
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: k1UfBQhE2ZhY0r3nf1Z9ZIS/oewFnhMoSOk/Mfr3LjY=
Subject key identifier: AF:2F:99:17:9F:E6:01:09:87:2C:36:E5:84:C6:C2:8E:BD:90:34:6A
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 02F4
Signing time: Sun 15 Nov 2026 01:07:20 +0000
Manifest this update: Sun 15 Nov 2026 01:07:20 +0000
Manifest next update: Sun 22 Nov 2026 01:07:20 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: mEhk1O3ylXcFiPZCZ5cU4TGtBphivhn8VaH6XnJ4zXc=)
2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Nov 15 01:07:20 2026 GMT
Not After : Nov 22 01:07:20 2026 GMT
Subject: CN=6af905c8-f01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:d5:44:0d:3e:95:29:d8:a2:3f:fc:2c:06:
fe:85:b8:cf:d0:d2:fb:9f:d3:51:0d:a6:e3:59:2b:
e4:14:be:93:3a:8f:0e:1f:4c:58:c5:b9:de:c7:1f:
38:8e:58:7e:39:0c:cf:f2:64:b4:8b:af:b3:56:70:
dc:df:17:6a:73:9b:f7:e7:7d:53:3f:3a:02:f0:d4:
60:7d:73:d5:d0:d8:d7:77:c3:46:43:14:d7:3f:94:
88:c5:fa:d5:f3:13:29:6d:99:10:30:ff:c7:ad:f3:
81:a6:58:d5:4c:95:de:d1:40:f3:19:aa:d1:6d:56:
0e:22:68:5c:3f:a7:f7:2c:d1:49:ae:09:34:4e:78:
9b:c3:43:c7:b4:a7:60:d4:12:d5:fe:aa:c6:69:7d:
ac:84:64:95:ef:e7:63:87:e1:55:cc:91:45:30:bf:
46:60:f1:ea:39:da:12:91:07:f9:5c:26:55:33:a0:
ac:20:19:50:c5:35:95:83:69:88:fc:d2:89:78:97:
37:c8:3a:c1:fb:97:d9:39:87:a7:4f:33:2e:e7:26:
59:33:d7:8c:df:0a:c3:59:db:8b:d5:d4:9b:61:57:
eb:51:d0:b3:88:22:7d:e1:a0:ea:68:d4:94:66:57:
46:80:05:d7:b9:5c:96:81:d3:93:a0:31:28:87:e4:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:99:17:9F:E6:01:09:87:2C:36:E5:84:C6:C2:8E:BD:90:34:6A
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ea:a7:11:a1:59:7d:c8:4c:f9:8a:0b:80:e3:6d:89:22:7a:
d6:ca:43:5e:59:48:d4:44:30:90:ec:9e:ce:c3:ba:77:ed:f7:
a6:27:1c:02:eb:ef:58:36:a6:d5:12:08:c3:8d:c6:d4:b2:d1:
04:26:6a:f6:e6:a0:40:ce:2d:18:77:dd:d6:af:0b:ca:7d:87:
df:3a:2d:10:d4:06:b2:3a:45:36:3b:75:ea:44:d4:6b:3d:67:
66:f4:ab:97:6c:ee:f6:41:50:e2:d6:f2:97:9b:83:7a:5e:6e:
48:63:cb:14:fc:60:10:45:e5:c8:bb:ad:40:72:fe:e7:53:62:
6d:3d:4a:66:da:d2:98:d5:92:8f:da:c1:48:2c:1b:fd:80:ce:
19:66:0a:96:c6:40:05:37:eb:e6:8e:61:7d:71:5a:37:b1:21:
00:e8:b5:60:39:29:cb:5e:46:46:78:4a:a7:71:e8:94:be:19:
b9:fb:53:57:d4:4f:ec:57:8a:97:05:0d:8b:b8:d0:9b:55:9e:
5d:53:69:76:e9:1a:59:94:4d:96:7a:ed:4d:2d:d3:f0:cd:8f:
d4:2d:05:e2:31:e7:b9:e0:f9:96:ee:88:7f:4e:72:4d:27:4f:
b5:af:7a:36:65:f2:af:47:0d:87:01:b4:a0:21:e7:f1:ed:c1:
f0:28:ce:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:28 2026 by rpki-client