
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: +Y2/AHST8wdqK0twy0nenbaQ1MYipU3K4ygBQSfiYZQ=
Subject key identifier: 2C:C0:B8:62:F1:D5:F9:57:E4:85:A2:5F:82:1B:98:98:2B:DB:F5:91
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0DD2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0DC9
Signing time: Sat 28 Feb 2026 18:01:52 +0000
Manifest this update: Sat 28 Feb 2026 18:01:51 +0000
Manifest next update: Sat 07 Mar 2026 18:01:51 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: lF3ppkPOkxMogB5J/qC4TYWz/gnHNnNVBCooddDv/hU=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: fj3ZfIuv46WZhy463ZrSDMi8tHMNYlPpfD2upEYX6Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Feb 28 18:01:51 2026 GMT
Not After : Mar 7 18:01:51 2026 GMT
Subject: CN=69a32d90-a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:74:cc:0c:9c:e5:2d:09:a6:cb:c7:7c:2a:
9e:e8:84:f9:44:96:41:49:75:73:d1:be:15:04:83:
36:b9:da:c2:ae:8e:de:d0:3a:b0:c1:12:5d:04:68:
f7:01:07:c6:38:10:b8:3e:ec:7b:58:9c:28:87:f4:
e5:d8:a6:ef:d0:ef:ac:34:75:52:e6:b2:95:19:df:
a2:8d:05:cf:ad:f9:64:76:23:5f:c6:6a:3f:6d:eb:
fe:78:e7:0a:77:55:7f:76:b2:11:ea:e5:ae:27:6e:
33:64:bb:b0:2b:b5:2e:59:7c:3f:6e:85:dd:00:bf:
e9:fc:4f:1e:01:86:aa:e2:48:7c:2b:0f:99:f7:2f:
c0:d7:d7:16:48:49:af:6a:4a:c3:75:12:b7:b4:bc:
27:6e:5c:fd:ac:41:ef:b2:0b:8b:c0:13:5f:43:6a:
45:22:82:c1:87:47:e7:42:39:66:5e:e3:86:3a:06:
a7:ca:65:c0:4b:85:b2:b4:30:9c:34:95:37:7c:c2:
e2:a8:33:ec:7c:49:e1:9c:00:53:ca:42:0e:99:37:
67:cd:0f:6a:3a:f7:bb:8e:59:36:6d:90:50:1a:71:
c9:f7:aa:91:89:a1:49:08:18:c1:cf:e9:4d:73:b0:
e9:4e:fb:43:a4:61:8a:bb:e8:6c:84:58:41:a7:f6:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:B8:62:F1:D5:F9:57:E4:85:A2:5F:82:1B:98:98:2B:DB:F5:91
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:23:c1:31:23:99:10:e9:53:f5:e9:46:e5:65:70:1c:6c:b3:
6b:b3:64:5d:b9:22:01:20:d7:5a:d3:c0:f3:6e:ab:c3:57:ed:
eb:1d:46:4e:de:12:e1:b3:2d:94:96:96:78:d4:f4:06:a8:8c:
de:0b:02:20:11:01:84:1c:ef:5c:5c:92:4c:39:3b:7c:c7:45:
62:18:af:19:1e:c2:99:71:dd:52:bb:17:b8:b7:c0:5e:32:0b:
b9:8a:79:c7:ba:29:bb:92:ed:4d:c5:2f:2d:80:06:30:f0:e6:
e8:de:17:bc:ad:ba:4c:64:6f:c5:bb:79:39:42:f9:b1:39:ba:
bf:18:f4:68:6a:ed:05:19:ee:1e:d6:4d:53:ef:ae:c4:a9:64:
3b:59:f9:f2:92:67:29:ed:cc:49:36:56:64:8d:81:df:8f:ef:
34:c9:93:61:13:38:41:0f:0c:94:b6:08:35:f5:7b:0d:23:b9:
ae:20:6c:73:6d:cb:de:57:3c:2b:d0:6e:18:f2:e3:83:6a:04:
64:e2:62:70:7c:c1:8a:b9:48:cb:1f:be:9d:75:b9:8e:a0:6e:
b2:20:b6:9d:84:51:6e:6b:a3:4e:25:61:b8:48:df:0d:72:d9:
54:03:f0:46:5a:c4:f5:20:41:4b:6d:37:db:e8:86:82:fb:93:
25:1c:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:31 2026 by rpki-client