
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json)
Hash identifier: v3jXei5oiLWuSRSuLdMOMiXgyYGmzu3QlUgw1OSf7Dw=
Subject key identifier: DA:8F:B8:F1:71:F4:E7:EA:1A:88:5B:81:27:D9:6F:45:26:94:B9:9C
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
Manifest number: 0662
Signing time: Tue 12 May 2026 22:44:30 +0000
Manifest this update: Tue 12 May 2026 22:44:30 +0000
Manifest next update: Tue 19 May 2026 22:44:30 +0000
Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: 9pGy7wc+VcQ00PsJL7AOss1zOYmpH5W7UUAqdvl8WFM=)
2: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: j0Lls1jMW2LtYeSOUO6Wabswupqh4cWP6NRbUoZu3gQ=)
3: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: D28JViq5DTul15vvpmV6z9+X0ID4UKSv89OD87IAkHk=)
4: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: 2F9/OfNqLH/Bv3B/s5QChirZib/NP8advNQvVdkiNgM=)
5: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: F9EcEQA+HmBdtnZV4TQMHFa8YoL9P87Gx491WL3HtyA=)
6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: NrQQkVXLMpdvNf6nXRcerpadEJ5fwZiI58MW+BR6ujg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Validity
Not Before: May 12 22:44:30 2026 GMT
Not After : May 19 22:44:30 2026 GMT
Subject: CN=6a03ad4e-3b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:05:1d:0b:9b:32:3b:e5:55:43:71:0f:57:
6c:98:c2:b8:3d:86:fb:26:7e:29:96:88:a7:92:7d:
26:01:4d:be:a7:9f:a4:3d:77:39:59:4b:e3:78:ca:
48:28:64:02:9e:b7:e6:0e:8a:77:15:31:fa:72:c1:
48:03:b8:2c:5e:95:b9:2a:3a:46:f1:10:29:bc:1a:
3a:44:6d:ab:f1:54:3d:2d:9d:09:cd:40:85:9d:bd:
d9:2c:b0:f2:97:1c:50:85:a2:d2:42:4e:d8:df:6a:
db:eb:2a:ce:9d:b5:d7:50:b0:66:49:32:57:52:e2:
c9:53:8d:b0:48:7d:15:c7:66:51:a4:49:a5:d8:d2:
ed:ba:13:33:44:c4:88:6f:d2:7b:2b:d2:e1:33:30:
a1:79:bd:b4:37:fa:09:5b:69:e8:93:d1:ca:00:0d:
fa:12:64:27:b9:aa:b3:e3:aa:3a:2e:fd:0a:9e:b0:
c5:98:42:d0:74:e4:cc:b0:d1:60:e6:8e:30:c7:a1:
6e:a1:6c:d3:80:3f:61:24:3d:04:a5:3e:52:27:28:
ac:75:4b:42:92:e2:8e:7d:d8:47:73:11:04:70:f2:
41:26:7e:54:52:f2:3e:39:72:6d:cf:07:1f:7b:cf:
1c:9a:76:bb:c1:7d:f2:ce:a2:b9:c1:af:5a:0d:41:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:B8:F1:71:F4:E7:EA:1A:88:5B:81:27:D9:6F:45:26:94:B9:9C
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:df:45:c8:f1:f8:b9:de:fa:f1:c1:07:41:e3:04:25:3b:
33:17:f0:1b:44:06:a3:90:bd:47:69:fe:29:e5:70:cb:6d:e7:
f5:50:1f:d0:a5:67:1b:53:47:0e:10:a8:67:8c:96:6d:1b:9f:
14:59:18:28:8a:4a:6a:73:0c:0f:7f:92:0c:ed:c7:a5:56:ca:
d0:e6:b0:1c:72:55:86:d7:de:27:c7:bd:ed:c5:64:43:b6:35:
21:52:3f:3f:21:25:04:ff:5c:6c:aa:a5:20:5a:01:f3:e8:2e:
f7:e8:b9:54:5b:c4:31:81:15:98:e0:af:a8:89:54:f6:4b:47:
20:a8:b0:18:89:af:6e:ff:70:0f:da:d8:fe:e9:b4:6f:2e:4e:
f7:2c:5a:bc:b9:9d:71:15:db:c0:22:e5:61:f2:9d:bb:a7:b8:
ae:ec:16:69:4f:0b:a5:3e:e1:3d:88:27:9e:23:39:b4:b7:c4:
0f:c2:20:fa:c7:53:3f:08:b1:3f:7f:c6:35:87:24:01:d7:29:
7f:e3:7d:45:05:fd:fa:f4:87:96:ed:6b:25:84:18:51:db:45:
ca:d0:da:93:de:ce:23:1b:d8:58:32:39:c0:fd:9b:43:ea:05:
64:81:f8:bb:3a:f4:3e:95:aa:24:78:2e:16:0e:95:2e:c2:3f:
3b:30:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:02 2026 by rpki-client