
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json)
Hash identifier: sh0NXSOjwyk8bYIPYXpbSNrk6ic0UVMLTaw/c+74yz0=
Subject key identifier: 93:3E:A9:03:38:2C:59:26:7B:7C:7C:CC:BA:43:C6:6C:BB:6B:AB:D6
Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Certificate serial: 08AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
Manifest number: 08A3
Signing time: Tue 24 Mar 2026 20:14:20 +0000
Manifest this update: Tue 24 Mar 2026 20:14:19 +0000
Manifest next update: Tue 31 Mar 2026 20:14:19 +0000
Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: StS5kHMajsIUg9bVIZdWZNhMFmFzqZYg/z0It/RKjjo=)
2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: VKLSV9fn0AYGuNs5W6g646lEixU0mZbJvam1SUJ+8wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Validity
Not Before: Mar 24 20:14:19 2026 GMT
Not After : Mar 31 20:14:19 2026 GMT
Subject: CN=69c2f09c-ba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:e1:e6:0d:57:f0:de:10:c4:49:c2:c9:07:
1d:22:4e:7f:7b:5d:a5:ef:d2:3f:f3:aa:03:1e:f3:
a3:08:6b:bd:93:83:44:78:76:d8:b0:9d:d1:1d:f0:
71:2a:56:f1:7c:44:14:52:72:e8:a3:1c:be:66:8b:
b3:31:78:ed:31:5b:5a:27:05:e5:8e:32:fa:65:8f:
5c:99:7b:50:7f:82:fa:d9:1a:51:b4:6c:7c:dd:7c:
82:d4:fc:20:c3:35:0e:8b:5b:02:3d:d8:48:24:73:
26:c9:42:38:89:6f:ee:94:c2:aa:64:3e:dc:29:a0:
da:a8:10:95:d9:99:ee:36:b2:26:e1:ec:b2:50:54:
4d:79:87:8c:c5:b4:41:08:ad:3b:73:28:2a:79:a8:
a2:60:16:ac:a3:6e:c1:f2:07:d2:32:c1:29:97:2f:
c6:da:c2:46:ef:a8:a2:38:ff:0f:dc:58:10:86:7a:
3c:e6:4c:25:46:c1:10:ac:71:7a:60:52:23:95:3f:
fa:8a:20:84:9e:5e:f0:01:38:c2:38:75:90:07:8f:
a8:65:a8:36:71:85:0d:a5:d5:19:82:da:26:2e:a6:
11:03:ac:81:9e:bf:c7:a3:88:96:98:51:41:68:c7:
75:51:e6:58:67:cb:5e:00:94:0f:d0:db:29:de:8b:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:A9:03:38:2C:59:26:7B:7C:7C:CC:BA:43:C6:6C:BB:6B:AB:D6
X509v3 Authority Key Identifier:
keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:07:15:85:7c:fc:a3:8c:c5:47:d0:58:04:b7:25:9f:f2:e7:
96:a8:c4:77:54:6b:b6:7b:8f:53:f9:ae:19:cf:13:17:41:10:
14:76:92:f5:fb:34:a4:67:41:d8:8d:d5:33:90:a7:fd:33:f2:
11:63:78:6f:b1:a9:b5:da:38:69:ab:ce:16:21:e1:dc:8e:ba:
7e:33:17:7b:be:ae:8d:88:18:85:9c:76:ff:ca:10:a2:61:da:
63:91:ee:4d:bb:72:1f:31:f7:20:c6:b6:98:a3:5f:9e:fb:10:
7f:70:ee:e8:23:2a:d3:40:0b:ee:f1:9b:ea:0a:cf:c9:33:15:
b2:cf:8e:31:20:c1:23:26:46:00:c8:7f:6f:9d:84:2e:48:70:
32:73:ad:8c:30:d5:b0:ec:37:1d:53:dc:55:41:80:c3:b7:55:
46:fc:4b:6a:be:50:85:ee:22:b6:44:66:36:d1:5a:ae:38:ae:
9c:d5:f6:9a:a7:d5:2c:93:03:3c:87:2a:b0:b2:6d:95:51:36:
e4:74:84:a4:5c:97:6e:48:cd:f1:48:cd:9c:b7:c3:a0:8a:44:
84:bb:04:57:a9:fe:31:fe:08:bb:8a:32:ac:ed:ba:53:11:e3:
4c:64:b4:a2:bc:0d:97:23:99:07:f5:c5:91:69:79:4c:50:cb:
c4:6a:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:10 2026 by rpki-client