
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json)
Hash identifier: VwdaYTuror90IflTueU8/vgG2VcdVa0ksO09xW24ojk=
Subject key identifier: 13:1F:AD:76:2C:19:77:27:2D:44:68:26:78:0A:DD:27:C9:9D:40:7E
Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
Manifest number: A0
Signing time: Wed 13 May 2026 07:27:20 +0000
Manifest this update: Wed 13 May 2026 07:27:20 +0000
Manifest next update: Wed 20 May 2026 07:27:20 +0000
Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: eJuUlXhedDJSQCrbniDyfVa0Hf0kneyzzzKG2zrPZkc=)
2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: 5cgf0ISAMxYWm7zrPrCKiC5371eZ0TJcko/OPv9sPXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Validity
Not Before: May 13 07:27:20 2026 GMT
Not After : May 20 07:27:20 2026 GMT
Subject: CN=6a0427d8-39f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:d6:38:5c:c2:08:2c:b5:1c:0e:05:c4:83:
4e:bf:93:31:5a:51:69:77:08:5a:20:94:46:55:2c:
b2:7a:f4:4f:44:11:fd:7e:9a:9f:43:3a:c2:8b:96:
29:f5:a1:16:9c:fe:c7:5a:39:8d:75:ce:d9:c9:27:
29:1d:63:79:1e:d3:ea:b4:8b:bc:2c:b0:66:48:86:
1b:d8:6c:b7:a8:98:f1:39:40:c5:58:eb:30:37:ca:
72:2a:2b:8b:f6:db:33:c8:69:b8:34:04:f3:5f:31:
5b:eb:08:53:c4:60:8b:98:87:af:a7:66:0c:07:81:
21:50:e5:e5:45:a5:67:74:46:13:89:92:09:9c:8b:
1a:91:52:7d:1d:60:c7:5e:b0:ed:60:32:fc:bc:71:
1c:51:9d:4f:9e:df:22:8f:40:97:47:97:1d:29:28:
4b:a4:8f:74:dc:6f:6c:84:2f:dc:e9:b6:ca:94:02:
18:72:6d:a7:6f:c2:51:5e:13:f5:76:4b:4e:96:72:
b7:75:31:64:f8:18:97:46:b1:65:33:04:e6:13:8f:
c8:04:27:d5:b9:59:6c:8c:2f:5a:8a:db:32:24:95:
5d:51:bd:4d:9c:04:e7:3b:2a:02:ce:b1:8f:a7:c3:
68:70:a7:0c:2c:30:41:a3:85:1e:7f:fd:75:7d:80:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1F:AD:76:2C:19:77:27:2D:44:68:26:78:0A:DD:27:C9:9D:40:7E
X509v3 Authority Key Identifier:
keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:e2:f3:d2:98:8d:d0:08:ec:2a:13:ff:d2:34:41:d5:c3:
29:f0:75:ea:c3:32:d0:c7:ae:d6:a5:87:35:f1:69:74:e7:f5:
02:fc:50:6c:a5:c5:47:f1:75:ed:d8:a4:6f:e3:7b:82:b8:58:
3e:71:15:5e:e4:c4:42:65:0d:c0:f3:23:94:5e:90:6b:fb:bd:
51:ce:92:e8:ab:63:94:d6:4a:46:4e:cd:90:c5:8b:18:76:dd:
3d:62:38:a9:d8:d8:1b:c3:56:81:0b:2d:42:6b:b2:b7:69:c4:
5e:b7:3b:a4:8b:44:01:c8:af:b8:68:01:b9:00:cb:e6:83:1b:
b4:b2:68:e1:0e:22:74:ff:22:5d:cf:4c:69:84:51:6a:a7:5f:
70:34:94:1a:29:6b:e7:fc:b3:46:2d:64:46:b1:76:19:c8:32:
c3:b0:9f:ae:1b:f4:8b:72:71:d6:e5:cd:56:46:d4:8b:aa:db:
33:b6:a5:eb:5d:e2:42:ee:e2:14:79:86:94:db:63:28:60:92:
09:58:9d:b7:f6:a6:81:15:4c:62:80:0a:2c:0e:97:95:5c:61:
e1:2e:db:5d:69:b5:77:42:19:28:ca:c7:84:f4:08:0f:e5:96:
2c:ec:2e:9e:53:4e:67:78:43:5d:73:16:83:1d:59:9f:60:dd:
a4:f7:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:23 2026 by rpki-client