
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier: 7uYsWeZV4834KQ2EcSZyfi1ANdBGpbzoad4PXA33saM=
Subject key identifier: A1:48:8B:AA:B6:84:AC:8A:EB:3E:1F:CE:1D:A9:ED:5B:3E:CD:D5:26
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number: 0159
Signing time: Thu 23 Jul 2026 06:46:48 +0000
Manifest this update: Thu 23 Jul 2026 06:46:48 +0000
Manifest next update: Thu 30 Jul 2026 06:46:48 +0000
Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: 5xVDRQmXB2kMMXIigQFCmSgAk8z3ZjqXIcKYezmCPv0=)
2: 9FFE9026751F11F1BBCD6C1F74A30FBC.roa (hash: XrIZ022hr5ecAsAKZgLQvfOGr3m4kyUdyD7IG0BaLXY=)
3: A8E25556751F11F18B86DC2174A30FBC.roa (hash: T5VvDjawF4KbmQBm6oXv7txmPHz68zeGZ3ul549ljEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Validity
Not Before: Jul 23 06:46:48 2026 GMT
Not After : Jul 30 06:46:48 2026 GMT
Subject: CN=6a61b8d8-1a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:63:6c:ad:ae:76:f0:29:dd:72:bb:f4:5f:
23:d8:f8:d2:f2:63:a6:ff:ce:d3:e3:bc:27:d2:e4:
b5:52:53:74:f7:fd:85:a3:f6:27:d8:44:61:48:bc:
16:d2:35:ee:fa:48:f9:e4:fd:34:88:73:44:4e:59:
b3:37:7c:32:df:f9:78:46:31:66:81:45:a4:3b:d8:
60:a5:b2:60:95:57:ff:89:3f:24:62:f6:46:5f:de:
0b:a6:31:b9:c8:3a:9c:6a:e0:f5:e8:42:eb:e7:8f:
79:3c:e6:6f:4e:41:54:f5:89:f7:d7:2f:b3:2c:1a:
b6:f9:82:d8:59:a9:bc:d7:68:a8:c4:29:af:66:cb:
b1:5a:5d:f8:a6:71:10:d7:8c:77:a6:f7:f2:39:a6:
28:c5:08:f1:b2:89:b1:e7:ad:fa:28:d6:f9:ab:6a:
61:44:81:53:72:b0:e8:bd:1d:cd:56:68:20:fe:49:
f5:a8:e7:52:8e:39:ef:25:9b:01:14:71:76:f4:39:
25:c3:e1:20:6a:c0:1b:95:fe:db:d5:16:60:68:f3:
7a:2a:90:0e:52:a5:28:03:26:ec:ce:fc:b6:4a:66:
db:34:c7:39:91:12:3d:a4:d4:c2:b1:44:7e:a4:4e:
67:92:bb:2d:b3:f0:f7:27:c3:dc:c8:dc:20:a3:a8:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:8B:AA:B6:84:AC:8A:EB:3E:1F:CE:1D:A9:ED:5B:3E:CD:D5:26
X509v3 Authority Key Identifier:
keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:17:b8:cd:99:62:42:c0:42:e7:c8:a0:d0:5a:17:00:f1:
be:d7:77:75:be:57:b1:2e:5d:ee:9c:d2:5f:d1:4c:28:18:12:
1f:12:bd:cd:42:a0:15:d3:bd:c7:77:2e:04:48:08:25:4b:ff:
d7:bb:14:ab:d1:53:e2:70:2e:e1:f6:c1:ea:85:43:d3:ce:85:
f0:41:32:e7:7d:2c:aa:2d:ba:be:3d:d7:5e:61:b5:12:b2:72:
76:10:70:8b:47:5e:9b:3c:d3:3d:e5:88:51:f3:15:cb:4d:36:
17:02:8e:b2:74:29:13:1a:8d:04:bd:67:39:80:51:e8:3a:0a:
e2:37:c5:ec:26:c8:6d:b5:68:8f:4c:31:9c:99:03:41:3d:77:
f0:c8:29:a5:41:83:64:41:b3:50:c7:ef:11:3b:34:ae:b8:33:
d3:a5:4e:44:20:e3:d5:99:73:01:0b:b1:7a:7e:4b:01:cd:96:
7a:6c:3e:5e:19:dd:d7:69:f0:d8:48:e8:a8:f4:93:7b:00:e8:
76:62:8b:74:d9:4b:22:76:56:78:86:a6:f1:ee:dd:8b:73:3d:
ed:52:e9:0d:6e:ef:6f:0f:23:d0:6a:d5:11:7e:27:96:19:d2:
86:3a:10:51:36:ca:0d:16:6b:2b:7d:73:4c:55:3f:1d:cd:53:
d9:91:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:32:31 2026 by rpki-client