
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier: zY85i199FVIVjc+m/8E6dAOIbC8tL07+yBfJpenfG+g=
Subject key identifier: E8:4C:0C:D2:6D:3B:0B:CE:3D:8A:9C:29:36:0E:63:B7:7E:6C:9A:AA
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number: 02EB
Signing time: Sat 13 Jun 2026 01:17:33 +0000
Manifest this update: Sat 13 Jun 2026 01:17:32 +0000
Manifest next update: Sat 20 Jun 2026 01:17:32 +0000
Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: PPv12W1JhO28DvrU8l7ttKo6cUq5gkGURLc6QknkVoI=)
2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: 4SMwt+gACInnRK5OGYg5pUcdCWuk0YqF9HQ/Xt+IzcY=)
3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Validity
Not Before: Jun 13 01:17:32 2026 GMT
Not After : Jun 20 01:17:32 2026 GMT
Subject: CN=6a2cafad-338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:8d:fa:a1:cc:ae:65:9a:e9:22:83:88:1f:
c3:b1:cd:6b:04:af:68:41:cf:49:ef:81:27:ba:fb:
a2:c5:c4:77:c2:92:c7:fc:7c:d1:44:fc:30:9a:8d:
18:52:8b:b6:de:49:9c:8e:b1:7d:5b:04:28:28:63:
d2:5f:d0:84:be:71:98:ef:8a:95:b7:32:a3:ac:4e:
db:02:24:af:fb:57:f1:a5:38:da:42:46:58:c2:df:
fc:c1:00:31:5a:a5:28:bb:02:3c:e4:51:f8:e7:ec:
6e:97:f5:ab:6e:c9:65:e8:64:5e:af:e9:7c:f2:90:
db:6d:2c:8e:e1:b7:e7:eb:c0:a7:87:c9:0f:da:1f:
8f:91:8f:ed:94:91:35:3e:96:86:9d:a9:00:34:6f:
e9:e5:a5:ac:10:2e:74:c1:cb:b9:0b:6d:e0:6c:b3:
7c:06:9c:60:81:e9:3c:71:b1:50:f7:aa:d8:d5:b0:
2a:17:8c:47:85:80:19:4f:b0:f4:73:7a:31:06:31:
d4:1a:0c:f3:fb:fa:f2:3f:de:9a:e1:77:92:72:3c:
02:e8:78:c7:24:22:5f:12:e0:22:fc:f7:dc:70:2c:
14:39:4e:3f:b3:18:f2:e8:e4:61:19:fa:11:c7:1a:
9a:34:f3:b6:c2:0d:71:32:0f:76:57:65:7b:d3:82:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:0C:D2:6D:3B:0B:CE:3D:8A:9C:29:36:0E:63:B7:7E:6C:9A:AA
X509v3 Authority Key Identifier:
keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:64:c5:a0:39:ef:d9:89:d7:2d:d2:a7:95:e2:b9:d7:62:
14:74:05:f9:68:ce:58:c3:c3:67:3d:e2:de:e7:1d:29:96:5e:
3e:61:24:fd:5a:59:98:51:7e:c4:27:e3:f4:02:55:32:bb:56:
8a:c3:a2:d3:77:8b:84:3e:c1:f6:9e:dd:7d:8c:e0:1f:31:2b:
31:69:d2:2c:61:9e:53:ae:8a:1b:f4:7c:37:fe:4e:3a:dd:36:
ed:67:68:a0:72:b8:60:98:75:1d:0d:a2:e5:bc:47:6b:1b:e3:
f4:2f:97:b8:e4:09:20:a1:1a:4b:04:73:ce:47:97:17:db:42:
15:34:79:75:0c:cc:cd:45:1b:b7:48:0d:30:c9:d4:9f:ea:a9:
6c:c1:b7:ce:1c:70:42:d3:2e:bb:6d:9c:6b:86:37:86:0c:74:
da:70:ea:60:fe:a6:4e:77:b5:73:9e:06:dc:65:d9:ee:12:1d:
61:b4:5f:a2:9b:c7:fd:96:9e:a1:ea:5b:db:38:67:e8:01:ae:
2a:e9:ef:60:46:51:b9:20:04:1e:74:59:d0:be:16:4d:f2:c8:
5b:3a:07:0d:80:1c:66:bc:80:e4:a9:a9:78:66:cd:e0:f4:a1:
7d:cc:95:ca:ef:38:75:b7:51:d9:21:bb:6c:50:e2:d1:b3:1f:
92:f6:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:13:37 2026 by rpki-client