
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: fz7XaLAHeMWz17trBDtr5AvPdwea4mKJL/yDqPF1skM=
Subject key identifier: 39:D3:96:58:B5:D6:3E:BB:0F:ED:AE:48:75:34:30:A7:BE:7A:13:E5
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 04D0
Signing time: Tue 22 Sep 2026 23:27:25 +0000
Manifest this update: Tue 22 Sep 2026 23:27:24 +0000
Manifest next update: Tue 29 Sep 2026 23:27:24 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: jWm3m4bU6JowTwFc7J0yc6kmwob0EjoZ4hsh4qathgk=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: qu+ajiL1JZYRW5m42zxrTG99jy7/rsQd9oPljdycO/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Sep 22 23:27:24 2026 GMT
Not After : Sep 29 23:27:24 2026 GMT
Subject: CN=6ab30edc-bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:73:4e:ea:d3:8f:dc:3e:73:42:78:74:83:
8b:c8:1b:90:5b:81:2e:29:50:66:70:a4:f6:c5:6e:
45:5b:25:a6:c4:b9:a7:9d:5a:12:df:85:3e:63:12:
92:45:c6:34:4e:a5:90:57:22:99:74:1b:67:07:66:
b1:da:95:b6:7c:1d:4b:cd:f7:9b:ff:e6:57:a7:64:
20:08:72:2a:94:fd:dd:bf:ae:f5:7f:43:94:0d:c2:
91:4b:ce:c0:19:1b:2a:dd:7c:b4:b6:19:37:5e:78:
7a:c0:72:3f:d4:81:8e:77:13:90:c8:26:cd:0a:e1:
8d:a5:85:e7:9e:b8:86:6f:0e:b6:8c:d6:6e:3e:03:
19:76:41:a7:d7:eb:ed:c5:ba:b5:24:d5:30:f2:65:
c7:d5:07:c2:4c:bd:1a:2a:02:f1:5f:b9:14:0a:16:
15:b2:5a:a9:d1:90:3d:93:19:ee:02:ec:84:4e:a0:
66:97:8c:79:84:90:d9:8e:00:97:8e:80:3d:15:53:
cb:15:95:e7:f6:72:5b:e6:47:30:35:e3:e2:bd:16:
b7:d7:05:bd:9e:be:74:61:31:04:e0:73:8f:e4:c5:
ef:08:f1:65:cf:6f:a4:9d:80:90:4b:79:e6:b2:f7:
ae:55:76:fd:39:67:54:6c:9f:64:f0:34:52:11:dc:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:96:58:B5:D6:3E:BB:0F:ED:AE:48:75:34:30:A7:BE:7A:13:E5
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:28:a2:f3:a3:00:c1:3a:9f:82:5a:fb:db:43:87:a1:d6:
45:0f:57:c0:a1:1b:7f:a4:df:5a:85:d3:69:a3:55:6d:c2:0e:
f8:a5:e8:0a:c2:fc:3e:c8:87:79:70:e2:5c:d9:d2:59:d9:0f:
3f:ad:f2:5f:10:23:b7:71:78:7a:ce:3f:40:50:f4:56:57:4c:
2a:e1:8d:9b:ee:7e:6b:29:00:0c:a7:82:7f:59:64:e5:c5:a3:
e6:00:be:5e:0a:89:d9:aa:73:0a:43:5f:29:44:9d:fb:bf:c4:
4c:34:3b:9a:33:8e:28:36:66:31:c9:8d:98:6c:cb:67:48:78:
8a:d9:41:1f:29:6b:52:0d:a1:20:46:15:f4:99:b2:b4:d1:19:
64:63:04:d8:6a:4a:3e:71:ba:27:17:4f:e6:c0:d9:7a:08:8b:
df:9e:f1:89:3e:91:ae:31:5d:67:9f:51:6d:4c:a9:6a:2f:5a:
c9:92:94:0d:83:c7:20:83:0a:30:8f:cd:88:e4:36:53:a7:77:
98:55:33:96:00:8d:66:a3:b1:8b:f0:c6:f2:49:76:50:9b:df:
33:0f:a7:9b:25:cb:bc:e7:e1:57:7f:ca:7b:c2:6b:8e:cb:9c:
7e:aa:23:28:cf:75:cc:50:d2:37:e1:32:f8:db:56:c2:28:3e:
09:f6:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:59 2026 by rpki-client