
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier: LWhJsAldmZiJaymvnZHPTycBlkL8/ZsfQwYFcanpDzQ=
Subject key identifier: D0:74:F0:CE:91:59:1E:DF:D5:34:11:A5:A4:65:80:26:E3:90:35:FF
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial: 1420
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number: 1411
Signing time: Tue 12 May 2026 16:55:37 +0000
Manifest this update: Tue 12 May 2026 16:55:36 +0000
Manifest next update: Tue 19 May 2026 16:55:36 +0000
Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: FoOK5Qes9ORw0DbOJK3wIty7S+YfQN+uaH1cra6Ckiw=)
2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5152 (0x1420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Validity
Not Before: May 12 16:55:36 2026 GMT
Not After : May 19 16:55:36 2026 GMT
Subject: CN=6a035b89-a480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:a2:9f:e4:49:f3:e0:46:25:2c:f6:03:cd:
39:5b:97:94:06:e8:dd:a8:51:42:bd:fa:96:99:ae:
f4:c7:19:92:f4:c2:54:d8:11:92:4b:35:5f:ee:c0:
d1:d0:9b:fd:ea:37:75:55:a1:df:99:4c:e4:ff:d0:
9d:7b:b4:9c:67:51:6b:0b:bf:78:26:74:e1:a8:2c:
3d:d4:54:38:90:8f:72:11:e8:ae:c4:03:38:90:89:
72:da:46:94:62:6a:b0:c5:e7:ac:a9:d1:78:b7:a3:
eb:51:96:3b:bd:bd:1d:d5:78:54:8f:27:dc:1d:eb:
69:4e:68:94:d6:86:a6:3b:89:f8:d9:ed:f9:8e:50:
0c:1c:85:bc:fd:4f:a5:3c:c9:8f:89:6b:e3:b6:35:
e1:8c:20:fd:13:92:79:8a:bc:53:d8:39:49:4d:7f:
88:95:03:e1:9a:b4:d0:a7:4f:d2:ec:4e:40:75:3b:
5f:a1:c4:f0:db:d4:8e:78:b0:e4:87:d1:65:bc:94:
18:c4:7f:e7:6b:c3:8e:fb:d4:96:27:2a:09:39:b7:
13:03:fa:3b:cb:87:e2:64:c4:36:91:d3:b2:8f:38:
1d:97:85:4d:91:56:54:5a:96:c0:d5:01:43:da:61:
b7:6a:0c:33:7f:08:0a:c5:92:6b:8d:73:9d:55:ce:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:F0:CE:91:59:1E:DF:D5:34:11:A5:A4:65:80:26:E3:90:35:FF
X509v3 Authority Key Identifier:
keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:5e:51:62:78:9a:7e:ce:e0:d8:16:11:ee:59:1d:21:b7:
6e:70:a0:54:8e:2f:a0:1e:34:50:d6:af:8b:2c:6f:43:0b:18:
35:d7:be:d5:49:65:ec:de:bc:d9:2b:71:bf:77:61:2b:c7:73:
2f:d9:b1:57:4c:e2:b5:79:12:f3:d2:cd:be:7e:36:88:14:f3:
bb:2d:e3:6e:26:10:1d:45:f9:b4:5f:d8:3c:97:69:68:e1:23:
47:cc:77:8a:fd:c9:65:ae:69:f8:33:a1:ff:26:2b:67:31:57:
f8:5d:c6:ab:d5:81:fc:78:5f:78:2e:25:ba:52:dd:b1:fd:73:
90:34:ed:c1:fa:57:f7:90:7d:38:b4:45:3c:fd:1b:cd:14:86:
e3:ed:6c:0f:57:12:d4:f8:8b:ef:b9:c5:af:51:65:92:8a:44:
6c:8b:68:9c:1b:84:c6:b8:7f:6e:f2:0b:ec:4c:f5:b5:bd:41:
87:17:f9:0f:d0:13:d1:23:29:6b:a5:46:d0:2a:3d:20:bb:b5:
35:63:9a:41:ee:44:a7:ca:62:4a:e6:73:10:86:61:3a:35:df:
c1:05:e6:10:44:2f:8b:bb:89:58:c4:bf:ca:0f:f0:5e:c7:f4:
7e:87:15:6f:d2:73:1f:53:83:16:6e:46:66:80:38:09:67:56:
4b:84:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:29 2026 by rpki-client