
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: T2eEzuyX4MUIBQgORb2snmoXKt7cBesiPj2pADaovqE=
Subject key identifier: 23:59:78:16:97:AC:A6:49:19:1C:A1:BF:FE:80:24:3B:ED:7A:DF:34
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: B6
Signing time: Mon 11 May 2026 07:27:04 +0000
Manifest this update: Mon 11 May 2026 07:27:04 +0000
Manifest next update: Mon 18 May 2026 07:27:04 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: 8l26jklfb8+SMJfv39E6BYnyq0nSahfg0j4zHb1MoFI=)
2: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=)
3: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: Z9eCvzeYUP+2M8q+AgwovRZwkqLIhLQ9oayd6RO8ids=)
4: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=)
5: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=)
6: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: May 11 07:27:04 2026 GMT
Not After : May 18 07:27:04 2026 GMT
Subject: CN=6a0184c8-2a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:40:93:35:28:a9:54:71:c8:74:19:b3:6c:
ce:6f:35:48:79:e8:53:e2:03:2a:70:42:5f:9f:a6:
b2:47:90:77:e5:1d:b8:ba:e4:11:18:bf:e6:5c:0d:
e3:39:b6:49:aa:11:24:47:05:24:34:81:7f:fb:c4:
69:36:e0:e7:67:26:be:e3:d6:71:63:95:e8:6a:08:
97:e8:5d:5a:e4:48:8d:f9:40:3d:41:7a:e3:79:e4:
73:ac:7d:88:bc:dd:5f:71:52:4c:6b:b0:33:e7:ee:
01:79:0c:df:d5:a0:65:74:23:94:05:02:b9:16:26:
c4:39:eb:d1:ec:fd:67:6c:e6:57:1c:d7:0a:f6:c3:
f3:83:3a:a8:4d:2d:17:b3:52:09:4c:9d:ce:9f:45:
28:56:0a:7e:ca:66:46:ce:42:8e:ec:a0:6f:ed:54:
c7:13:1e:bf:99:3b:ba:a8:54:6b:fc:f8:07:ba:00:
77:b7:99:f7:c4:58:65:c2:e7:87:d8:81:84:e5:95:
4a:f3:cb:87:8a:26:85:be:7a:3a:60:64:87:d9:d1:
49:69:36:08:48:5e:c1:0f:fb:9d:74:0f:ab:b5:72:
bd:af:39:8e:51:f7:09:3b:f5:2e:40:72:88:95:9c:
d0:c9:1e:6c:44:8f:59:64:86:22:2c:a7:f1:ed:be:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:78:16:97:AC:A6:49:19:1C:A1:BF:FE:80:24:3B:ED:7A:DF:34
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:d1:de:5c:13:cc:e8:f4:30:07:fb:bd:3f:09:ef:f1:36:
e7:e0:fe:ca:27:c2:4e:e4:09:f4:08:7c:f5:d9:74:30:2a:0c:
b5:15:35:7b:32:09:b1:0e:38:e6:7a:a1:fc:08:d6:ca:45:73:
12:ad:6b:2e:63:26:86:88:78:c4:7b:9b:6a:16:90:11:43:a2:
ce:9a:07:21:dd:60:6a:7e:a3:eb:83:c7:1c:25:76:dc:9c:e0:
09:64:db:dd:f9:23:02:14:05:d6:c4:e9:1a:cc:a6:6f:2f:fe:
47:4e:31:aa:ae:0c:9d:f5:0b:0b:94:a9:73:34:45:eb:67:88:
66:7c:b3:e3:47:bd:94:d9:0d:c9:41:1c:09:ae:d5:05:6f:b3:
e3:42:66:d5:6c:26:ff:21:3f:d2:cf:99:59:16:80:79:74:37:
79:07:24:32:8e:90:86:e2:9b:7c:6d:ba:b4:c9:ce:7e:aa:fa:
86:cf:29:5c:2c:6d:58:0b:b7:d9:c3:a7:e7:19:64:e0:12:33:
61:bc:58:45:5c:21:d8:b9:b5:e3:86:9c:00:f2:72:d8:93:6c:
c8:81:95:ec:eb:0c:5a:37:20:67:ca:3a:5c:3b:7c:9f:7c:31:
56:bc:8c:cc:c2:6f:b5:e5:6d:5c:e5:d9:5b:84:da:0f:5f:fc:
04:ed:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:23 2026 by rpki-client