
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: A9IWAbYW5uEInGRKrtTMRU4fgPgjwMubXHFsgM7ohfU=
Subject key identifier: 3D:59:FD:26:2B:52:BF:80:97:01:4C:21:8B:26:0A:E4:08:C4:4D:B1
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 0833
Signing time: Sat 28 Feb 2026 21:19:17 +0000
Manifest this update: Sat 28 Feb 2026 21:19:16 +0000
Manifest next update: Sat 07 Mar 2026 21:19:16 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: qS1yUIQUAQQpagEJlLUK5AM4VY3DGExxj2aw5EtNQpw=)
2: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=)
3: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=)
4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=)
5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Feb 28 21:19:16 2026 GMT
Not After : Mar 7 21:19:16 2026 GMT
Subject: CN=69a35bd4-4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:94:92:23:94:5b:41:e7:89:da:0d:64:71:
4d:db:50:28:46:96:cf:b2:92:73:7b:9d:aa:17:fa:
25:00:9f:6c:49:c8:f7:b7:3b:e2:1b:a2:0c:c5:68:
f9:57:91:75:a8:fe:40:4d:d4:01:a0:f0:4a:5c:03:
92:d3:a8:3d:b6:fe:fd:ef:08:f6:f9:aa:01:6e:b6:
26:a0:03:3d:47:c2:77:a8:a1:bb:d0:74:e6:e8:4d:
1d:c9:42:65:7d:62:14:75:85:5d:6e:fd:ec:c9:7c:
2e:b7:09:21:9c:21:24:59:b7:47:8c:5a:23:3c:1f:
1b:0b:88:31:85:54:40:bb:b3:fc:6c:88:6a:d8:19:
39:87:a4:2d:43:67:c4:df:18:f1:4b:22:d1:d6:ed:
ab:9b:f4:3d:c7:66:86:3d:ef:2d:d6:72:20:72:b2:
a4:cd:b6:c6:1c:b6:ad:1c:28:d2:96:fb:df:3f:ea:
88:03:6c:eb:d1:e4:cd:a6:6b:96:8b:f6:31:58:07:
77:ce:5e:5f:32:cf:02:c2:f9:a9:81:34:e6:f6:fc:
8b:05:c7:9f:c7:a2:e7:3a:59:58:df:7d:7a:8f:0d:
ad:41:f0:3f:7a:2e:13:20:5b:49:8a:b4:55:78:7b:
87:87:ae:33:00:1b:7f:aa:38:10:51:f3:89:80:67:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:FD:26:2B:52:BF:80:97:01:4C:21:8B:26:0A:E4:08:C4:4D:B1
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:a4:7a:62:89:74:7b:f9:51:1a:a0:f1:05:50:36:90:25:54:
dd:82:48:be:6d:cb:f0:06:cf:d7:2e:32:af:9f:a8:d8:eb:e1:
0a:08:3a:ff:b9:6e:40:c9:2e:6b:af:6a:a9:c3:7e:0d:a0:d7:
15:1d:82:fb:3c:8c:96:df:9f:35:11:2a:ff:a9:49:b8:ee:f8:
9d:97:c9:68:a1:64:00:83:01:46:84:ed:11:5d:60:ce:26:7c:
09:24:e5:9e:49:d1:7e:42:3d:af:47:a0:a8:6d:82:25:e1:ba:
0f:1e:a6:98:5d:09:9e:4b:8f:f7:25:cf:5d:ce:68:4c:d7:5c:
04:4c:97:cf:b9:eb:bc:6a:e2:94:70:2a:a1:52:77:f0:7f:e0:
e5:a5:30:62:70:2d:b4:8f:ab:e1:4b:dd:71:0a:5b:c4:fc:18:
80:93:21:9f:de:ee:2d:93:d1:54:1b:f8:eb:89:f1:aa:e9:1e:
be:85:31:77:8e:5b:6b:4a:38:bc:b5:0f:27:a3:97:bb:f5:d6:
2f:e8:39:1c:4c:19:ed:2a:e7:c4:47:66:81:4f:54:9e:6a:a0:
cd:cf:0e:b3:4d:2d:b8:02:aa:b1:b3:02:f7:b6:dc:02:72:ae:
b2:fd:f9:70:cb:a0:e1:62:74:d9:1f:2e:46:74:2a:70:dc:c1:
a9:f0:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:58 2026 by rpki-client