
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier: 5mL6sf+xMiXVqkX4hikxtHxjSoq8pa67+luHnkKTvhY=
Subject key identifier: 7F:2C:DC:E3:10:61:C9:05:8B:03:78:4B:BA:FE:12:E6:81:BC:09:1A
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 33F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number: 337E
Signing time: Tue 12 May 2026 15:25:10 +0000
Manifest this update: Tue 12 May 2026 15:25:09 +0000
Manifest next update: Tue 19 May 2026 15:25:09 +0000
Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 5kODIglmcYXQIGRhVbAAbSQU9WuF6QuSHOuBebJHWgM=)
2: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
4: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: sVfjMKk5gEscjf/+ggoyWUQbHrSEKZRSttzymuAtyFQ=)
5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13296 (0x33f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: May 12 15:25:09 2026 GMT
Not After : May 19 15:25:09 2026 GMT
Subject: CN=6a034655-5915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:98:05:3d:a2:9d:22:82:57:79:c4:e6:ad:
48:61:59:14:59:54:3a:5d:a3:ba:b8:d6:be:b6:d9:
24:eb:5f:dc:71:45:99:c0:ef:1e:28:b7:60:97:bd:
8f:1f:1f:e0:e2:90:6d:d4:2f:34:b1:aa:e7:69:6c:
6d:8e:40:81:9a:d4:2b:84:e3:af:ba:af:75:22:d7:
6b:18:b3:bf:5b:0c:e4:62:0e:b8:a7:b1:6a:9c:f3:
98:ad:fd:03:7f:56:10:02:9c:1f:55:44:f5:a6:14:
ac:61:90:c8:50:3e:41:d7:7a:80:70:4a:f8:a3:c2:
d5:4d:63:c7:33:bb:35:7e:8f:41:91:f7:73:1c:6f:
58:fe:c6:23:0e:67:cf:eb:02:25:65:17:f7:a8:b0:
71:c5:f1:80:cd:9d:cc:26:b1:b6:25:81:74:65:2d:
b4:e1:6b:32:c6:4a:93:87:eb:13:4e:d4:e7:f9:ac:
e7:c3:aa:7e:4a:10:9e:f5:07:1a:b2:83:8d:43:01:
ce:85:ad:a9:66:be:b1:8f:66:30:8c:6e:97:1e:f6:
28:73:39:85:34:ec:6c:4c:9f:a5:6c:1d:6b:60:cd:
48:9f:ee:7e:a2:d4:d3:05:8d:62:02:0f:bb:cf:07:
ff:dc:c0:ae:1d:17:5e:7f:22:81:ab:16:10:a2:41:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:DC:E3:10:61:C9:05:8B:03:78:4B:BA:FE:12:E6:81:BC:09:1A
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:54:c8:88:2d:09:f8:9e:97:0d:8e:10:d3:1c:e4:52:6f:40:
d7:6e:6a:e3:56:16:a9:a0:fa:3a:d6:05:60:d5:c4:cb:c5:f6:
d7:35:a1:4d:07:c8:f7:19:31:ca:79:58:81:5e:38:c5:d5:2c:
63:6b:8c:2d:07:ca:4a:1f:c7:da:50:18:31:c9:8f:b4:5f:85:
8e:47:fc:a0:2c:6d:95:8b:f8:e2:a9:be:0a:4e:f8:82:1a:44:
15:c7:ba:86:fc:fa:0c:02:f5:52:ce:80:00:99:91:d7:cd:5f:
0e:ce:47:f5:d5:93:ea:01:44:83:33:2e:e6:e4:83:23:e7:59:
b2:a2:0e:c1:c1:c2:d9:c1:7f:7a:0d:62:d2:08:a8:6a:2d:e9:
96:a9:de:4a:e8:13:c6:f9:6d:1a:33:1c:6f:59:10:55:e0:61:
ba:af:95:76:b3:26:a9:9c:b6:86:be:a8:36:59:27:82:99:24:
4f:e5:ef:b9:e6:64:ce:c4:59:90:6b:09:9c:3a:39:7d:de:6e:
22:77:bb:aa:2f:ba:f1:39:77:06:39:4d:92:a1:4a:71:9c:04:
73:46:61:3b:a7:b2:01:26:d5:f0:da:20:70:42:75:4e:13:a9:
ea:2d:f8:c9:84:5d:3f:3f:b2:91:55:d0:17:e7:df:6a:74:95:
70:0d:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:57 2026 by rpki-client