
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: kDBR+j5PnfCEOhLS75aT6CcPojFFANVrjhS7RKwwpkY=
Subject key identifier: 0F:EE:9A:7A:41:45:DF:AA:01:2C:57:B1:A8:33:04:AF:97:4C:5D:46
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 046E
Signing time: Tue 24 Mar 2026 23:47:09 +0000
Manifest this update: Tue 24 Mar 2026 23:47:08 +0000
Manifest next update: Tue 31 Mar 2026 23:47:08 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: FDr74YAZTrvEmBzcBGDjTJwj3355Y7SWAXwRDlqUDnc=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: rls7T0ChBtBNvyhoCS8lknHH43Zf32d5u7k78EzpMIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Mar 24 23:47:08 2026 GMT
Not After : Mar 31 23:47:08 2026 GMT
Subject: CN=69c3227c-cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:ad:e7:88:5f:45:85:06:3e:44:03:d9:a8:
5a:cb:a8:b0:ee:1c:e4:f4:82:e1:3c:02:68:5c:62:
62:73:59:65:65:51:ef:da:a5:68:38:0d:98:c3:e0:
ec:0f:e3:6f:93:77:44:5a:45:ed:88:1c:5b:d8:85:
9e:6f:0f:20:b6:f9:60:55:9a:b5:c5:47:f0:1b:c1:
32:74:7d:c9:b7:d7:45:f8:70:47:67:33:66:d8:f9:
d4:a8:9f:45:22:03:a9:f6:28:f4:c1:8c:b5:dc:eb:
73:85:f1:f5:3b:43:cb:a1:51:f1:bf:60:33:5a:eb:
5d:a3:84:b7:e5:30:a7:5d:51:9d:f7:33:82:02:66:
22:23:87:4d:3e:6d:fb:93:36:37:54:db:f1:ab:0f:
a8:93:fb:d2:48:69:af:6a:7f:3b:ee:ef:c8:b7:3d:
4d:55:7d:e8:75:9e:0c:e8:61:2e:68:3d:cf:1b:24:
69:21:cd:8a:8b:12:22:e1:b0:89:37:6f:38:78:3c:
58:00:36:62:a6:fe:bd:37:70:0f:df:3a:a4:c8:2c:
5c:df:15:98:9f:c5:2d:2f:be:b3:1e:32:8b:a0:ef:
93:43:28:be:2f:d7:c2:e2:9f:1d:df:0a:2b:ff:d8:
d2:b4:ca:e3:34:2d:9a:dd:b8:0e:97:16:65:ee:d4:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:9A:7A:41:45:DF:AA:01:2C:57:B1:A8:33:04:AF:97:4C:5D:46
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:25:cd:43:ca:bf:ac:56:b7:40:87:56:f4:8e:2a:43:b1:6f:
5d:08:65:67:57:53:46:e4:72:2a:6c:11:a9:4d:cb:cf:63:ee:
0c:d2:45:09:c0:05:92:43:f7:b5:0a:03:f0:e6:25:2a:dd:df:
81:a2:35:ee:14:b7:89:58:99:9b:ac:16:6f:64:47:a1:16:29:
26:66:7a:37:cb:20:25:4b:c6:ae:68:50:61:57:e4:07:61:63:
2f:10:ef:44:85:29:90:0d:2a:96:1c:51:05:ab:e4:e3:79:cb:
b7:3e:67:72:56:bc:6d:37:d4:0b:bf:21:51:fd:1c:e7:f5:0a:
9b:87:30:70:3c:db:55:ba:1a:59:51:e6:b8:07:41:50:b8:66:
83:bf:19:64:b2:8f:0e:75:f1:de:4d:60:c6:5d:c6:6b:71:4d:
67:c8:ed:8a:f5:70:5a:e9:41:ca:62:e3:91:de:1b:1c:92:76:
e0:66:49:e4:df:a4:5a:a6:e0:d0:02:ad:72:c7:3d:89:a8:41:
ee:f5:04:5d:4a:1a:cb:08:19:df:0a:1a:77:34:67:e1:e9:b0:
ad:38:04:c8:9f:d5:a2:12:2b:0c:6c:fb:d9:cf:e5:f7:ca:3c:
9f:21:55:1a:07:bd:95:f7:44:65:d9:27:77:c9:19:f8:54:cf:
87:88:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:55 2026 by rpki-client