:2d:49:63:b1:3d:7a:3d:25:90:09:a0:00:46:ea:f7:74:54:
a8:30:37:2a:64:eb:e5:99:d7:22:3c:aa:0d:df:db:34:49:68:
d8:98:5b:84:df:63:c6:c1:c9:43:d8:ac:05:5f:ba:65:d1:c8:
27:a6:53:a5:55:7a:53:8d:2e:06:4f:19:c3:80:72:1d:64:7b:
df:46:b5:81:b7:7f:44:84:c3:15:bd:3e:3e:30:22:82:58:8d:
0a:27:70:b8:fd:ff:4e:f5:b5:f9:1b:b5:52:99:b1:a3:78:f6:
3b:b5:89:4b:72:e7:43:97:c0:96:e1:45:26:51:ca:6a:84:3b:
d7:c8:ee:89:7c:a0:5b:2d:00:86:78:38:2c:13:17:f8:ea:57:
04:31:2c:10:43:89:c2:0a:82:9f:54:6e:51:ce:30:be:74:a8:
ba:05:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:11 2026 by rpki-client