
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json)
Hash identifier: hedgD/Sa1/Hxc2SnTeID9Pl/md6QcbcsvpTjgAJuN4s=
Subject key identifier: 75:1C:AD:93:BC:DD:E4:01:A1:8D:00:E7:DD:65:6A:8F:F0:4E:DD:37
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial: 067B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
Manifest number: 0673
Signing time: Thu 26 Mar 2026 22:23:50 +0000
Manifest this update: Thu 26 Mar 2026 22:23:50 +0000
Manifest next update: Thu 02 Apr 2026 22:23:50 +0000
Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: /aqMGq3LVBu5cFrsWMaWKvLximLMc9iy5eMHz+PDWpc=)
2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: MzVJ7ABwrvZrqO7Qyd3Vll5wv+iRIr2Jy4BSbMrc4LA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Validity
Not Before: Mar 26 22:23:50 2026 GMT
Not After : Apr 2 22:23:50 2026 GMT
Subject: CN=69c5b1f6-9a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:f7:ee:51:cd:3a:13:c2:f8:c5:3c:c4:06:
28:dc:7c:69:ab:f2:1e:f8:f9:6b:ac:6f:c7:b1:b5:
8f:a3:eb:a2:79:ba:ee:eb:1c:b8:6e:71:01:58:a0:
8a:6f:af:0d:ab:f8:60:7b:8d:22:d7:4a:63:a3:81:
11:dc:d6:a0:05:22:42:3c:db:3d:98:a3:19:77:85:
5d:dc:c0:16:f5:af:4c:c2:75:bd:c7:e0:28:0b:d2:
09:0d:63:3d:1f:4f:6e:a4:0f:96:c5:84:70:df:e2:
e8:7c:5d:f4:b9:c4:54:aa:ad:71:ee:75:47:7f:cb:
a3:30:7b:46:de:54:a2:e3:6d:5a:e3:a1:cc:27:c7:
0e:f2:ad:87:86:d5:b1:22:fd:c6:93:90:fb:fa:ea:
e0:e5:be:6e:69:81:82:51:37:a2:aa:e3:e7:3b:d0:
50:13:9f:20:a7:ca:97:53:b3:03:db:7c:80:68:0c:
c7:92:77:5f:27:e4:aa:de:fb:a5:f9:84:43:99:82:
46:93:aa:6d:95:e2:61:fc:67:68:be:35:46:8f:05:
04:75:69:1f:6b:1b:8d:e1:54:ad:e1:78:f9:2c:ee:
10:b4:8b:17:7a:85:4c:00:a9:08:68:65:6c:14:3a:
63:6b:50:c2:a4:24:f6:61:0c:f8:33:e2:e3:6c:59:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1C:AD:93:BC:DD:E4:01:A1:8D:00:E7:DD:65:6A:8F:F0:4E:DD:37
X509v3 Authority Key Identifier:
keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e7:1d:9e:ac:09:37:d1:61:1b:bb:77:fd:ae:7c:0c:dd:63:
dd:36:d2:de:5f:f7:60:77:6b:d8:68:4b:a4:33:1f:f8:3b:bf:
db:0f:d9:59:50:b6:e2:64:6f:9d:14:67:93:62:93:cc:16:09:
01:cd:01:0b:3b:64:2b:5c:0c:6b:90:4f:d9:61:f5:17:a4:28:
5d:73:5a:62:53:a5:f9:a9:bc:b3:37:17:77:be:93:2b:39:85:
b1:66:b4:dc:1e:ca:9d:7a:d1:02:08:56:97:f4:6d:d4:6d:ea:
82:03:4b:98:08:76:de:ed:63:f2:50:5c:20:cc:65:34:1a:b2:
51:67:4e:77:44:da:7a:ad:2e:17:d6:62:75:13:8a:08:2c:bb:
b8:43:d9:d3:97:ce:aa:b0:54:58:f1:69:03:05:ae:ba:e2:a3:
9d:f4:66:ca:34:18:d3:6b:0c:88:79:02:25:9e:12:61:35:c8:
cf:3e:8c:23:bb:3e:b3:08:c0:3f:17:dc:e2:8f:52:8c:e1:25:
7f:08:d3:49:c7:9d:0b:75:6e:48:7b:8d:8a:c3:99:b2:07:3b:
2f:d7:ba:68:d8:c3:73:7b:16:01:17:6b:9d:1c:64:43:5a:3c:
cf:63:31:89:53:43:6f:be:1f:05:de:b3:59:93:2b:41:2d:a6:
cf:16:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:40 2026 by rpki-client