
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: UqiUZzZDe7AsaM+B3MrFMKX5r3e/BwJ5oSuu4ferclY=
Subject key identifier: 2A:33:90:6B:26:95:86:B3:C1:DF:3B:F3:E5:D4:5F:A9:D9:1E:A8:28
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0E0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0E00
Signing time: Fri 12 Jun 2026 17:49:15 +0000
Manifest this update: Fri 12 Jun 2026 17:49:14 +0000
Manifest next update: Fri 19 Jun 2026 17:49:14 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: 045cI9iB027wV37Ud5ybvAguR0Q/PckUhk2I2ZeJO4g=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3595 (0xe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Jun 12 17:49:14 2026 GMT
Not After : Jun 19 17:49:14 2026 GMT
Subject: CN=6a2c469b-8019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:c5:7c:cd:41:bd:88:ab:fa:dd:6c:ca:d3:
fc:a9:1f:63:07:20:e6:8e:a0:6b:dd:78:52:3c:5f:
21:86:58:df:e6:eb:ea:b5:ec:47:c0:ee:18:a0:31:
52:9b:14:5d:ab:7a:69:bd:67:e6:47:9a:c2:cb:ae:
c4:80:0b:63:1a:6b:43:0e:f0:fe:67:a5:26:62:c1:
67:d1:f5:c3:33:6e:22:f7:58:6e:07:08:d3:f4:e8:
aa:41:25:71:f3:38:6c:a3:20:dd:53:46:9e:75:8e:
da:d8:71:27:26:99:4a:19:f8:55:28:34:52:c2:cc:
67:f3:b3:cf:81:cb:0c:e3:50:ef:1d:f9:72:f8:ed:
b7:d9:24:c6:1f:9b:b3:71:cd:c9:7d:53:38:f3:c2:
88:f7:52:eb:de:d6:1e:7a:86:ed:87:78:5d:8a:07:
0b:81:10:fc:ee:8d:5f:8f:59:1b:3a:f0:52:41:4c:
d7:b1:c5:3b:56:c9:64:fa:e6:88:22:1e:75:2c:7f:
e9:71:11:4a:12:c0:79:1f:f2:ca:ab:79:b3:54:c6:
64:50:1e:26:a8:58:9a:b1:69:3e:7b:64:a2:7e:ed:
f6:04:16:68:a3:a2:1d:1f:91:23:93:1a:aa:33:2c:
af:a6:b8:9c:2c:93:0a:97:03:ac:ee:b5:a4:1e:1a:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:90:6B:26:95:86:B3:C1:DF:3B:F3:E5:D4:5F:A9:D9:1E:A8:28
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:bd:b3:53:e7:bf:50:7c:0d:89:cc:3b:7e:ef:93:c9:dd:
26:26:d5:e2:4a:af:b7:8a:da:fe:99:00:91:3b:9c:65:f7:2d:
fe:e9:65:40:96:9b:9b:e1:38:6e:d7:bd:41:32:a6:5c:83:74:
e5:67:7b:3e:16:0d:14:35:63:2c:32:bf:d5:04:2d:89:11:0a:
5d:72:5f:cf:3e:11:44:9e:88:e1:b9:df:53:1c:39:b6:55:0f:
7b:64:f3:6a:c0:d5:09:e5:a7:95:c1:c1:a3:d7:ca:a6:7a:a3:
a0:1e:11:77:fd:4a:58:91:aa:13:fd:b1:59:10:e3:ca:ad:51:
4f:ad:31:37:06:94:39:50:32:f0:82:b7:45:71:b7:9e:78:30:
57:ea:aa:54:7d:97:2d:dd:b4:f3:da:11:9c:b2:ac:f3:e6:04:
f5:db:1e:b7:24:53:0a:e9:18:57:62:8b:93:aa:82:6a:95:c7:
e8:e4:21:42:8c:95:b1:ca:2a:24:4a:9a:a3:ab:58:e9:44:cf:
62:a6:d3:9b:e4:45:a0:ba:83:c5:8b:d2:c4:4f:cf:bd:68:2e:
47:c7:f1:23:ca:af:9d:28:0f:b7:35:4f:30:7b:92:62:39:42:
35:7f:d0:ec:d3:de:81:0f:d1:b1:eb:16:61:90:c5:0b:18:1b:
1c:0e:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:50:55 2026 by rpki-client