
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier: jDLuku4yAoavGMyH/DCd68NVFVxArpXTDKgTz01wU5Q=
Subject key identifier: EB:40:1A:13:22:7E:6E:8B:27:49:0E:3E:F8:E7:CF:CA:CD:2A:23:D4
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number: 0461
Signing time: Tue 24 Mar 2026 23:50:22 +0000
Manifest this update: Tue 24 Mar 2026 23:50:22 +0000
Manifest next update: Tue 31 Mar 2026 23:50:22 +0000
Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: DOEcLJxkR3UaZtZHffOGk+KjBPTrSGbVkObPaY2qEPI=)
2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Validity
Not Before: Mar 24 23:50:22 2026 GMT
Not After : Mar 31 23:50:22 2026 GMT
Subject: CN=69c3233e-1f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:ce:70:b6:89:40:b1:15:3b:3c:49:8b:ca:
11:56:7c:c9:b8:0e:94:94:aa:e4:76:1c:13:4e:99:
88:ff:b6:17:a9:cb:1c:88:21:3d:1a:28:e1:6c:11:
7d:41:bb:cc:e3:b2:73:4e:cb:52:07:7d:2b:2d:db:
d2:b0:db:6c:0a:2d:1f:f4:5e:46:3d:0c:80:46:d9:
ee:a2:3d:f8:96:9f:60:df:b0:ba:bb:a7:28:90:4a:
fe:b1:e1:6d:3a:cd:8e:be:fd:70:e0:db:40:7c:ee:
f9:63:c5:72:51:3e:67:54:5f:38:e0:6e:72:7f:11:
68:22:da:e8:76:61:45:72:59:80:f1:57:da:bf:69:
6b:b7:43:64:91:a0:1e:72:44:c5:50:36:1c:2e:57:
77:fd:55:cb:64:f4:74:6e:db:45:00:a4:f1:9f:dd:
ee:26:9a:99:b4:09:ad:e7:3b:35:4a:c7:ee:a1:46:
18:d7:98:a5:38:b3:b2:a8:15:be:7e:95:c3:50:4a:
be:cc:50:06:ab:06:a0:2b:60:8f:c8:88:18:65:53:
02:b0:9e:06:de:9e:2e:ab:25:44:54:ae:7b:0a:39:
8c:18:8a:6c:b1:ad:ce:9a:66:d2:ff:f2:b2:f3:b2:
61:47:bb:d1:bb:18:f7:46:42:42:51:a7:16:9e:ec:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:1A:13:22:7E:6E:8B:27:49:0E:3E:F8:E7:CF:CA:CD:2A:23:D4
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cb:49:45:de:24:51:de:48:e8:9b:fa:97:94:0e:74:ab:c8:
40:63:29:27:a9:04:ba:46:a9:f6:e4:2a:0e:14:80:d6:0d:d8:
ea:09:b7:a1:cd:cf:0b:b0:74:2a:4b:b2:ea:f0:15:63:fd:f5:
4f:3d:fb:54:90:82:9f:a1:69:5e:a9:98:a3:ea:7d:76:c6:7b:
c1:e7:ee:3f:d8:b9:ce:2b:d6:51:b2:cb:7e:a2:ae:eb:d8:ff:
40:b3:27:78:18:78:5c:21:12:4e:fe:16:62:6e:3d:14:e0:82:
4c:10:91:ce:42:be:ef:79:00:a7:1d:59:73:47:1f:78:d7:fd:
1f:88:24:e1:e6:87:f6:2e:93:c8:91:87:91:fa:33:16:1d:d3:
ac:ad:23:bb:69:7b:5d:49:d3:d0:ac:e2:2e:87:a1:16:b3:18:
cc:b7:90:2c:47:f6:f0:f3:39:ed:df:75:bc:a2:37:84:1f:d3:
df:14:99:89:a1:16:0a:36:97:0e:84:69:f1:5e:d2:fc:2a:7c:
3e:17:35:30:36:62:be:dc:dc:88:0d:d1:c4:2a:c0:29:3d:e0:
7a:c8:52:44:7d:ca:96:12:fe:03:87:10:ce:32:e9:bd:81:fc:
cd:c8:dd:f4:18:82:59:04:c9:88:62:93:36:f8:1d:47:1a:33:
82:ad:c6:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5
MkRERUJERkMwHhcNMjYwMzI0MjM1MDIyWhcNMjYwMzMxMjM1MDIyWjAYMRYwFAYD
VQQDEw02OWMzMjMzZS0xZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttDOcLaJQLEVOzxJi8oRVnzJuA6UlKrkdhwTTpmI/7YXqcsciCE9GijhbBF9
QbvM47JzTstSB30rLdvSsNtsCi0f9F5GPQyARtnuoj34lp9g37C6u6cokEr+seFt
Os2Ovv1w4NtAfO75Y8VyUT5nVF844G5yfxFoItrodmFFclmA8Vfav2lrt0NkkaAe
ckTFUDYcLld3/VXLZPR0bttFAKTxn93uJpqZtAmt5zs1SsfuoUYY15ilOLOyqBW+
fpXDUEq+zFAGqwagK2CPyIgYZVMCsJ4G3p4uqyVEVK57CjmMGIpssa3OmmbS//Ky
87JhR7vRuxj3RkJCUacWnuwGAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtAGhMi
fm6LJ0kOPvjnz8rNKiPUMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC
Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj
LWhNek1MbU5zMkdTM2V2ZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfstJRd4kUd5I6Jv6l5QOdKvIQGMpJ6kEukap9uQqDhSA1g3Y6gm3oc3PC7B0
Kkuy6vAVY/31Tz37VJCCn6FpXqmYo+p9dsZ7wefuP9i5zivWUbLLfqKu69j/QLMn
eBh4XCESTv4WYm49FOCCTBCRzkK+73kApx1Zc0cfeNf9H4gk4eaH9i6TyJGHkfoz
Fh3TrK0ju2l7XUnT0KziLoehFrMYzLeQLEf28PM57d91vKI3hB/T3xSZiaEWCjaX
DoRp8V7S/Cp8Phc1MDZivtzciA3RxCrAKT3geshSRH3KlhL+A4cQzjLpvYH8zcjd
9BiCWQTJiGKTNvgdRxozgq3GPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:43 2026 by rpki-client