
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier: z9COYcZ6Nk8rn082kyuIUXKesEVhGZAPuH2KWFFcHIM=
Subject key identifier: F0:5F:B5:71:1F:BE:C0:2A:C2:AF:55:59:9F:24:E6:41:60:0B:92:D1
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 07A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number: 0770
Signing time: Thu 26 Mar 2026 21:34:05 +0000
Manifest this update: Thu 26 Mar 2026 21:34:05 +0000
Manifest next update: Thu 02 Apr 2026 21:34:05 +0000
Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: K1jy59DAp51yqKwxvPOJJ1EQVNBKzsUx2lcN0wCejCQ=)
2: 935748B4F66B11F085B6348E6F6F56BC.roa (hash: 5D9ZdngfkKgqazb8Ghhgdgz/2sT1WSAEVoSERu3YnqQ=)
3: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: LukrNGdWIpA2iY565dCcLM1eI6t107rjxby6IG7sOGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Mar 26 21:34:05 2026 GMT
Not After : Apr 2 21:34:05 2026 GMT
Subject: CN=69c5a64d-b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:7d:01:24:04:e8:33:1b:7d:ba:f1:bf:72:
51:0b:38:90:f9:eb:eb:11:c2:0a:a6:1c:47:cd:04:
3a:d4:82:46:e1:76:f6:5e:4f:24:8d:f3:57:05:1b:
76:6b:ae:18:7a:9c:51:ca:b1:53:57:79:6c:ad:2b:
dc:23:d0:97:c5:93:be:51:66:1b:d9:2f:35:c3:3a:
0c:79:ed:4c:7c:27:f5:fc:8b:50:65:e8:98:3f:74:
a5:b7:98:43:8b:69:0e:1b:2f:5f:51:61:84:74:d9:
7e:59:1b:ff:00:cf:fd:48:40:8a:0f:fc:8a:ad:9e:
23:e2:16:bc:d2:73:ee:c3:a0:6e:fa:c2:f6:2b:7c:
d8:c5:c1:c6:f2:7e:58:48:f2:3d:0a:4c:e3:64:44:
c8:93:f7:73:79:1f:a1:37:4e:ab:14:ef:6a:1a:7d:
79:3f:48:19:3e:20:0e:9f:71:0a:5c:23:ed:71:4b:
d6:15:52:cb:48:af:9a:d3:ab:c2:ab:c4:93:16:df:
c6:bf:c5:6a:9e:6c:21:a3:ca:26:90:72:cb:50:8c:
ec:6c:1e:79:2b:80:e6:5f:dd:32:2f:e6:84:33:a4:
44:94:84:29:93:6b:c3:ac:63:1e:2d:e7:3c:54:d8:
5e:9f:f0:14:cf:36:5c:54:39:73:6d:50:02:5d:cd:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:B5:71:1F:BE:C0:2A:C2:AF:55:59:9F:24:E6:41:60:0B:92:D1
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:b0:25:f7:ae:d0:f1:ec:a7:99:bd:90:93:04:75:14:72:
e4:9f:be:61:ea:19:fd:dc:d6:8a:72:18:36:5d:39:9e:93:b7:
86:72:c5:b7:e4:04:21:c7:f4:d0:c5:72:92:bf:37:a4:24:29:
1e:bd:cf:35:7a:4a:b8:98:23:e8:64:df:d6:e6:b5:dc:94:30:
aa:e5:23:b8:68:c2:22:b8:a4:72:22:1f:17:5f:e1:5d:e1:57:
c6:8e:de:1e:63:65:90:f7:77:42:c1:fc:51:ea:62:f1:b7:3a:
60:82:1a:58:3b:fb:1f:d4:cf:54:e3:62:c2:af:a0:c3:b6:da:
da:eb:bb:41:e6:6b:7e:26:13:c5:05:aa:c6:62:28:6e:74:52:
6d:c2:f5:a6:6a:d5:9a:3e:bf:97:68:bb:0a:28:b2:72:2d:f6:
94:11:b4:44:30:50:2f:bf:3a:6e:26:0c:59:7d:6b:67:b9:0a:
04:88:90:bb:c4:88:e0:7d:d9:8d:fa:91:22:86:4d:0c:c2:2d:
cc:f4:d8:ad:2c:64:47:03:a9:a5:1d:a7:3d:ce:af:01:45:87:
18:3e:70:84:a3:8a:aa:bc:7d:72:d3:dc:fb:b8:57:eb:d5:b3:
c2:da:bc:ae:13:17:d7:ce:1f:77:f1:dd:1b:8f:24:d9:d3:1d:
f5:60:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:01 2026 by rpki-client