
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier: yM8vHTQSEkTGbX8PaXtPczU6hEbPyyd47Zbo7AZsmMM=
Subject key identifier: B4:14:78:19:11:5F:89:FB:E6:DB:D1:44:16:E3:10:B1:1A:0B:D5:35
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial: 1467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number: 145B
Signing time: Wed 22 Jul 2026 16:58:30 +0000
Manifest this update: Wed 22 Jul 2026 16:58:30 +0000
Manifest next update: Wed 29 Jul 2026 16:58:30 +0000
Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: RmY3K943Dwolr/mCWqGUp8l/jUFC69wRzYVLL6woI/0=)
2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 3poz9WeE/VQCro0QqBaX5PdACtIqSQyu6Jy9OGfa5do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5223 (0x1467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Validity
Not Before: Jul 22 16:58:30 2026 GMT
Not After : Jul 29 16:58:30 2026 GMT
Subject: CN=6a60f6b6-aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:03:d7:60:6c:1b:fb:f6:4c:20:c4:c6:66:
c5:c5:e9:a6:0a:27:8c:03:a2:6f:d0:8a:d9:d2:24:
08:27:7d:2d:e2:d7:f1:21:45:84:06:8f:83:f9:47:
91:3a:db:8b:5f:6a:1a:43:78:8d:8e:ac:32:56:c5:
44:0d:8f:bc:b9:5b:a5:dc:8b:c0:29:31:bd:94:ba:
77:1b:fc:23:dc:f6:e0:1d:a4:b5:15:18:14:d4:0b:
44:65:35:f2:fe:25:62:bd:1d:da:4e:ea:52:15:7d:
f7:e1:0d:d5:df:f6:e2:cb:da:8a:b8:f9:c8:d4:a3:
97:af:08:ec:86:73:42:87:3e:99:eb:b9:5e:35:9b:
59:d1:bd:70:ff:f9:93:a0:9c:58:d3:cb:9c:b1:ee:
24:62:a3:40:e0:48:c9:1d:a0:6c:1c:8f:92:0a:21:
4d:33:4f:84:57:b1:f1:56:f3:4d:98:dc:97:ec:dc:
88:9c:4a:6e:21:d1:dc:19:02:29:a5:81:e8:ab:32:
16:e9:67:d8:e0:4a:c7:e6:3d:42:ed:c1:25:d0:5b:
d3:34:f8:95:d7:52:98:d9:38:62:da:80:13:bf:08:
f7:f1:4f:22:32:0f:d4:b7:39:36:87:01:1c:47:70:
60:d9:e9:f1:4a:5e:ec:c8:dd:69:d9:d9:5d:1f:33:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:78:19:11:5F:89:FB:E6:DB:D1:44:16:E3:10:B1:1A:0B:D5:35
X509v3 Authority Key Identifier:
keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:28:00:01:da:51:f8:f1:89:ae:63:aa:66:9c:da:19:a6:31:
6d:83:46:46:a2:7f:22:66:a9:6f:35:18:f6:f9:bb:dc:3a:5a:
65:8b:83:7f:b2:72:9f:11:84:0a:b4:d1:a6:d6:6c:44:cd:88:
9a:2f:b5:28:27:36:f1:b1:63:ba:5f:81:74:9e:19:6a:ae:14:
53:de:a1:7d:c5:a7:05:bb:64:51:03:53:42:6b:19:d7:29:3c:
9f:11:30:9d:40:8e:67:ba:6a:74:e5:7d:83:a0:58:3a:42:76:
84:f4:d8:e9:09:f2:7f:4c:f8:4e:91:b7:48:15:97:47:dc:a9:
cf:b2:98:7a:9d:5e:f4:39:25:0e:8a:dc:0b:25:a6:26:9e:62:
37:29:70:42:54:7f:36:38:63:73:4b:3b:46:e1:c2:a5:ec:8d:
8a:53:42:3f:85:8c:c6:44:dc:06:65:16:d4:5d:a2:f5:48:d0:
c9:a1:a9:a5:8f:52:b8:14:b3:0b:01:1d:e0:39:13:10:91:5a:
99:d7:0c:73:09:f9:f4:1c:f5:b6:d1:69:d5:08:d5:30:9d:d1:
32:83:ac:aa:2a:ec:6c:d0:59:0b:1f:8a:08:d9:bd:f9:c2:7f:
79:82:4f:16:87:e7:97:9b:d8:98:27:a1:d9:e4:92:eb:c1:65:
47:e7:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:55 2026 by rpki-client