
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier: YiONk0sJMTcgim54SCDOM3ePWur7k5jLvrfYdcRZ7Ik=
Subject key identifier: 1F:D4:A4:53:B3:93:BB:FF:0F:BE:C6:3A:51:B5:4E:12:13:FC:CE:A1
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 058E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number: 057D
Signing time: Tue 24 Mar 2026 22:59:28 +0000
Manifest this update: Tue 24 Mar 2026 22:59:28 +0000
Manifest next update: Tue 31 Mar 2026 22:59:28 +0000
Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: fqPbBbjH0BC0rkVahP5Y/rNbavpM6skS0ou/POHU6+8=)
2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: Mar 24 22:59:28 2026 GMT
Not After : Mar 31 22:59:28 2026 GMT
Subject: CN=69c31750-f49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:04:dc:e4:4f:7a:c5:0b:23:35:35:3b:b3:
00:2b:04:63:fa:b7:15:af:73:7e:88:8c:fe:9b:3d:
d7:be:ff:df:f8:d1:6a:2c:24:ce:7e:43:c6:6e:e6:
70:56:77:e4:4d:fb:67:34:fc:77:95:d3:4e:7e:fe:
1c:25:3a:59:e6:b4:52:5c:68:8b:81:b2:61:01:4e:
b0:15:32:0c:c8:56:41:ea:52:43:4e:1d:8c:15:1d:
3b:e0:42:75:39:c5:c3:13:7d:2b:30:fb:ba:28:db:
3f:d3:8f:ad:ef:a2:03:f2:fe:d3:f8:62:88:d2:ae:
38:0f:e4:f4:97:30:12:de:14:da:1f:c3:3f:03:04:
86:41:ba:7f:5d:dc:6a:bb:3d:ba:30:69:d7:5b:74:
34:f4:11:16:c2:95:95:25:4f:95:bc:6d:05:3b:2d:
2c:16:69:eb:85:59:b0:0e:fd:d2:50:d0:4c:4e:ae:
1d:c3:2d:e6:e8:2e:6f:f9:0c:8d:d8:b9:30:36:90:
20:28:ef:5a:a7:5f:e5:aa:41:ac:a7:ac:67:fc:3d:
d9:d9:73:f3:af:61:c3:a2:32:d4:1b:91:09:c2:40:
d8:96:a8:81:f1:c3:b4:f8:d2:1d:61:62:29:bb:e2:
0c:17:ce:61:1a:d1:3a:70:7b:c4:08:e5:24:b2:98:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:A4:53:B3:93:BB:FF:0F:BE:C6:3A:51:B5:4E:12:13:FC:CE:A1
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:e4:2c:a0:48:fc:fd:9f:a5:1a:17:d7:4d:d7:ee:26:7f:
3e:c6:9e:43:9e:81:a8:23:5e:aa:75:d0:e7:b1:a4:d0:44:c4:
12:6f:ba:b3:a0:ee:1d:26:0e:2c:f5:b3:31:ba:b4:40:4e:0a:
d6:14:f8:e4:ce:33:e7:e8:7f:0f:82:ef:97:2c:dc:c4:6f:9d:
75:4f:72:ed:5e:98:ee:8a:9e:7c:24:ef:ae:65:ba:7e:5f:df:
64:93:dc:04:f1:be:59:89:6f:75:1c:a7:16:80:4b:e5:56:73:
e5:33:e4:93:76:3f:8e:85:3d:3e:06:cc:ed:1a:2c:9f:b4:2e:
55:83:80:14:47:87:fb:4a:fe:77:84:22:43:a3:8d:c7:cd:cb:
29:45:4b:42:e3:f6:68:b9:c1:c3:4b:17:b7:a7:75:4f:ed:a6:
fa:8b:a0:a2:65:6d:45:61:ab:93:32:e4:45:c2:e2:9f:fb:88:
02:39:f5:cf:e3:0e:13:7a:72:e1:22:74:7a:0f:d8:22:54:11:
31:7d:74:07:df:50:d9:30:02:53:96:9d:f2:22:28:0b:f4:c4:
a6:ec:26:5a:0a:05:7d:eb:aa:af:04:94:3f:00:ec:a6:f2:10:
1e:95:24:74:b7:bb:0d:e3:5c:5a:d2:9d:ba:f1:e7:61:b9:87:
c5:df:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:56 2026 by rpki-client