
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json)
Hash identifier: FsglbLS4z90HkdvqUU8ZTG/cqmyvO5VBgjsXnLgZu4w=
Subject key identifier: FF:F7:D3:D9:A5:56:48:AA:D3:03:C4:8B:02:84:FD:C0:9B:9C:11:AA
Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
Manifest number: 01AC
Signing time: Thu 23 Jul 2026 05:32:11 +0000
Manifest this update: Thu 23 Jul 2026 05:32:11 +0000
Manifest next update: Thu 30 Jul 2026 05:32:11 +0000
Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: Zt2fGWld9iOrEMP+UDlq1aXolsI9gR1G99fVDFySodU=)
2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: QRW89YvyXKuiuVqN3av9FpFxRLwsjZ4Fxr5K/DhmUjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Validity
Not Before: Jul 23 05:32:11 2026 GMT
Not After : Jul 30 05:32:11 2026 GMT
Subject: CN=6a61a75b-97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:ae:d2:da:64:aa:cd:b2:88:e2:a2:62:6d:
30:be:a0:8c:3a:31:87:1d:53:d4:b4:31:f4:b9:04:
cf:fc:dc:bf:b6:bf:31:04:30:9e:1e:f3:fc:a3:23:
08:87:70:a8:bf:d6:b2:88:bc:b2:d8:55:9b:59:31:
cb:d2:45:72:8a:88:32:f1:92:60:5d:45:ef:43:04:
4f:b2:3b:31:59:a8:38:d9:33:0e:1e:47:55:08:8f:
f8:61:77:16:17:6a:00:bd:7d:c8:a4:02:82:8d:87:
bd:31:de:99:28:91:cd:57:79:f9:25:db:d2:a3:71:
ca:21:ea:aa:17:f6:db:ef:a2:2e:e0:84:d3:4f:ac:
2d:02:ab:14:13:e4:0a:fe:dc:9a:d3:42:a8:30:31:
e2:09:41:ee:0f:f5:5f:ce:46:b0:5b:b5:ef:bf:80:
27:cd:66:26:ab:ee:3d:79:58:3a:f6:bc:1c:52:9a:
07:07:b6:51:ef:66:d9:37:ca:fe:17:22:bd:62:88:
26:6a:d7:f8:76:c9:75:4e:cd:c1:d3:9f:59:8f:32:
c8:80:d8:f8:08:be:b2:70:fd:d5:3d:7e:1f:e0:d0:
1a:71:8f:d3:17:05:27:ad:01:96:14:3d:57:1b:43:
9a:24:ab:19:02:6d:c7:39:c1:4a:d0:61:d3:7f:ce:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:D3:D9:A5:56:48:AA:D3:03:C4:8B:02:84:FD:C0:9B:9C:11:AA
X509v3 Authority Key Identifier:
keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:ca:72:2a:c7:2b:8d:51:72:a4:21:a1:42:03:a9:8f:32:
0c:94:31:05:3e:4b:ce:7e:84:b0:d6:71:4b:f7:27:a7:12:4e:
c5:59:71:de:42:ea:5d:7f:e1:3b:f1:4c:16:10:ab:4e:40:58:
e5:3f:f8:69:a5:b1:69:57:84:2b:2d:f1:a4:a3:c9:88:7c:10:
f8:8a:3e:ff:fe:97:9a:2b:93:d8:bd:dc:59:c9:ff:d5:28:d2:
91:18:24:41:98:c5:db:fc:bc:c8:5a:c3:f1:61:e2:3c:6b:72:
f0:dd:27:3e:38:d4:02:fb:16:b7:95:d9:8d:9c:8d:e9:cc:7a:
7e:17:b8:c2:72:08:22:9f:39:76:81:b6:51:5b:82:c1:76:b9:
a1:a9:14:76:70:47:2b:52:37:51:96:d1:fe:c2:a2:57:d3:3a:
af:69:5f:74:5d:eb:27:69:f4:57:79:76:9f:2a:7d:a1:24:c5:
d5:18:4c:fa:ac:5e:15:65:1e:ab:f4:c3:ac:2e:c9:5a:8e:9d:
f3:61:77:af:b3:54:fc:34:5a:d2:71:9d:0b:98:ea:d3:ec:0b:
65:ba:62:3c:5e:ff:fa:b8:3b:9a:3b:35:f5:e9:9a:9e:cb:8e:
f4:1d:cd:f1:4a:48:6d:f8:59:53:cd:7d:94:33:35:5a:a2:04:
71:e0:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:16 2026 by rpki-client