
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json)
Hash identifier: NP76L+6QUQmF98RPki6uC/Z5elNcYA+SUChmH4gUPNI=
Subject key identifier: 86:4B:A8:5D:13:DF:E6:E1:DA:53:3B:BF:6B:AC:02:B2:5E:5F:51:98
Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
Manifest number: 052A
Signing time: Fri 12 Jun 2026 23:36:03 +0000
Manifest this update: Fri 12 Jun 2026 23:36:02 +0000
Manifest next update: Fri 19 Jun 2026 23:36:02 +0000
Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: 1GxqPDzIjSg30rVqdyl6vmRvlOwM1FTDwL8JdUyzsCI=)
2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl
rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Validity
Not Before: Jun 12 23:36:02 2026 GMT
Not After : Jun 19 23:36:02 2026 GMT
Subject: CN=6a2c97e3-7593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:4c:60:3c:fa:b8:5e:ef:4b:4f:37:28:0d:
97:b5:6e:dd:88:be:f9:25:62:9c:d9:69:10:74:ce:
c7:e3:9a:02:08:33:f5:6b:25:6f:27:81:47:ea:ef:
97:47:b8:a0:64:73:77:82:0d:34:7a:86:21:06:f2:
6b:db:a0:94:19:c6:10:88:4b:6d:8f:fb:58:36:b1:
fc:96:47:a3:12:e8:bb:64:f8:15:76:ed:48:8b:e0:
30:b6:39:83:30:b8:6b:3c:d5:1c:ea:a9:a1:3d:3b:
2f:4c:fd:cc:ad:4b:b7:53:bf:67:fd:de:a3:14:de:
38:b5:fa:0f:4d:7a:f9:11:43:4d:8b:2a:9f:2f:2c:
76:79:5c:a2:8c:c3:e5:fa:c5:8a:9a:68:fe:41:57:
46:99:8f:b5:6d:7a:49:48:4a:bc:6b:db:5b:06:d9:
33:0f:f2:76:b1:c2:27:6f:1c:8b:89:6e:e8:98:ef:
67:2a:5e:08:99:8a:96:6a:a7:6a:63:ec:80:2d:11:
a2:c3:56:52:12:4f:49:41:05:98:8e:a2:57:da:d0:
1f:fd:8f:72:bf:28:51:e6:a7:02:31:a4:77:6f:05:
36:eb:f0:01:f4:b3:b8:d2:29:b0:4f:d5:4e:b4:d6:
0a:8f:ce:04:f8:5e:9e:5e:47:eb:84:6b:e6:73:6b:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4B:A8:5D:13:DF:E6:E1:DA:53:3B:BF:6B:AC:02:B2:5E:5F:51:98
X509v3 Authority Key Identifier:
keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ce:9c:b4:93:16:9b:57:0d:53:0d:ef:23:f4:b4:0e:92:d0:
2e:c1:7d:3b:c0:42:63:a2:a9:69:88:5c:f8:5a:a9:f9:f2:ce:
ce:b0:e1:a2:56:7e:86:72:76:9f:0b:84:ea:c9:18:68:72:46:
4d:70:23:fc:af:aa:ee:68:9e:7e:cb:06:ca:f9:91:06:97:ab:
84:43:4f:32:03:29:33:ff:00:9a:60:bb:bc:5d:cd:63:62:48:
91:6f:a5:dd:b6:ba:8a:dc:6f:b7:3c:e9:38:2c:20:66:42:e8:
6b:cf:50:17:49:8c:1e:41:e9:da:14:ad:43:20:04:65:8e:ae:
ae:18:7b:e7:b3:f2:dd:93:5b:be:73:f0:71:98:11:14:38:9e:
c7:e4:69:51:49:97:6d:b4:57:80:e3:85:df:d9:e2:e3:5c:a2:
e5:21:96:eb:3b:af:15:2d:85:15:41:e5:24:f3:88:65:4a:eb:
fd:94:a9:7c:e8:45:b7:b3:18:37:ec:08:5c:8a:44:ff:41:60:
5e:12:bd:c1:79:26:0a:ca:9c:37:bc:27:fc:6d:6b:4c:e7:0d:
40:65:0d:38:c7:5c:fa:fc:5d:3e:16:3d:31:8a:50:36:f1:1b:
aa:e3:0e:4a:9c:c6:cd:54:1a:1a:97:b8:3f:e6:ce:f8:c6:33:
33:1a:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:27 2026 by rpki-client