
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier: EVH7OxMB2Es5UIheWmqxEeeTNkvjzp0kQU6anKWjq2o=
Subject key identifier: 35:84:95:6B:7D:22:EF:6C:B9:AB:AD:DC:BC:53:33:8A:86:EF:FD:CC
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number: 01CA
Signing time: Wed 13 May 2026 03:46:54 +0000
Manifest this update: Wed 13 May 2026 03:46:53 +0000
Manifest next update: Wed 20 May 2026 03:46:53 +0000
Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: FCx6PnaunidOmNUhKbva3qZ7gPlcX+PL7/GM7VXBGLE=)
2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Validity
Not Before: May 13 03:46:53 2026 GMT
Not After : May 20 03:46:53 2026 GMT
Subject: CN=6a03f42d-9b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:3f:03:58:be:58:bb:60:f4:57:02:50:8e:
1a:bb:76:4e:6d:39:75:51:4a:2a:39:fe:81:68:69:
49:da:cf:18:49:33:c1:76:19:5e:25:cb:0f:ff:7a:
4c:15:c6:8f:4a:14:f5:ef:b5:75:b4:d8:ff:4c:8e:
f2:88:fc:8c:22:0c:49:1e:c5:af:01:4a:58:c6:95:
96:60:cf:9b:aa:d9:f9:3d:be:02:d0:0b:0e:bb:06:
16:eb:97:fd:ad:a7:3a:f3:21:27:20:7c:ff:f0:ba:
6d:4c:ba:38:57:0b:2b:7e:8a:90:05:21:a3:ad:25:
a1:26:5b:99:2e:57:de:a6:f7:fc:52:74:97:60:01:
7e:2a:07:c5:40:21:a1:ab:2a:ff:a2:9b:82:cc:e0:
94:94:9a:b7:a8:42:65:4a:8a:20:22:db:1e:4b:5d:
a0:a6:42:9b:42:6c:e6:24:80:67:02:ee:93:2a:35:
51:1c:70:67:61:62:cf:48:56:96:e8:ae:65:e5:7d:
b8:30:61:d9:ba:7c:16:ed:b8:46:44:a1:71:b6:1c:
45:0c:4c:d0:0b:4d:ae:83:53:f7:84:af:51:95:b8:
07:b6:46:e4:b0:13:a3:e3:06:df:a5:d8:1f:43:f2:
6e:14:e4:e2:1c:26:73:24:12:a8:b8:dc:b9:76:8e:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:95:6B:7D:22:EF:6C:B9:AB:AD:DC:BC:53:33:8A:86:EF:FD:CC
X509v3 Authority Key Identifier:
keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a0:95:1b:26:47:ea:f2:de:c7:d1:1f:ac:ef:ed:0f:14:1e:
3f:9b:64:80:b0:5f:89:6f:ca:17:67:01:ec:b5:9e:6d:57:44:
2d:6b:c6:6a:81:74:7f:96:00:88:ca:a4:60:b3:73:46:62:fb:
b4:86:83:cb:4d:eb:3a:c6:03:23:b0:e8:12:27:38:da:5d:3e:
85:60:8a:95:3c:be:f1:7b:c6:79:8d:48:3e:31:63:24:b4:95:
3f:78:30:88:79:7c:97:13:ec:3e:54:b0:d7:55:f2:43:8e:c5:
5a:4f:ac:61:76:9c:47:22:2d:f1:88:42:61:03:c3:d7:72:b9:
55:04:82:c2:47:00:f4:31:cc:e6:9e:b9:73:7b:cc:5c:28:55:
ae:f0:44:46:91:20:c2:9b:50:71:38:64:bb:7d:f3:53:98:83:
b7:34:b1:af:6c:7e:aa:22:86:52:69:5d:28:6d:34:1d:de:a2:
16:80:f5:ce:51:bd:a8:41:73:77:77:bc:fc:33:00:52:f5:51:
e9:24:7f:f7:9e:e4:29:fe:1b:b4:33:e8:c7:f2:0f:26:9e:ba:
86:f0:9c:16:d7:a3:03:5e:a6:c0:71:e8:ae:51:d4:58:96:49:
f7:0c:bb:8f:8d:ba:51:fb:23:07:5e:05:af:a4:92:e9:75:96:
57:0a:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:28 2026 by rpki-client