
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: Q2icW2Za6Ydcx/BgZicjnYoADnpIIj2QteonVoYyVEU=
Subject key identifier: B6:4B:AB:4D:A0:B6:1E:B7:53:8A:41:01:73:9A:8B:40:94:B4:B5:6E
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0E41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0E36
Signing time: Sat 26 Sep 2026 17:51:19 +0000
Manifest this update: Sat 26 Sep 2026 17:51:19 +0000
Manifest next update: Sat 03 Oct 2026 17:51:19 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: Gke0fF2I6VK6sh0VLYVRmz49m01aUJNsNS2RZkf9K2g=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3649 (0xe41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Sep 26 17:51:19 2026 GMT
Not After : Oct 3 17:51:19 2026 GMT
Subject: CN=6ab80617-2746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:a6:75:bd:df:76:65:bc:9a:ad:b6:38:3a:
45:e6:a7:1e:3f:24:86:4d:53:e7:11:7d:a8:09:e7:
4f:d5:7f:24:a5:9c:ec:59:f2:6b:75:49:de:94:3a:
24:db:e5:a2:3b:1c:e3:1e:a3:82:ea:d2:82:72:76:
af:f4:27:2b:6b:ca:f3:fc:39:f5:af:ff:a0:c1:b8:
06:b2:3e:be:9c:47:f3:1c:55:61:cf:08:08:59:4a:
6c:6b:04:93:f9:7d:2b:ae:68:c1:66:85:71:81:ac:
c2:4a:51:6f:99:6f:44:4a:f8:84:85:d8:7c:82:1f:
dd:a6:73:41:a8:16:59:0e:3c:2b:8a:3f:c3:82:e7:
b9:e5:a6:81:8c:d9:47:a0:80:c2:9c:bd:45:a9:85:
28:a9:c5:a8:95:86:88:92:97:b5:3f:5f:77:c7:57:
7f:61:32:50:f9:b4:f1:e3:fe:e5:3f:ab:41:07:a4:
7c:c2:5f:a8:1f:73:9b:cd:4f:46:a9:a2:5a:aa:9c:
dd:e2:77:3a:1b:b0:f2:8c:ca:72:53:95:40:34:36:
9f:26:d0:ea:23:8a:4d:a5:fd:13:cd:ba:96:aa:d2:
0d:39:89:1e:25:fb:0e:31:3d:10:e0:10:08:ae:a2:
a4:ef:bc:c5:21:a4:2b:0e:b8:98:de:6a:ea:ea:5f:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:AB:4D:A0:B6:1E:B7:53:8A:41:01:73:9A:8B:40:94:B4:B5:6E
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:47:32:5d:de:77:47:28:9d:04:f7:14:e0:f3:18:80:dc:77:
d8:17:ee:32:69:e4:37:38:3e:83:7a:61:36:96:d8:a1:21:bf:
a2:b8:e2:5b:9c:89:8f:aa:77:a1:fb:17:bf:12:a7:1f:e3:ba:
54:d9:28:07:c2:5d:c9:d1:06:e2:9a:83:c0:30:18:47:bf:52:
c8:79:77:73:6c:f5:7c:10:19:35:ce:fb:78:be:87:08:83:ca:
56:70:b3:79:54:94:50:d2:0f:3d:c8:1f:5e:0e:ac:e5:eb:2d:
9b:1e:15:2e:02:da:3d:47:d5:08:1e:e7:55:97:69:c0:a4:cb:
dd:31:c3:9d:93:22:2f:1e:38:d6:45:4f:5d:22:4e:90:1f:3b:
ae:4f:a0:81:98:b2:b1:b4:21:3e:43:16:58:1b:3d:02:9c:7f:
c9:e0:07:ad:d0:f5:67:aa:25:b7:e6:45:8c:65:6e:cf:a2:b1:
fc:1d:04:16:7b:b6:bb:a8:e5:b7:51:47:86:3e:9e:81:3a:02:
ea:1d:7f:50:b2:58:6c:4f:86:10:00:87:03:09:af:50:2f:fd:
e4:18:f3:72:8e:22:2e:5d:7d:fa:75:9d:e9:82:f1:ab:b9:9b:
88:f2:49:a6:53:07:19:08:a6:38:2f:b9:27:24:ae:8d:79:60:
2e:ab:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:22:18 2026 by rpki-client