
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier: fFBhJz0Mr4vtXhcOqIIaSOuHTRO8bN5vW4rrxaT4ckU=
Subject key identifier: 4A:07:2C:AD:B2:AB:1E:AB:A3:13:ED:3C:0F:29:32:E4:89:E4:C2:BF
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number: 0589
Signing time: Thu 16 Apr 2026 23:10:44 +0000
Manifest this update: Thu 16 Apr 2026 23:10:44 +0000
Manifest next update: Thu 23 Apr 2026 23:10:44 +0000
Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: jsZ3i8LaIoiSpH5iqVbgNNsNXPrZysrLWM64KxAk2K4=)
2: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
3: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: Apr 16 23:10:44 2026 GMT
Not After : Apr 23 23:10:44 2026 GMT
Subject: CN=69e16c74-dd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:9c:c3:2b:6e:ac:39:16:af:af:a6:2c:5e:
5f:bd:60:35:c8:21:75:31:fa:74:5f:82:dc:c1:ad:
53:eb:d2:ac:1e:8a:c8:96:29:93:ec:58:ba:3f:af:
12:bd:03:53:d8:50:79:21:bb:1b:87:b8:5b:6d:98:
4b:8f:cd:7d:b6:5b:07:11:2d:c7:c4:ce:4b:d5:06:
4c:d2:05:71:87:11:8b:b4:b9:92:a5:21:b3:d8:42:
02:7b:25:11:48:c5:00:d1:77:aa:bf:7d:ce:73:a4:
ad:d5:dc:43:bb:d9:2f:9d:4f:98:4b:3a:ad:46:67:
ec:ad:ec:06:ca:9b:43:4a:d8:36:2a:2d:95:82:2a:
71:b5:29:df:b0:ea:5a:a7:e4:42:6e:5a:f2:00:36:
8a:09:6c:64:bd:04:69:67:83:6b:8b:0f:58:48:96:
7a:77:60:a4:7f:e5:43:29:65:b4:43:99:16:81:cd:
f9:5f:60:c0:05:59:e2:38:91:9b:7f:77:e2:2f:13:
d1:9f:fb:86:5d:97:ae:f5:0b:58:90:60:0c:56:54:
ad:ec:18:37:1b:bb:0b:37:b6:d7:d1:20:af:91:78:
6b:e3:6c:08:13:b2:25:5e:99:a5:7d:37:da:86:14:
af:61:b2:39:c4:55:3e:56:ab:c5:08:0e:24:65:2f:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:2C:AD:B2:AB:1E:AB:A3:13:ED:3C:0F:29:32:E4:89:E4:C2:BF
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f4:fe:48:e6:fe:df:2b:eb:01:cc:ba:ef:c0:d8:5b:c1:9e:
90:4a:85:a0:49:9a:e9:2f:38:78:10:c3:c6:b1:97:5b:28:a8:
55:e9:0d:16:b3:fe:c1:a0:41:62:3c:87:44:73:fe:50:d0:e9:
8f:f8:1e:0c:e4:88:f2:5d:44:38:ce:61:b4:b6:03:e3:48:ea:
e0:42:fa:1e:d4:69:83:4f:6e:51:00:69:cd:d0:49:76:28:bc:
90:45:0c:53:b6:69:3a:c5:6a:72:b6:e0:8c:3f:8a:99:be:61:
6a:87:72:e3:fe:d9:ee:aa:3b:11:86:79:c6:e9:0a:8f:16:c9:
1e:63:bf:17:c1:10:24:cc:4d:8e:67:13:ee:a3:10:f6:3d:6b:
3e:e0:c3:c5:cd:d2:9f:50:22:e4:2c:29:1e:29:cb:79:f6:8a:
e8:be:2f:a3:76:c9:7a:9d:85:3e:d7:03:a6:63:1d:18:5f:42:
3a:c3:fd:35:a0:c1:05:2a:3f:54:ab:ff:de:92:c6:ec:31:d1:
b0:fc:7c:80:b7:ea:b7:50:ba:12:ee:bd:15:4e:d1:b6:bc:60:
fd:d3:a2:e0:9a:0e:43:5b:3b:18:a1:98:bc:3c:5e:ef:65:1a:
0f:90:63:fe:dd:f0:61:14:82:59:a8:b4:38:6e:1b:db:88:77:
ed:f6:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:36 2026 by rpki-client