
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: iWYmX/qdKl53tpkPVqmqKQYP2vqPyo5m2HHmY5PWzzo=
Subject key identifier: 6F:FE:73:06:BB:61:AA:10:DA:0E:77:CB:1B:2E:78:9C:61:4D:0B:A3
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: 98
Signing time: Wed 25 Mar 2026 06:48:20 +0000
Manifest this update: Wed 25 Mar 2026 06:48:20 +0000
Manifest next update: Wed 01 Apr 2026 06:48:20 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: lCPZkNihgoTXfg/TDqG8bo50SMP48yoMOxlai1zxHRk=)
2: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: V0mFWyb8wDT9djSAbQ4T53u6v/WrYdwA1bskEFmhhp4=)
3: C24679DC741211F0808A8240C4F9AE02.roa (hash: mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=)
4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=)
5: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: M8odrWp11xwPayPr1xVWIoKWwAfvrI8IVkAjTpLwwzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Mar 25 06:48:20 2026 GMT
Not After : Apr 1 06:48:20 2026 GMT
Subject: CN=69c38534-5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:0d:77:ae:bd:b7:6f:44:74:75:f3:86:1e:
2e:12:a3:08:81:e4:5e:f0:bf:a9:9d:5f:e9:80:51:
6c:0b:9e:4b:1a:3d:3f:03:e2:60:68:4f:21:e2:16:
af:7f:43:54:78:e1:c6:cb:cd:1f:b0:28:b6:4c:6c:
ff:55:f4:a5:2d:d7:c0:72:48:df:6c:58:8d:7c:b7:
7f:ac:d5:b7:ce:9d:ce:d4:ed:15:70:9b:a3:75:98:
d0:0b:2b:fd:00:17:02:a7:31:e2:7f:61:26:a7:a4:
3f:6f:62:fc:16:a5:90:2d:c9:10:d7:28:f6:65:ba:
ae:55:ae:4a:56:af:8e:d4:64:74:f3:98:c1:94:63:
fe:34:2e:04:1d:ab:f1:6c:b3:59:82:0d:19:06:97:
1c:ad:25:5d:2e:65:da:77:b5:91:19:e2:d3:12:51:
2f:48:35:c3:95:51:59:0f:8f:8b:02:95:41:95:f4:
7d:e0:67:59:ba:23:6f:c6:34:24:d3:1c:c5:69:b5:
96:ef:33:f8:f3:ce:5a:a3:54:bf:12:26:68:ff:75:
db:14:ec:04:ee:1c:63:17:2e:9e:26:ab:cb:cb:e8:
bb:fd:75:20:a1:77:e2:0d:3e:6d:19:df:3f:94:5e:
a7:83:1f:13:d0:af:d0:bd:7f:92:7e:30:db:29:64:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:73:06:BB:61:AA:10:DA:0E:77:CB:1B:2E:78:9C:61:4D:0B:A3
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:64:f1:58:02:5c:66:f5:7f:41:82:e5:d0:ee:27:34:2b:30:
96:5c:fc:28:af:1c:55:81:2b:de:29:bb:7f:09:15:c9:c7:8b:
87:f6:7d:06:8d:f5:70:60:47:a1:e9:e8:d7:a3:f7:a1:80:d4:
a4:d7:f0:4e:30:09:ca:cc:80:48:74:29:47:79:a7:db:6e:f2:
c5:15:fa:6e:dc:7a:4e:4b:80:5e:58:fc:4a:73:23:bb:22:c7:
d7:10:de:97:b8:6b:2f:2a:39:c7:8c:d2:73:27:b0:a9:4d:bf:
d5:c0:d1:84:a3:5c:af:e8:bd:0a:72:4a:f1:2c:8c:45:1a:d3:
ed:8d:22:cb:06:fc:da:a9:28:e5:99:e2:58:c4:2b:0d:c3:5a:
07:57:4d:6b:8b:15:8f:ca:55:04:f0:94:7f:c3:78:8a:a3:7e:
4c:17:e2:88:50:8d:c8:cd:c2:0a:60:8d:c2:55:6c:78:3e:ab:
8b:09:8e:25:f1:36:58:ba:83:25:08:f3:a3:7d:d9:e5:53:67:
d0:74:04:ff:95:ac:ef:ed:83:98:24:42:a1:81:f7:0a:2d:26:
fe:8b:f7:02:4a:cf:04:7b:2a:b0:8b:d5:47:cf:e2:63:b5:d7:
14:9b:3b:3e:ee:3a:71:20:1d:8d:0c:35:35:e5:c2:a8:a9:95:
f7:70:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:00 2026 by rpki-client