
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
File: OwpEPFCYZClPtL5HkFNmGAPxr-E.mft (raw, json)
Hash identifier: X18mmnPDoCIIhKxOSv6ri3E650rBu5bsMl3LW4m/shw=
Subject key identifier: AA:A6:FA:95:FA:1C:8B:9B:0B:08:89:EF:EC:A6:98:0D:54:79:DF:59
Authority key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Certificate issuer: /CN=A91AEEAA/serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
Manifest number: 37
Signing time: Thu 23 Jul 2026 10:36:23 +0000
Manifest this update: Thu 23 Jul 2026 10:36:23 +0000
Manifest next update: Thu 30 Jul 2026 10:36:23 +0000
Files and hashes: 1: OwpEPFCYZClPtL5HkFNmGAPxr-E.crl (hash: 3xlnVY44fArIf3/uEO/JwWU4hV3IaA/X3XLwly35RY8=)
2: 19AEF54C325311F1B8BE6AD8B5833773.roa (hash: lCkPkFA3UUCrYfR4r1c6dZNvdAQ4vk4LL6fKr16h7jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Validity
Not Before: Jul 23 10:36:23 2026 GMT
Not After : Jul 30 10:36:23 2026 GMT
Subject: CN=6a61eea7-ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:98:bb:5f:59:4f:ae:3d:73:b5:1a:b5:0f:
c8:20:17:38:86:dd:af:6f:db:41:9b:dd:13:84:c2:
3d:d0:f3:d4:fb:4f:da:49:91:10:17:90:9b:b1:3b:
23:76:25:11:e8:1f:1a:f5:0f:43:49:cb:da:c5:43:
eb:d8:94:4c:eb:6f:7b:6f:c5:c3:a8:14:dd:8b:bf:
49:cf:95:2d:4b:2d:71:5b:71:35:18:58:b2:88:2d:
86:fd:b9:6b:8f:ac:17:8f:e5:84:52:3d:4a:15:3f:
66:f5:f5:da:53:af:4c:e2:43:17:8a:bb:4c:75:a5:
bd:19:ff:f3:fc:2a:95:cd:fb:93:2c:ff:50:b7:35:
34:6b:46:4d:63:c5:b2:57:ec:a5:78:73:02:58:b8:
cc:3e:33:24:5f:5a:3a:ba:04:75:6e:31:64:8c:8c:
18:71:88:de:6e:d5:b4:40:37:58:64:62:de:76:66:
ad:8b:0c:82:d8:72:43:22:5f:8d:e0:31:c2:0d:11:
fa:1f:06:a2:6a:3f:d7:7b:15:5f:b1:b9:9b:f3:38:
c7:68:52:a0:44:d7:ae:95:c2:2c:92:75:c4:eb:ad:
a9:c8:f7:a6:7b:6c:49:33:2c:de:74:89:f6:ee:d3:
9f:00:9d:28:e7:de:82:b4:ba:f9:b5:37:4f:20:f2:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:FA:95:FA:1C:8B:9B:0B:08:89:EF:EC:A6:98:0D:54:79:DF:59
X509v3 Authority Key Identifier:
keyid:3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:16:f7:b2:4a:ce:30:89:ec:82:3b:5e:04:41:30:a8:88:
cf:db:61:0c:3c:4b:2b:5b:1a:53:35:e1:ec:8f:b0:3a:d7:9e:
a9:d0:19:1a:0f:0f:2f:c2:93:b8:68:4b:d4:47:21:d7:1b:ab:
89:dc:90:ce:fc:e3:2a:f1:c9:af:8e:3c:61:ed:03:e5:92:ed:
5d:0a:12:4e:5d:ed:66:3d:61:1e:d1:a9:28:62:e2:3e:de:fb:
32:43:2a:d2:7d:be:62:43:c7:06:33:0f:a4:54:6f:71:8e:6e:
f3:20:06:a0:ca:a9:e1:e8:ba:7c:c6:fc:ec:4b:2b:5c:17:2b:
7d:6c:40:6c:e8:fa:5b:91:0a:e3:57:a9:9e:4e:9c:d6:58:3a:
27:fa:0f:bf:d7:50:03:1f:5e:fc:4c:62:ad:96:60:02:64:63:
2a:dc:75:e4:d0:f2:92:2b:58:d9:13:dc:81:59:62:d7:db:5a:
84:04:7f:99:fa:93:39:f4:45:28:da:6d:4c:cb:8b:e8:12:5a:
53:d5:14:71:17:a7:48:74:ef:28:68:bc:27:54:4d:df:28:dc:
1c:c1:ff:db:9f:0b:49:39:45:95:9a:ba:a7:e1:1c:50:c7:41:
ca:bc:79:63:dc:62:67:18:d1:fb:42:0d:00:2a:0b:b0:3e:74:
81:cc:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:36 2026 by rpki-client