
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json)
Hash identifier: 9u/yYaMz559H4PHeGcHlzNPHwh+xeU3ITwyQRELjEUU=
Subject key identifier: E4:CD:AA:46:0F:09:F9:B3:19:9F:AD:13:1B:29:C6:2E:93:68:13:2B
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 073A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
Manifest number: 072C
Signing time: Tue 24 Mar 2026 21:33:04 +0000
Manifest this update: Tue 24 Mar 2026 21:33:04 +0000
Manifest next update: Tue 31 Mar 2026 21:33:04 +0000
Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: 8bLBtgQBhOcCMvRbkzgYEZJpCwS49vDvhUndbvCgGV0=)
2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: r9eFc2mrv+7PqZxdotrZyn8GATLC73rZgMCnBy0xVv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Mar 24 21:33:04 2026 GMT
Not After : Mar 31 21:33:04 2026 GMT
Subject: CN=69c30310-51a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:83:a5:c9:cf:93:6f:b3:96:e7:8a:f3:71:
dc:ed:1c:80:bf:88:88:9d:5a:b1:d2:be:9b:fe:d9:
ee:4d:33:e6:5e:74:ad:21:2d:75:9e:0b:a7:4b:4b:
4c:f8:a0:ca:13:95:f2:0c:9e:eb:06:e6:f3:07:fe:
14:04:60:b4:27:23:da:76:15:ed:b6:79:02:2f:ee:
29:f6:a7:5e:b0:07:43:7c:90:bc:b8:ef:60:2c:64:
35:0d:53:b0:8e:d2:23:d8:10:36:ad:d0:40:51:a0:
ed:a4:e4:7b:90:b9:8e:37:d9:34:89:85:68:46:0a:
9b:d8:a8:c3:d2:55:fc:1e:f2:04:6a:92:e9:ab:60:
81:6a:d0:30:b9:58:75:4a:69:72:ea:44:8e:26:c8:
aa:75:11:95:9c:57:e8:b3:04:dd:a8:82:e6:16:00:
23:0a:13:51:e9:02:3a:f5:43:32:6f:0c:d7:d4:95:
d6:d9:7d:55:cf:c8:10:e4:22:45:77:58:06:cf:fc:
fd:08:ca:6f:c5:43:82:8c:01:5c:82:43:b0:c7:0b:
a9:25:c4:cc:ec:7e:68:71:f0:24:98:13:03:a3:81:
e7:ac:93:9f:e9:b7:71:55:a7:3d:2c:38:b1:8a:b8:
a7:74:43:16:7c:e7:4d:b0:04:f8:b3:b1:f4:8a:2a:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:AA:46:0F:09:F9:B3:19:9F:AD:13:1B:29:C6:2E:93:68:13:2B
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f9:d5:d7:4c:f7:91:8b:e4:7a:07:af:82:ec:3c:45:92:75:
57:3d:0d:45:fb:4c:74:1f:ab:37:1a:96:51:ef:5e:24:8c:e4:
9c:3f:7b:b8:f3:f9:6c:d4:ae:1f:5e:af:d3:db:ea:00:8b:63:
1d:66:17:08:4b:bd:33:dc:78:88:92:19:bf:1c:6a:e8:35:4f:
7d:b6:e2:75:e5:78:47:dc:89:bb:94:ac:5f:4f:74:7d:98:ca:
bc:86:ba:bb:f7:e4:5c:6f:4b:46:15:0a:66:16:60:24:f8:5a:
ff:a7:d5:4d:2a:66:b4:79:8d:5c:0c:d4:8f:b4:e1:06:67:25:
74:5c:b4:e3:53:4a:ab:bf:e4:2c:f0:e5:54:8c:77:bd:1f:f7:
f7:99:e5:b6:3d:a7:ba:ba:8a:b7:1a:de:e0:58:70:1d:d0:55:
02:2e:f2:ab:ac:8c:5f:13:1e:dd:1b:44:64:74:13:79:0f:f3:
d3:37:2b:20:41:49:2e:8c:8f:ae:8c:47:9b:bd:52:4d:9c:f4:
91:d0:63:8a:21:10:7f:60:4d:41:a4:ae:f6:89:9e:41:5b:01:
eb:74:46:80:a3:e9:e5:48:17:e6:8b:02:50:13:c9:08:90:79:
0b:a0:aa:7f:27:32:5d:d6:b9:1a:88:c4:c4:63:10:29:c6:b3:
cc:0f:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:25 2026 by rpki-client