
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: z4N5S+VW+KrHACw/N+e5b+hTaue7VBn40RDQXyF3Vgo=
Subject key identifier: E8:70:3D:8F:CD:FC:9B:EA:16:5D:EF:EE:45:4E:E4:FC:5D:38:39:2F
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 0273
Signing time: Sun 01 Mar 2026 02:33:12 +0000
Manifest this update: Sun 01 Mar 2026 02:33:11 +0000
Manifest next update: Sun 08 Mar 2026 02:33:11 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: rdYA1sKYIQxl+cxK0iKsgTkhB8/sEOCBl3WcQcQ8FEo=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: Mar 1 02:33:11 2026 GMT
Not After : Mar 8 02:33:11 2026 GMT
Subject: CN=69a3a567-da65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:c8:8b:9f:ef:57:5e:1d:9b:47:a4:06:18:
01:ba:41:9e:71:01:6e:63:a2:2b:77:c4:f7:84:af:
7d:63:02:08:50:4a:01:47:51:3b:b5:9c:7f:5f:57:
59:05:cd:19:0b:54:fb:2c:6b:22:0c:0e:69:ee:9a:
bd:4a:0c:d6:fc:f4:fb:0a:3c:1f:7a:9e:bb:63:f4:
62:e0:fd:db:0e:2d:0f:2e:a5:9a:3e:8f:d1:1b:db:
ec:b0:8b:ae:35:2e:7b:98:cd:8d:37:48:55:31:94:
0d:dd:7f:fa:52:f9:10:99:5e:5f:29:59:da:36:5e:
e1:8a:84:0e:c1:87:91:39:8c:98:33:b5:cc:60:a9:
9f:89:5c:2e:33:6d:a3:cf:cb:d2:93:a2:66:ee:2a:
e5:dd:83:e2:51:0b:2a:d8:ab:fc:b4:35:b4:e0:1e:
eb:a7:05:b6:a3:25:ca:55:9b:31:59:4d:5a:04:46:
d1:fa:51:64:9f:41:70:f8:02:7d:57:db:5e:78:65:
f4:12:3c:e7:22:db:77:4b:4b:44:ed:51:97:7e:e7:
d6:23:cf:5b:62:ac:34:62:42:18:70:b0:d6:17:47:
d0:0a:8c:10:ac:40:e5:44:1f:b2:df:2f:81:f2:ba:
5a:d2:b7:dc:73:42:84:f2:2f:44:43:f3:8a:5f:20:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:70:3D:8F:CD:FC:9B:EA:16:5D:EF:EE:45:4E:E4:FC:5D:38:39:2F
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:01:e5:35:5d:4e:8b:44:da:5f:d4:98:c1:4b:aa:13:a7:
76:0c:25:d0:6c:80:b3:9d:6a:21:8e:9f:15:71:7e:88:d9:92:
e7:0e:ba:af:e6:39:8a:fa:b6:8d:c2:49:94:48:25:f4:8d:04:
2d:f6:7f:8a:33:ce:4f:85:f7:3f:68:be:a2:c8:30:07:36:c4:
5b:60:22:34:5f:65:46:6c:67:5e:17:aa:39:dc:5f:e8:36:d7:
a7:8d:9f:e3:d4:96:74:af:0c:88:2a:cf:83:f4:28:47:13:23:
1c:c3:98:53:05:06:fa:31:0d:4a:c7:5c:03:8b:7c:c4:4e:03:
80:28:c5:4e:34:12:2f:fd:16:73:45:27:54:c9:fa:ed:a3:cc:
a2:5e:a4:cf:a3:c2:0b:22:b5:48:c9:fc:9b:b6:76:89:17:1e:
d7:ad:fb:ee:4a:04:8d:7f:b5:79:79:ff:53:65:5c:91:99:65:
c1:fc:77:ce:b6:a0:8a:4a:cb:60:34:bd:8a:61:5b:2f:84:06:
cf:a3:99:e4:9d:e4:05:c1:d3:c3:9d:93:cc:fc:95:41:33:33:
d8:c8:1b:57:ca:5d:17:22:0e:3a:de:71:72:ca:51:d5:99:43:
34:fb:8d:fe:f0:b3:1a:42:6a:ef:41:c7:01:e1:8f:05:59:7e:
12:6f:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:20 2026 by rpki-client