
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier: CjO2j35HGjwScolGRZEeNWbi0iBd7tTgM9bD3jPtyQE=
Subject key identifier: 76:92:E5:41:5B:91:E6:B7:23:BF:B3:02:0B:24:65:AE:E2:E3:78:40
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial: 142A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number: 141E
Signing time: Tue 24 Mar 2026 16:48:09 +0000
Manifest this update: Tue 24 Mar 2026 16:48:09 +0000
Manifest next update: Tue 31 Mar 2026 16:48:09 +0000
Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: uxOZNjAk9ezF1HfVUwVq2GDgAZykPaYdX3wpXbRHaUY=)
2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 3poz9WeE/VQCro0QqBaX5PdACtIqSQyu6Jy9OGfa5do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5162 (0x142a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Validity
Not Before: Mar 24 16:48:09 2026 GMT
Not After : Mar 31 16:48:09 2026 GMT
Subject: CN=69c2c049-add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:ee:f4:aa:e7:50:77:97:be:e8:73:54:d6:
fc:95:74:fa:9d:96:ba:7d:54:17:0e:33:16:c9:4e:
97:3b:0a:49:e3:da:2c:8c:8d:84:f9:6c:f6:46:eb:
c3:3f:38:3e:e2:30:0e:43:a6:ea:51:a1:9d:59:9a:
ca:a8:25:1b:6d:e4:a7:76:63:68:96:ce:6b:d2:ec:
da:18:c8:a0:d6:a5:bc:84:80:f8:40:93:04:bc:4a:
97:10:9a:d2:48:cc:2b:ed:fd:6d:1c:c5:ff:ad:64:
8d:01:49:eb:8b:df:d3:68:68:14:4e:8d:76:ca:c6:
51:a8:e9:cb:5b:3c:90:ab:fb:60:15:a9:0e:41:e1:
58:11:1e:21:13:bd:91:c2:a4:1d:a1:74:5e:50:d3:
6b:fc:2a:06:8e:7d:c0:80:dd:af:7c:f5:75:10:dc:
3a:22:6a:88:2c:09:87:07:c7:64:4f:17:f9:7e:aa:
ff:8b:8e:07:5d:76:29:94:22:a1:bd:ab:b1:07:37:
2f:f7:10:8a:fd:3e:86:1d:b9:5f:73:4e:60:55:38:
7c:c3:ef:ee:cb:1f:db:cc:c2:7f:bd:4d:a5:ec:46:
e8:99:d3:50:4c:fc:67:57:29:00:22:ea:8d:f6:e4:
84:72:a3:28:52:e1:59:85:f2:61:21:16:d2:2c:de:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:E5:41:5B:91:E6:B7:23:BF:B3:02:0B:24:65:AE:E2:E3:78:40
X509v3 Authority Key Identifier:
keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:58:fc:79:d7:27:7b:57:41:66:58:f0:55:5a:b9:a1:5e:
14:28:dc:b1:09:1a:66:14:a4:c5:ab:c6:e9:d3:9e:6b:24:64:
02:41:8f:09:41:67:2d:4b:b5:09:a1:1f:de:92:ee:1d:82:0c:
6f:33:b4:9e:8d:da:cc:b6:65:c3:82:89:ff:c6:3f:54:c7:97:
a0:fb:2a:f5:cb:7f:b2:33:fb:c8:2a:30:f5:7c:f7:6d:a5:8c:
ff:3f:66:da:43:0c:9d:b5:4b:87:e8:dc:91:36:3d:6d:f4:30:
c4:b6:4d:a3:2f:7a:d7:eb:e9:eb:41:f8:8a:3a:dd:f0:56:27:
52:fa:94:51:7d:74:80:80:0b:e3:8c:cc:3e:bc:5f:af:24:12:
6d:9e:19:9b:85:7f:39:b9:41:b8:3f:69:fd:41:d3:09:46:0a:
02:bc:7f:c5:6f:6d:a0:37:93:0e:6a:81:b8:17:b0:3d:87:44:
37:65:d6:f2:69:91:76:af:37:93:16:92:b3:ea:fc:25:81:0e:
3d:95:16:c2:03:a4:b8:78:53:04:29:34:c2:97:5d:0b:43:37:
8b:fa:ad:13:54:e3:84:d6:76:4a:ac:e9:09:7d:1f:6d:a0:c6:
60:fc:da:d5:db:39:11:3e:e0:0c:69:e5:5b:4e:58:3a:34:a5:
3e:d1:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:39 2026 by rpki-client