
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json)
Hash identifier: cJRT0+Ug1DORWev1zT66yhQ/v3fVahxXFPoB2pScKJ8=
Subject key identifier: 19:AD:8F:33:AD:C7:2A:2E:5A:36:FC:9C:43:8C:F9:EF:DF:F1:AE:A1
Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68
Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
Certificate serial: 0753
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
Manifest number: 074A
Signing time: Thu 16 Apr 2026 21:39:03 +0000
Manifest this update: Thu 16 Apr 2026 21:39:03 +0000
Manifest next update: Thu 23 Apr 2026 21:39:03 +0000
Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: uwbrHCUqCfgv+0XvFT8qIsSFdIMd0l9FMAfUA5+y9IU=)
2: 6473BE24979811EB97001639C4F9AE02.roa (hash: dO0dG2sbKDmaTAWh6SLdxUPa6g1RQBYLgPuqDxWZzmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl
rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
Validity
Not Before: Apr 16 21:39:03 2026 GMT
Not After : Apr 23 21:39:03 2026 GMT
Subject: CN=69e156f7-3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:93:94:9d:c2:79:56:2a:8a:df:50:97:6d:
bf:45:66:ac:0b:9f:29:6c:2c:a0:4e:9c:96:dc:78:
d6:0a:a1:17:c0:7a:bd:cf:ab:6f:81:18:e4:50:74:
01:10:4c:65:55:8a:12:59:cf:ec:b9:b7:bb:e5:ad:
af:9a:47:ab:26:ed:e7:94:50:bf:d7:44:8e:f6:7d:
d0:5d:1c:e4:c9:46:78:03:42:ca:7c:d4:79:43:3f:
9a:0a:6c:e7:79:f0:ea:ca:84:33:0a:c2:a8:b3:91:
2b:3d:03:98:9f:16:41:40:b9:6f:fe:00:36:78:ef:
0e:76:ef:21:f2:a6:86:3f:b0:fe:37:0e:f3:21:57:
95:dd:48:38:fe:2e:b2:1f:7f:4b:e9:2e:f4:4c:a8:
4e:db:b8:ff:b2:5a:88:c6:ce:75:ef:11:c7:16:8d:
83:d8:ec:37:ca:04:07:00:ed:0d:24:75:9f:59:e4:
82:e5:d2:0b:38:ea:85:63:61:1b:91:84:09:1c:80:
af:7c:8c:5d:11:48:c6:20:55:d6:73:2a:60:2e:37:
54:d5:c9:ba:15:c2:4d:02:5b:02:1f:55:28:c7:95:
84:fa:ce:52:d4:94:9d:d8:47:18:2a:2a:65:9b:f5:
ca:e6:88:5d:c5:f7:1a:07:f4:ee:e3:f1:d2:e8:86:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:8F:33:AD:C7:2A:2E:5A:36:FC:9C:43:8C:F9:EF:DF:F1:AE:A1
X509v3 Authority Key Identifier:
keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:ae:97:89:ac:ef:10:d7:94:35:23:27:ec:98:cb:1f:c7:
cf:bc:96:39:ef:ca:72:be:b8:d1:a9:85:22:b9:fd:07:f2:65:
bb:f2:31:03:d2:0c:50:00:71:9e:18:99:9f:81:fa:06:53:ab:
2a:7a:93:9e:8a:2b:09:11:c8:53:90:f5:2b:f9:84:51:0c:9c:
c3:c9:77:50:e2:70:d8:27:13:72:e3:18:46:2e:1d:2a:f8:9f:
08:fc:a4:22:1e:e8:de:39:9d:0e:f4:2f:04:91:42:1e:06:49:
62:23:35:67:c8:f2:c9:07:af:2b:49:e3:10:22:2b:dd:ed:3f:
09:a4:2f:2a:88:df:a6:56:18:82:87:61:4c:5b:4e:6e:3a:a1:
e4:18:74:4d:d5:08:6a:f5:78:29:7e:9a:25:e3:39:2b:53:7e:
47:43:5d:69:c2:4e:18:12:99:67:64:de:74:32:f3:c0:a2:5e:
d1:9b:5e:bd:43:a4:ea:09:5c:9e:f1:09:11:36:3c:f3:69:f9:
b1:cb:ee:74:f9:e5:60:ad:58:33:9d:83:79:8b:34:37:c4:c0:
14:f8:46:0c:0e:a7:54:2a:9b:67:de:28:56:2e:4b:15:a8:d0:
0c:8f:1e:df:b0:4b:95:97:3b:40:57:4e:98:a3:da:f5:26:c9:
cc:ec:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:47 2026 by rpki-client