
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: xZv25QI4dQe/5lJW5ItopCyC/VlK5aBZLF4c28SA+yg=
Subject key identifier: C2:AD:51:B5:FC:F8:6E:18:D6:C5:4A:4A:D3:E5:1A:8B:DB:47:F7:02
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 024D
Signing time: Wed 25 Mar 2026 01:47:36 +0000
Manifest this update: Wed 25 Mar 2026 01:47:35 +0000
Manifest next update: Wed 01 Apr 2026 01:47:35 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: lejACb79koOdmpdDGyxC7T7Z6FDNNeF+FE5Gyuh524o=)
2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Mar 25 01:47:35 2026 GMT
Not After : Apr 1 01:47:35 2026 GMT
Subject: CN=69c33eb8-2a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:87:66:47:b3:53:81:c3:e1:81:d8:ea:f5:
eb:d3:ff:ea:48:1a:d3:dd:ea:22:42:22:c8:f9:8a:
60:78:50:65:24:4b:9a:04:0f:e3:13:4b:c1:11:ce:
f1:97:71:46:42:99:3a:1f:a8:7a:53:ec:9e:78:7b:
b5:cc:85:b6:d1:bd:fb:fb:f7:5a:10:a3:fc:b2:7d:
47:1e:ab:37:68:2d:74:d8:b9:c1:94:46:0a:4c:15:
47:8e:ac:1e:75:b3:c8:29:d4:99:28:95:49:7d:2d:
13:57:63:6f:54:b2:42:08:58:49:73:02:5c:92:16:
93:0c:2b:13:73:ed:92:96:2d:5f:44:6e:7f:18:8a:
2d:92:58:a3:62:d5:eb:f9:ea:b3:19:d3:91:00:bf:
49:b9:5d:f4:ab:68:13:7e:be:e8:f4:4f:d4:54:19:
4a:f1:67:7c:86:ca:6d:ba:b8:d4:82:72:97:be:6c:
48:2f:42:d6:3e:42:31:53:6e:6f:ea:22:41:bc:6e:
db:0c:69:00:8e:60:73:4f:c8:b2:f3:47:8d:66:f5:
09:53:9a:70:77:8a:ca:ba:dc:85:cb:3c:ec:10:92:
22:f7:b9:c9:93:f3:ae:43:fd:e7:ed:a6:4f:30:20:
03:f1:73:44:82:71:ea:f7:00:82:77:ad:ac:c2:fd:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:51:B5:FC:F8:6E:18:D6:C5:4A:4A:D3:E5:1A:8B:DB:47:F7:02
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:cf:13:6e:d9:1d:a2:36:b1:c4:21:f0:df:05:8f:1b:6d:66:
b0:94:11:50:25:e4:16:48:d5:11:bb:60:4e:3b:fb:8d:71:bb:
5c:ac:96:d5:80:03:a5:96:6c:b1:52:8a:e6:b7:f2:54:f1:82:
a8:c4:5a:8f:81:ba:9b:d5:9d:b0:5c:42:1b:55:d7:f9:ae:15:
80:30:7c:9b:06:89:43:9b:4a:cd:e3:e8:c4:7d:b1:87:b9:fc:
35:f7:f0:79:09:c9:35:9e:a5:72:43:e8:33:90:ef:8b:0e:0d:
c3:44:6b:39:41:15:83:dc:a6:d7:e2:12:b7:8f:67:de:c7:71:
8e:10:e0:b2:fc:f7:53:d5:ae:58:25:36:af:e5:e3:84:a6:67:
95:4b:40:7c:2c:e2:17:0b:d4:f3:69:d3:c2:a7:c0:a8:97:38:
17:6f:3f:d3:78:d1:04:cd:79:0f:e2:8c:e5:e8:1a:ce:95:dc:
ce:b5:08:2a:91:a9:29:83:31:4c:d9:6f:3f:b6:b7:e9:cd:12:
b4:fa:39:d6:08:41:85:51:a8:d4:1c:79:62:ec:7b:47:b5:1f:
3e:8d:ea:e0:57:26:7b:53:0a:95:7d:cd:ca:af:5a:e4:99:3d:
2e:e9:e3:80:0c:65:92:78:6a:19:2d:d8:17:d2:84:89:5e:04:
35:62:2e:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE
N0E4MzI5RDAwHhcNMjYwMzI1MDE0NzM1WhcNMjYwNDAxMDE0NzM1WjAYMRYwFAYD
VQQDEw02OWMzM2ViOC0yYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFyHZkezU4HD4YHY6vXr0//qSBrT3eoiQiLI+YpgeFBlJEuaBA/jE0vBEc7x
l3FGQpk6H6h6U+yeeHu1zIW20b37+/daEKP8sn1HHqs3aC102LnBlEYKTBVHjqwe
dbPIKdSZKJVJfS0TV2NvVLJCCFhJcwJckhaTDCsTc+2Sli1fRG5/GIotklijYtXr
+eqzGdORAL9JuV30q2gTfr7o9E/UVBlK8Wd8hspturjUgnKXvmxIL0LWPkIxU25v
6iJBvG7bDGkAjmBzT8iy80eNZvUJU5pwd4rKutyFyzzsEJIi97nJk/OuQ/3n7aZP
MCAD8XNEgnHq9wCCd62swv2BfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKtUbX8
+G4Y1sVKStPlGovbR/cCMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE
QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS
STBXZDRCdTBBUFRYcURLZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ88TbtkdojaxxCHw3wWPG21msJQRUCXkFkjVEbtgTjv7jXG7XKyW1YADpZZs
sVKK5rfyVPGCqMRaj4G6m9WdsFxCG1XX+a4VgDB8mwaJQ5tKzePoxH2xh7n8Nffw
eQnJNZ6lckPoM5Dviw4Nw0RrOUEVg9ym1+ISt49n3sdxjhDgsvz3U9WuWCU2r+Xj
hKZnlUtAfCziFwvU82nTwqfAqJc4F28/03jRBM15D+KM5egazpXczrUIKpGpKYMx
TNlvP7a36c0StPo51ghBhVGo1Bx5Yux7R7UfPo3q4Fcme1MKlX3Nyq9a5Jk9Lunj
gAxlknhqGS3YF9KEiV4ENWIu0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:32 2026 by rpki-client