
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json)
Hash identifier: bF5kJvqBnT8yvZ7r1bF5kLQq9M58PxrWYuyR7DIwMOk=
Subject key identifier: 7F:F4:E2:E7:AF:2B:72:AC:81:E8:74:8D:31:24:7F:48:14:7A:A0:74
Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
Manifest number: BB
Signing time: Mon 11 May 2026 07:05:43 +0000
Manifest this update: Mon 11 May 2026 07:05:42 +0000
Manifest next update: Mon 18 May 2026 07:05:42 +0000
Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: q4YTa+U3j9CYGOrKSzb3+0u8IRkDkW6dD+1sWK7WmeM=)
2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: VGC3s72kCEqeNjrQgkhJsVpMANzKAnqf/Eot+fUvV1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Validity
Not Before: May 11 07:05:42 2026 GMT
Not After : May 18 07:05:42 2026 GMT
Subject: CN=6a017fc7-5fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:4e:34:ea:3f:b9:85:0d:37:16:04:08:22:
6a:c5:ee:2c:83:15:5d:d6:e9:c4:f5:ce:7a:c8:96:
a6:92:e2:35:c6:98:1f:6b:59:68:f4:cf:60:48:6a:
dd:7f:6f:27:6a:a2:7a:9c:2b:42:c7:4e:09:ca:14:
cc:79:0b:9b:b7:ba:f9:9e:da:57:88:02:07:c1:6f:
aa:99:00:d7:70:6c:33:70:c2:9c:0c:33:0d:bb:30:
94:94:16:eb:4b:34:e5:57:43:d7:38:13:fa:88:fd:
96:a2:05:c3:7e:c1:95:1d:00:a9:48:81:98:80:5c:
f8:f9:4d:8d:4d:c9:d6:66:65:5c:d4:61:c2:32:60:
14:a9:e1:14:d7:ef:d5:b4:9f:ef:6a:f4:54:a9:03:
b6:ab:37:ef:18:65:80:5b:76:1a:af:ea:94:10:65:
35:24:de:89:4f:54:08:bb:aa:1b:0d:1d:01:bb:13:
6f:7d:af:f3:e9:8b:24:1d:0b:8b:bd:8b:1f:3c:2e:
7c:d0:dc:dc:f6:66:4c:3b:9f:5d:8e:40:58:17:60:
53:3c:3c:38:bb:84:1e:22:a1:01:06:b7:b5:5e:1a:
22:b3:11:f7:96:ce:f7:d5:2b:90:d0:1f:29:87:56:
b5:13:47:94:66:e4:a8:20:70:b7:a5:53:e7:ce:3e:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:E2:E7:AF:2B:72:AC:81:E8:74:8D:31:24:7F:48:14:7A:A0:74
X509v3 Authority Key Identifier:
keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:e5:16:f4:94:e9:5a:58:13:1d:01:44:e3:09:b5:ba:d1:
de:44:aa:32:e5:c3:6b:62:43:c2:45:46:0c:94:4b:27:80:23:
c8:9e:20:df:fc:eb:ac:47:d9:60:82:20:4b:43:1a:9f:3c:5d:
77:c9:89:1b:96:b2:2f:97:da:f9:56:c4:cc:9a:b8:0e:78:59:
d0:37:3e:30:47:8a:cd:20:60:0c:27:01:bf:64:88:09:e6:4a:
a7:78:55:cb:d5:b4:92:4f:9b:05:9a:08:80:e0:5e:aa:82:7d:
0d:9a:6f:75:0a:03:4a:ac:26:8a:96:c5:e2:4f:8c:65:c8:3a:
7c:e3:6c:67:03:25:00:c4:cb:02:8d:4f:03:31:cc:8c:c3:87:
d0:78:61:e7:aa:d5:ad:3b:de:ab:87:34:ab:f5:d8:40:91:e2:
7d:f3:41:dc:10:d1:61:f8:25:b1:75:9c:58:cf:a9:52:3b:bc:
9f:0e:24:00:9f:c6:47:7a:95:7f:2a:36:f4:1b:64:91:48:46:
7e:a5:cf:61:13:17:ce:59:46:c4:c9:ac:ab:55:1e:8e:de:3c:
49:36:66:f3:a3:40:aa:d5:ba:3a:5b:8c:e7:97:f5:2a:7b:42:
cb:03:fd:d5:62:f6:e8:bf:48:8a:6d:b3:12:17:1d:2e:ed:0f:
03:ff:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:11 2026 by rpki-client