
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json)
Hash identifier: l3t9f4M/2k/c1NNGUKI6owbPPc/bpfcCRNY7U5tjfDk=
Subject key identifier: C0:E3:83:F0:D1:3F:AE:7F:88:FA:2A:E5:D5:12:19:D3:A8:67:7D:DC
Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8
Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
Manifest number: 08E9
Signing time: Thu 26 Mar 2026 20:14:33 +0000
Manifest this update: Thu 26 Mar 2026 20:14:33 +0000
Manifest next update: Thu 02 Apr 2026 20:14:33 +0000
Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: odhGa6J5WVQo11lTEleHFDZlMZt9qO94I73+uM2pFU0=)
2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LBI8hg+mFJHVQGhzgV+/ZIEdKoubXQfOtyPv3gGNmjo=)
3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: 98ZkktjEG5UcpZ+62L+FMtyVbWw3U+wo66D3y1LVDbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl
rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
Validity
Not Before: Mar 26 20:14:33 2026 GMT
Not After : Apr 2 20:14:33 2026 GMT
Subject: CN=69c593a9-d941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:45:53:6f:39:8f:8d:b9:5f:8c:93:3e:8c:
b5:34:fd:70:de:84:90:52:bc:eb:ab:89:43:81:a5:
1e:ec:42:59:60:5a:45:cf:4a:2f:e2:fd:60:8a:83:
9f:0b:ef:fe:0c:dd:87:d3:c8:b8:95:51:d2:ff:f7:
40:73:b6:ec:fe:17:d2:a5:a2:33:bd:16:3f:2e:02:
91:76:01:d1:5e:0d:c4:c8:3c:16:c6:75:96:6e:ed:
98:13:58:bb:dd:9e:85:3b:f6:ea:a4:4e:73:9b:fe:
ce:bd:1d:2c:68:8d:a8:83:00:1a:38:3c:b9:37:a4:
38:a4:98:2a:81:10:c4:12:d6:31:67:b1:17:26:53:
b0:c0:3a:f0:30:6d:3a:2d:bf:cd:b1:84:a5:87:54:
5a:12:6f:49:43:f3:00:67:c4:84:17:12:50:f3:ab:
3b:4a:fe:e0:bd:72:86:7d:e6:2a:3b:04:12:65:ef:
b5:00:66:2a:fb:60:c6:b4:71:b4:9b:e1:7f:df:77:
a2:b1:94:91:d8:4f:cd:5f:6c:ac:c8:4e:7a:47:aa:
73:36:6f:8b:d3:92:61:c5:61:7a:3a:5a:54:d7:4a:
5e:6e:02:2b:19:e0:3b:66:76:7b:be:ea:f6:ec:8f:
b7:c9:b8:c1:ad:e4:a5:3f:27:b5:ec:89:b1:cf:7e:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:83:F0:D1:3F:AE:7F:88:FA:2A:E5:D5:12:19:D3:A8:67:7D:DC
X509v3 Authority Key Identifier:
keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:85:1d:41:2d:b3:36:c5:ca:ac:81:36:f6:b4:62:a3:cf:f4:
26:84:01:31:47:eb:e0:f8:1c:94:c1:68:24:cb:e0:9e:5d:bb:
be:e7:bf:62:57:8d:f0:e0:d7:d9:75:ae:71:8e:0f:e1:99:76:
cb:d8:0b:a0:5f:28:25:93:7d:48:2a:71:59:13:2a:f9:b4:94:
13:fd:68:d4:fa:0c:87:b3:35:c2:59:e4:27:bd:f0:f3:99:33:
b3:f9:16:3d:a8:9f:43:b1:36:d7:49:1c:42:ff:fe:19:7a:9a:
cf:3f:fe:19:5b:e9:43:6e:49:84:29:e7:be:2c:d8:a7:49:ab:
d6:07:95:ff:ea:2e:90:d5:0f:11:9d:3c:45:ee:2f:8f:06:ea:
f9:05:53:a7:4d:46:43:75:64:08:d0:9f:b3:5d:54:38:1f:82:
d8:9b:34:94:7e:69:b5:6b:00:ac:d5:40:e6:bd:8e:1c:fa:2e:
e3:41:7d:44:c3:20:cf:df:b7:3d:0d:d8:e5:1e:b6:64:bb:81:
32:87:b6:7e:77:55:f9:64:f3:9a:89:aa:f4:e6:4c:8e:4f:57:
f8:4a:54:c3:bc:4f:13:d0:90:16:35:c9:39:68:73:4e:97:ee:
51:b5:3d:e5:c9:c1:16:d0:98:d4:f1:2f:1d:b4:ff:92:32:71:
94:c2:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:36 2026 by rpki-client