
$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json)
Hash identifier: XP+syaNbUumF0UpCJEENxEnPaiFIHQdfdzChME79xkU=
Subject key identifier: F0:54:66:32:76:6C:B2:EC:AF:81:46:E5:87:2F:37:37:63:6F:6D:DA
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
Manifest number: 0217
Signing time: Wed 25 Mar 2026 02:12:33 +0000
Manifest this update: Wed 25 Mar 2026 02:12:33 +0000
Manifest next update: Wed 01 Apr 2026 02:12:33 +0000
Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: DUf93qvXhh3BLjU1C9c2ZdxV+7CEyaj03DFsh4bbp6w=)
2: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: 19Rc441u91Y2HL2+FlU8nzr70BJos1ukfHPyv3DBp5k=)
3: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: v4Qu7n+fWBWXJKInz5nkseGm1QdnUq7lHUeNDDgFhss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Validity
Not Before: Mar 25 02:12:33 2026 GMT
Not After : Apr 1 02:12:33 2026 GMT
Subject: CN=69c34491-1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:a5:a9:f0:30:45:76:ee:c1:d8:14:a0:bc:
16:a9:b8:9e:f3:cf:b7:cd:d5:bd:dd:07:07:10:17:
52:d1:1c:49:1f:29:53:86:f5:bf:09:cf:a7:45:a6:
34:7c:9b:5d:18:f4:5c:5a:10:83:76:62:05:18:4d:
4b:7b:db:70:c5:a9:b8:e9:3f:ac:07:1b:5d:ed:6f:
f3:e9:49:56:84:57:de:bb:38:d8:55:d4:78:46:c5:
d7:65:dc:6b:95:c9:f9:bf:34:7a:f0:6f:f8:b6:8c:
3b:f5:d4:25:ed:71:2d:94:72:09:59:a1:f1:4e:c3:
06:6e:24:75:8f:e8:05:d4:ea:68:bb:d3:84:ab:21:
32:c2:46:6f:8c:75:c0:86:23:b7:8c:f4:ba:f2:cb:
63:b2:e4:8d:92:57:a9:eb:01:db:02:90:e5:41:38:
13:66:e5:cd:17:ba:d4:99:47:9e:e4:a1:42:a8:ec:
5d:d6:ac:cf:af:0d:9d:9e:0e:42:20:b2:4d:79:e0:
79:f9:43:5e:28:56:b2:c8:09:10:d1:b5:02:93:31:
41:a6:9a:65:bc:98:56:c4:d2:05:bd:4f:15:bc:d2:
4f:7a:96:c6:4c:66:56:98:23:ff:37:1b:92:ce:fc:
4a:c1:2f:b1:9c:3b:f5:e5:93:70:7d:39:52:ed:ef:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:66:32:76:6C:B2:EC:AF:81:46:E5:87:2F:37:37:63:6F:6D:DA
X509v3 Authority Key Identifier:
keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:ac:15:f9:bf:90:92:47:44:77:8e:df:26:7b:d6:6a:41:
10:b9:4b:23:4a:db:f2:5d:e9:37:1e:9f:4e:08:83:12:71:45:
c6:83:25:b8:b1:fb:46:c4:d6:61:05:ce:b3:2a:d2:c1:88:16:
8b:3f:62:ec:b8:1a:b8:ff:be:54:ee:4f:7e:3d:7e:11:fd:d8:
83:ba:57:42:10:19:68:cb:b1:50:4f:d0:0e:0f:71:ae:61:fd:
8b:d2:30:ad:38:66:d9:56:ac:a2:46:cd:95:a9:2b:a2:2f:1f:
79:1b:92:7c:35:ee:b1:79:df:a7:44:73:9a:28:8d:1e:65:73:
2e:d9:1c:5e:f5:e8:72:7c:20:c6:5b:78:dd:6a:a5:74:2f:8e:
f5:9e:08:de:03:92:6f:73:cd:ca:6d:99:c0:87:b7:26:c5:ca:
2e:1f:54:68:ba:72:74:80:9c:bc:2a:99:64:5b:d2:a9:37:3e:
f5:fb:1e:e4:73:43:7b:89:3a:5d:aa:82:b1:2d:c7:e8:5e:f7:
49:ff:69:df:7d:86:4f:4b:62:c5:55:58:cf:54:be:90:46:50:
ad:a3:f7:19:be:5e:25:27:ea:33:b7:f8:3a:6f:50:ed:64:a1:
3b:88:bb:1e:c2:37:0a:6f:9e:81:d8:3f:b1:81:33:ec:3b:38:
49:99:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:31:54 2026 by rpki-client