
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier: mkItnk5xQGNOQSoUxxQpirOWB7fiuYTCwVNrpMSAe4s=
Subject key identifier: 10:CA:E4:58:14:A8:7E:66:5E:2A:2A:6A:40:E7:8D:3B:8F:C2:87:96
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number: 96
Signing time: Wed 25 Mar 2026 06:47:02 +0000
Manifest this update: Wed 25 Mar 2026 06:47:01 +0000
Manifest next update: Wed 01 Apr 2026 06:47:01 +0000
Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: qxClND2kNE5rt/aw6x8eoVu4Hx55NO1dPalK0EKMEPk=)
2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=)
3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=)
4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Validity
Not Before: Mar 25 06:47:01 2026 GMT
Not After : Apr 1 06:47:01 2026 GMT
Subject: CN=69c384e5-c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:0f:7a:9f:98:bd:00:ed:c0:b1:89:74:86:
1a:96:7f:82:52:67:60:49:d9:a1:d6:07:3a:78:3f:
b5:60:55:7c:ee:69:65:72:41:e5:d3:37:ec:36:40:
67:78:94:b1:c3:d8:b1:c5:a2:9a:a1:9c:2c:d4:58:
91:b7:11:20:37:8f:28:e5:df:36:ed:17:33:ca:db:
44:c4:f9:a6:fa:a9:73:76:a5:20:81:bd:f2:ed:ba:
3b:09:86:e0:f3:c6:e0:e0:29:78:e8:ee:30:bc:aa:
09:84:86:ae:14:ee:cf:eb:05:4d:0e:c4:07:fc:23:
c1:a7:74:83:7d:7e:55:c3:fb:a5:0a:f9:d7:69:af:
57:c3:b5:c0:e5:00:10:a6:09:df:7d:5e:0f:4c:df:
88:b4:89:b4:8b:11:a5:f4:17:ee:de:6f:ac:42:79:
da:61:2e:90:d4:0e:81:51:cd:ec:4a:40:16:61:74:
cb:a8:58:0a:34:66:1a:5c:a8:c6:f8:99:8e:2d:9c:
93:63:98:b3:b8:f4:5f:0f:74:41:44:67:a2:33:71:
4a:de:a9:15:e8:aa:eb:34:29:9b:07:18:68:dc:33:
82:0e:01:4a:af:10:05:38:a5:50:78:e9:8d:13:12:
94:43:6e:12:8c:ce:db:0e:d8:43:b0:b4:1d:26:92:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:E4:58:14:A8:7E:66:5E:2A:2A:6A:40:E7:8D:3B:8F:C2:87:96
X509v3 Authority Key Identifier:
keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e4:ce:0a:33:da:5e:53:00:9c:52:e5:6a:bc:4d:d6:47:88:
3d:bb:9b:cf:a8:82:dc:74:89:16:e7:b8:22:43:38:eb:99:0d:
ee:e1:7f:ba:12:8a:32:88:34:e6:78:94:82:8d:54:4d:fe:f9:
da:07:97:e6:8d:37:09:cc:6c:85:0c:5f:b0:27:32:85:28:4c:
07:48:33:15:06:0e:ab:9a:a5:c4:6e:cb:bd:c3:0a:d4:c0:15:
37:7c:e2:b6:32:b9:28:f4:47:90:a7:88:17:e9:95:ed:0e:c1:
d0:a9:8c:67:df:ff:38:dc:75:5f:93:2f:f4:05:70:ee:28:ee:
b8:8a:80:5f:68:3e:a9:3d:4a:82:61:9f:23:9c:c9:c8:c1:45:
49:5c:4b:14:e3:85:8a:7f:6e:54:57:5e:5c:7f:c8:94:91:55:
05:1d:1a:e5:73:0d:b9:03:80:13:4e:83:97:7f:7b:eb:3b:41:
33:4f:71:5a:21:56:62:d0:d9:96:56:04:40:82:ec:cc:42:74:
10:65:8d:8b:99:f1:52:39:0d:0c:b9:d4:9a:cd:1d:9f:e9:0a:
46:51:40:70:27:96:8e:ae:3a:b6:f6:40:47:b3:1d:4e:e7:ed:
12:5e:65:7e:95:b2:27:03:6a:5e:76:e8:2c:a5:37:5c:c8:42:
52:15:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:29 2026 by rpki-client