
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier: ewF7YwozZhfHbY7YDrXswoS5Sc8P7pRkWHvvHP/DTB0=
Subject key identifier: 3F:8E:5F:ED:05:39:FA:96:81:42:D0:FA:E6:EC:31:FE:3D:E0:C0:C7
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1B6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number: 1B2A
Signing time: Wed 22 Jul 2026 16:22:28 +0000
Manifest this update: Wed 22 Jul 2026 16:22:27 +0000
Manifest next update: Wed 29 Jul 2026 16:22:27 +0000
Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: MTgh8mXBGNG88kfPbnlWlw4y/hGKcAmncWXwLn/RE+k=)
2: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=)
3: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: qvhkzDn6OfQuvCTV8G5Fvq3qQbKfUPKsi0/SYUxzYw8=)
4: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: DZ5DPupzTqqmSWdwYpXblDHHSqI4zxqj2PRZ30A7k3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7019 (0x1b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Jul 22 16:22:27 2026 GMT
Not After : Jul 29 16:22:27 2026 GMT
Subject: CN=6a60ee44-1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:b2:7f:85:2b:14:e2:eb:96:4b:b9:52:d3:
9d:2b:89:61:94:1e:97:f2:8d:bf:43:a9:63:62:c4:
34:c2:57:bd:55:cc:c9:7f:64:71:4d:f7:71:ff:4f:
fb:a0:c5:de:cd:ab:e2:40:1d:ef:ae:cc:e5:99:38:
fa:4f:ad:38:bf:3e:a1:bd:c7:2a:dc:e4:58:97:58:
e3:f6:7c:b0:fa:d6:92:5e:a2:78:96:23:b3:c7:f3:
16:94:26:67:61:e2:34:af:19:7a:82:b6:95:ff:24:
ab:f3:bb:3d:0b:4d:6d:38:fe:e1:91:ab:b4:f7:04:
47:a5:9e:dd:34:88:06:34:a2:63:38:1e:cb:6e:b0:
2c:3c:bb:3c:7e:df:fd:7a:22:ba:50:3e:59:b0:cd:
48:c9:de:dc:bb:54:db:15:ef:35:e7:19:af:b1:1f:
19:df:fa:31:e2:97:68:0b:90:68:b1:62:2d:5c:16:
97:74:04:e5:83:5d:cb:94:ce:2f:16:13:32:e5:c7:
f5:f5:dc:4e:7d:52:c8:11:ea:23:f1:8c:51:b8:f3:
6c:26:0c:c3:4c:0e:07:89:a2:2f:1c:3d:ac:bf:9b:
91:a6:7b:ff:17:c3:6f:7c:74:e4:bc:ee:8e:ac:ff:
07:71:41:66:0d:20:f0:5b:51:e4:c5:6f:1b:38:8e:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:5F:ED:05:39:FA:96:81:42:D0:FA:E6:EC:31:FE:3D:E0:C0:C7
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:bb:6d:a3:4b:80:8c:78:2f:38:16:05:a2:77:a1:b3:b3:
34:e5:f3:ee:21:ab:12:c8:ce:57:91:e9:f9:44:c7:03:77:41:
e9:dc:0d:05:66:92:93:f7:85:f6:0f:2d:5d:d2:2b:5f:9b:2b:
d4:d8:95:0a:53:b7:f7:a7:28:d5:b8:32:3f:c2:45:cc:09:64:
7a:27:29:74:18:e7:19:b5:b9:6e:71:42:43:ab:16:58:90:52:
c3:73:2f:b8:d7:d1:b3:f6:da:26:c7:04:dd:c9:96:b1:8c:2d:
a8:e2:dc:3a:57:99:cc:fb:9b:5b:af:f9:e0:cb:32:1b:bb:7d:
22:57:20:93:3a:7e:12:c5:86:32:d7:f2:c2:51:5b:33:63:eb:
4d:a1:9c:51:39:62:0f:8c:47:46:42:bc:10:9b:3c:e1:4d:31:
2c:36:05:c0:9d:4b:d9:ac:50:d6:ad:2c:5d:d7:00:d1:57:8a:
49:77:f6:88:ac:4e:95:4f:d4:6b:d7:93:df:c7:e2:f6:c8:7b:
a6:a0:d2:60:25:2b:22:79:a2:e4:81:7b:c2:87:2c:4d:e0:a8:
f7:7a:f7:ff:9e:be:c1:91:2d:ce:fe:32:80:71:ac:27:bd:89:
11:0d:28:a6:8a:f6:b4:0c:84:b5:36:eb:64:cb:89:af:f1:0d:
a6:21:e3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:08 2026 by rpki-client