
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: aZQMpHQ/RkCPL27CtGL34aNQW7vN/rck6B6buVvutAw=
Subject key identifier: 11:A9:A9:64:82:30:93:41:D3:30:46:A7:B6:CF:0B:DE:31:B0:DB:8C
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0DFB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0DF0
Signing time: Tue 12 May 2026 17:53:30 +0000
Manifest this update: Tue 12 May 2026 17:53:29 +0000
Manifest next update: Tue 19 May 2026 17:53:29 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: gznEqKSXUbl3H4P2UURXyJus5SgY+Z6DF77ltuCR0Es=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: May 12 17:53:29 2026 GMT
Not After : May 19 17:53:29 2026 GMT
Subject: CN=6a036919-7552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:1a:75:f5:c4:02:98:5e:50:1f:5a:d6:c6:
78:5d:4a:07:08:d9:9e:9e:79:30:8b:e8:59:49:34:
b5:85:49:5d:b9:d5:82:f0:bd:f6:46:ef:3c:61:91:
99:b2:95:65:05:ad:3f:47:94:b2:20:e6:d3:90:d9:
b0:bf:a8:82:48:ea:0b:10:9b:3d:81:80:b4:78:53:
c8:69:c4:83:9b:b7:bf:16:d7:8d:eb:36:55:c7:b1:
c9:c0:62:3c:f3:f1:b2:06:be:96:68:65:0f:83:5d:
71:b9:b1:cd:04:87:e5:fb:20:60:a5:87:ff:61:bf:
e8:85:d2:91:88:79:63:46:15:bd:bc:1b:f2:35:a1:
a3:05:f3:9f:a6:db:d4:2b:3f:72:72:f9:ff:88:b6:
e2:35:0b:bc:15:42:91:4b:04:08:eb:75:62:03:85:
e1:4b:db:b5:1b:87:76:dd:2d:48:df:9b:3e:a1:5b:
12:66:93:85:8f:aa:58:bf:8f:08:50:d5:e7:9d:4d:
4a:36:16:0b:23:db:21:2b:b7:09:35:c4:bf:f5:27:
c7:42:fc:3d:28:6d:3d:ab:32:d7:06:c8:00:83:a1:
56:37:89:dc:46:b3:6e:68:a8:0b:9c:f7:f2:32:9b:
63:80:9b:c8:6d:05:af:be:ab:59:af:f0:cc:d6:93:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:A9:64:82:30:93:41:D3:30:46:A7:B6:CF:0B:DE:31:B0:DB:8C
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:be:a9:43:73:95:f2:95:17:dc:34:06:f4:27:84:50:8a:6d:
e0:ac:5d:5f:5d:6b:4f:ed:ff:94:f8:c7:aa:d5:db:a1:b9:80:
49:57:d5:78:a9:5d:88:09:64:22:37:a7:b4:27:11:fc:7d:b9:
ee:c6:e6:c8:be:fa:12:80:58:83:41:89:41:a1:4b:63:09:b1:
36:4e:64:ba:c0:3f:6c:e5:92:c1:41:80:1c:08:e0:83:8d:cf:
dc:ec:1c:c6:ad:3a:4b:1c:b9:e3:fb:fb:90:c0:e6:19:16:a2:
81:f0:0a:41:e2:bb:25:da:34:13:ea:50:5d:08:20:df:0f:f7:
cf:76:10:74:09:01:85:42:43:07:1c:82:90:44:c5:66:be:db:
2f:3c:ed:f4:81:26:35:8b:82:91:b4:59:f9:2e:c4:d0:e1:f8:
8e:1b:ec:b9:01:40:0c:a6:2c:c1:18:5e:e4:c7:21:53:e2:c8:
25:a7:55:e3:96:65:76:1a:92:78:6a:a6:aa:b5:86:dc:bf:8e:
ff:b6:d2:9c:15:2b:2b:fa:40:f8:f1:31:b8:73:bb:e2:72:f1:
3d:01:97:4a:73:cb:a3:42:e9:c3:4a:c6:f2:cc:d8:7c:08:9e:
f5:fb:44:4f:ca:f8:fa:74:1d:45:d6:4e:0b:1f:1e:96:5c:f5:
0a:a8:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:51 2026 by rpki-client