
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier: v35W/aV9kuQpidXDGVDdH/cDoTLq7P4BX6ZGoA4HaY0=
Subject key identifier: FE:63:82:ED:C2:97:E1:58:4D:0C:32:A5:9C:96:0A:0C:BE:F3:F6:5C
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial: 0711
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number: 0702
Signing time: Thu 24 Sep 2026 22:01:56 +0000
Manifest this update: Thu 24 Sep 2026 22:01:55 +0000
Manifest next update: Thu 01 Oct 2026 22:01:55 +0000
Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: +/JMgEgquOD8obFGgx7tKRWNx7HbNTXIIOUQj53100I=)
2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: XhJX3NfcbvmnSUAkmSliLE4bj9pTRieX/8IuPGpMoeg=)
3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: VCL+P+tlT04cGlwm1f1o27ry1Et64gaCgM2IBSbvp04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Validity
Not Before: Sep 24 22:01:55 2026 GMT
Not After : Oct 1 22:01:55 2026 GMT
Subject: CN=6ab59dd4-5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:9c:92:a0:ab:2d:f3:96:ab:7c:ed:e5:0a:
04:af:f5:ad:f5:3f:3f:d1:0f:21:08:01:c7:55:26:
c7:6d:82:52:d7:71:9e:51:8f:7e:3f:a0:66:6c:d7:
19:06:ef:5c:6b:f6:81:43:10:ae:ce:79:af:8f:69:
66:b1:09:00:7c:89:e2:b1:9f:06:08:c1:97:48:be:
2a:df:fb:90:25:bb:ec:c3:7d:fe:83:60:1b:d4:eb:
c1:c8:4e:61:0a:46:a9:89:8c:36:53:69:d1:14:6e:
cd:f2:db:54:49:57:2f:16:e2:f6:69:6d:e9:77:a0:
cd:99:40:8f:c4:d9:28:27:2f:39:e8:fa:1b:86:2e:
55:91:bb:a0:64:b5:9e:99:b2:52:60:c1:d1:13:0c:
85:4d:7a:ae:74:0b:ec:8e:3c:6a:3b:72:2d:d6:a2:
6d:a0:d0:c6:d3:be:1c:35:e1:12:3d:b4:9a:df:f4:
5d:0e:f8:05:7c:40:b7:ae:cb:69:45:11:e0:a8:8f:
34:95:43:a9:6c:b7:31:5e:46:3c:8a:a1:e6:78:f6:
df:ac:cd:4c:d6:5d:5f:3b:3c:d4:9f:28:ee:02:44:
c6:87:32:51:00:c7:ae:ea:c1:80:89:ea:02:9e:ae:
6d:47:68:ba:19:54:cb:2b:a5:8b:b5:21:d9:d0:96:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:82:ED:C2:97:E1:58:4D:0C:32:A5:9C:96:0A:0C:BE:F3:F6:5C
X509v3 Authority Key Identifier:
keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:57:5d:d5:38:7e:04:99:12:d1:64:11:84:dd:22:9f:9b:b4:
24:1a:4a:38:bc:7c:21:25:8a:a4:84:b3:2c:67:42:e4:de:b3:
8b:12:e7:e7:c9:de:b4:e6:0d:c4:93:44:56:e7:95:54:a5:a2:
e1:66:d5:07:22:22:2f:93:8f:77:6b:12:41:49:cc:d0:11:33:
82:29:18:c7:c4:51:7b:0f:e9:e3:8a:54:fb:0e:c3:3b:3a:f7:
7e:bd:1d:ef:82:9b:97:0c:90:c4:5d:c5:bf:18:c5:0d:e8:77:
c1:c4:72:4e:e4:75:65:30:f0:3e:ff:2b:d6:4e:5c:71:7d:74:
99:49:6f:97:1c:30:17:c0:6a:76:87:b3:3d:6c:c6:94:a2:2f:
5a:98:06:5b:34:84:4b:4b:36:ce:a0:b3:fe:45:eb:b6:33:d4:
16:6f:8d:7b:8b:f0:a8:59:fb:84:91:19:50:76:df:2e:57:b3:
f3:51:6f:e2:ac:2f:de:43:a2:b5:7a:9d:59:31:46:ae:e3:b0:
f6:ef:a2:45:95:c2:27:fa:5c:8d:16:05:da:2a:ca:84:b6:98:
8a:d3:ac:ff:c2:ae:f9:66:c1:e4:83:98:70:ab:b2:14:0b:20:
5f:2d:81:cd:e2:4e:ed:b8:55:bc:e8:a8:ba:9f:d0:31:88:40:
b6:83:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:31:28 2026 by rpki-client