
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: zmg6egkb4c4ygZt0zCqbKeccg3LtG+oLa/pSvH/yYuA=
Subject key identifier: 97:6F:15:58:B3:17:79:93:CF:9B:AF:31:08:35:DE:E5:08:F0:59:83
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 0865
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 0841
Signing time: Tue 24 Mar 2026 20:39:21 +0000
Manifest this update: Tue 24 Mar 2026 20:39:20 +0000
Manifest next update: Tue 31 Mar 2026 20:39:20 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: PJ+OJSwsY3QJHHwGSQl6xLjEMJEHgGTy43EUkBlKr5A=)
2: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
4: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Mar 24 20:39:20 2026 GMT
Not After : Mar 31 20:39:20 2026 GMT
Subject: CN=69c2f678-ea35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:d2:ee:3e:f3:40:f5:7d:e6:59:39:8b:9a:
77:d5:13:5c:20:e2:d8:13:18:65:a1:11:57:c2:ea:
7e:40:26:c6:b3:a2:4f:a2:5f:67:ae:72:3f:1f:cc:
02:0f:ed:a9:72:8e:a1:2d:ab:dc:1e:33:01:26:57:
68:42:13:f0:2c:45:99:eb:1b:95:84:4a:ef:14:86:
bf:ad:b8:02:09:70:69:14:7b:3e:ca:95:94:d0:55:
38:1a:d2:9b:fe:c3:27:d0:ba:65:21:1e:20:bb:fa:
8d:12:b2:1f:7c:ab:f0:b0:d8:f1:aa:31:da:c3:a7:
88:5b:f9:1a:de:82:06:64:87:1d:ae:26:0e:72:82:
9a:d6:7c:8a:f4:9b:8e:43:d8:28:40:0b:f5:b5:ef:
40:e9:8f:b9:2e:e0:b0:fa:b2:f8:7d:50:c9:d3:12:
e6:d9:39:53:a9:f6:71:b7:d3:a8:b3:20:bf:ba:58:
b0:e6:f7:bd:aa:c8:0a:0c:1c:16:fa:5a:77:8f:8c:
b9:cd:45:8b:ad:0c:83:29:aa:65:42:cd:12:66:47:
ec:bb:ab:2f:63:1c:3a:a3:1d:ea:06:f1:74:45:14:
bb:2e:96:e1:e1:3e:83:66:64:a8:fc:9c:99:b6:f1:
84:76:7f:32:94:88:5c:c7:bb:1d:2a:4f:4c:09:17:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:15:58:B3:17:79:93:CF:9B:AF:31:08:35:DE:E5:08:F0:59:83
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:50:49:48:e5:20:f9:e9:80:d9:f4:92:45:aa:62:85:ef:8b:
57:04:c6:5c:c3:06:3d:c9:c9:f1:15:e8:30:cf:28:7c:e5:76:
4c:53:9b:a0:c1:99:0d:a8:1d:8f:a1:81:0b:97:ef:51:8d:e8:
ec:5b:e4:58:34:0d:03:19:77:92:8f:f5:ce:33:1b:ab:a3:a9:
4c:9e:d9:2e:ee:f0:67:6c:4b:a8:e1:70:b7:22:c2:ca:a8:40:
af:b5:34:aa:e4:06:ea:6f:82:5d:fb:1a:e3:5f:33:fb:e2:9e:
47:2c:b0:05:e9:58:2b:61:68:09:52:0c:28:9a:e3:76:ac:a8:
53:80:42:17:fa:53:ef:95:59:59:2e:e8:f2:d6:d7:85:2b:ec:
42:a1:2c:f3:d1:eb:12:cd:1c:91:b7:e9:cc:19:6c:c9:ae:e1:
c8:8e:de:6c:97:fc:63:89:c6:d4:b3:42:5f:f2:35:05:4d:fe:
35:dd:1d:f7:48:6f:b1:31:70:7e:6c:33:5f:87:96:77:16:1c:
a5:ef:40:c6:14:e2:60:8c:9c:08:cd:5e:f2:a9:6b:06:ce:25:
45:ab:a4:2c:45:ad:20:25:a9:77:95:0c:30:8e:66:00:73:0f:
54:fa:24:63:17:26:87:49:07:93:e4:b4:2b:d3:56:b0:72:97:
39:8f:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:47 2026 by rpki-client