
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json)
Hash identifier: LHNHmGztF2Ta2M3trn6zM71elp23fL08O1y7uFouGrY=
Subject key identifier: 6B:E7:80:E4:B0:B1:52:4C:8E:B4:B4:71:95:32:73:6B:FC:19:1D:3D
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
Manifest number: 077F
Signing time: Tue 12 May 2026 21:40:47 +0000
Manifest this update: Tue 12 May 2026 21:40:47 +0000
Manifest next update: Tue 19 May 2026 21:40:47 +0000
Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: nWRCiJ9tDybCsZ7nX+MGt/wGhQHn+BczOe2sclDqBkw=)
2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=)
3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Validity
Not Before: May 12 21:40:47 2026 GMT
Not After : May 19 21:40:47 2026 GMT
Subject: CN=6a039e5f-2e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:0c:f4:03:a2:1b:cd:57:5f:9e:ca:55:c4:
87:fb:28:fb:5b:9a:f6:7e:9b:6a:22:29:a3:6f:3f:
33:b9:53:15:88:bf:5f:99:22:04:18:10:92:f5:dc:
ff:1d:72:3d:80:ab:1e:0c:a1:3c:fc:eb:c0:3b:0d:
be:d0:e6:96:c3:69:af:39:e3:1a:a5:4e:7f:6e:fa:
4e:fb:e0:bd:cd:c7:24:bb:1a:d6:a6:f1:f5:63:7a:
42:1f:b4:07:66:94:d2:a9:c9:99:e4:95:a9:55:95:
30:d5:d9:70:2f:85:33:f1:53:b0:d7:ac:66:c0:97:
57:b2:13:8c:8f:d5:17:86:29:5c:28:5d:ed:c4:32:
63:dc:52:a9:3a:9d:ef:9a:64:1a:b7:19:be:cf:4a:
e7:c3:22:6a:27:5f:93:d2:62:20:ab:84:98:4a:29:
8f:f6:d2:01:59:e0:32:47:67:0b:46:5e:d5:1f:83:
18:38:d4:a1:d9:54:53:df:ba:71:81:59:ee:21:32:
15:08:8e:0a:70:86:d7:ae:85:a5:8e:d0:51:b5:23:
05:6b:a3:18:da:da:f9:67:73:b8:ae:a2:0c:a8:b9:
7c:ed:70:53:b6:13:bd:34:c0:e1:3a:56:f8:36:f7:
b4:99:da:a8:87:83:c6:d9:f5:5c:16:70:a9:9a:72:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:80:E4:B0:B1:52:4C:8E:B4:B4:71:95:32:73:6B:FC:19:1D:3D
X509v3 Authority Key Identifier:
keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:66:65:5c:e8:e7:3e:ef:7b:98:99:be:33:e4:6f:b8:7c:56:
c1:0a:fa:82:c3:ae:27:72:6d:df:32:29:44:43:5a:4c:3c:d9:
77:d5:d6:91:e6:29:7a:73:8d:e8:89:e2:20:79:9b:57:86:8d:
0f:6f:16:13:e2:09:9f:a4:1f:7c:e2:17:13:18:16:45:84:f4:
59:f0:fb:2e:5a:6f:19:08:ae:ec:61:8f:8d:84:91:bd:a3:01:
55:b1:85:3a:02:78:57:6e:f8:44:b8:c7:b1:0e:2a:46:9a:e7:
1d:dd:88:41:17:0f:37:6a:6b:70:9d:51:20:15:a4:3f:e8:a6:
82:ec:b0:4c:b7:9c:25:36:59:58:86:de:fe:99:b6:f8:99:ad:
3c:85:af:a8:01:10:50:d1:68:89:d1:80:13:ee:91:9a:8f:45:
a7:c0:ba:27:f3:fe:a8:fe:b8:10:8f:fd:a1:1e:bc:14:dc:d4:
8d:83:67:97:d4:48:a3:20:e2:e8:06:c2:8c:a7:62:b1:41:79:
d9:28:9b:9e:5b:f5:e7:ad:48:2e:72:82:7b:f1:5b:c2:5e:31:
9b:33:28:f2:c3:b4:cc:25:20:a3:47:68:61:2e:be:3d:2f:e1:
07:a9:de:b1:16:ef:72:6a:f0:9a:74:c1:97:d9:07:97:51:dd:
7a:e9:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:24 2026 by rpki-client