
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json)
Hash identifier: Sg/XAkrQGLjZq9R2rrHQZS23PFpgW695OtkAvx8D4MA=
Subject key identifier: 1D:71:14:C4:CE:EF:23:80:E9:84:60:83:A1:3F:08:57:82:D9:44:38
Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
Manifest number: 011E
Signing time: Thu 23 Jul 2026 07:44:08 +0000
Manifest this update: Thu 23 Jul 2026 07:44:08 +0000
Manifest next update: Thu 30 Jul 2026 07:44:08 +0000
Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: GzJK5W0u1f9empxbLDvkrCM6NPRTWMgbH7VksVCCwn4=)
2: 965254F8278811F09217002CC4F9AE02.roa (hash: 0RhsOifNGasCmCxCAJFq65+7Iqu3gbPwoj7AcEDMVxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09
Validity
Not Before: Jul 23 07:44:08 2026 GMT
Not After : Jul 30 07:44:08 2026 GMT
Subject: CN=6a61c648-5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:a7:46:28:e8:99:1d:d3:39:c7:6f:fb:81:
39:ee:17:ad:70:d9:9d:b8:52:84:31:79:ac:36:be:
5b:43:a2:e1:29:a9:6a:c2:75:b8:0c:89:34:e3:f5:
24:a2:ae:55:5f:34:7f:a2:cd:29:4b:77:c9:d8:ea:
2f:cd:79:0b:05:d0:ed:21:b2:45:2b:fd:f5:fc:74:
2b:94:1d:ea:4f:e5:00:c7:33:6c:4b:2c:1a:14:88:
c7:9d:a1:29:cd:2d:a3:f7:f0:02:1b:d6:d7:71:fa:
b2:94:02:33:49:13:7b:0e:4a:68:f3:d2:42:25:d0:
b1:da:3e:c8:e7:1b:98:29:8a:71:7e:cb:6a:4a:bf:
fc:73:69:39:3b:56:61:d5:e2:e9:db:0e:89:01:28:
5a:75:f1:4d:61:e0:7b:99:b2:a7:47:b0:c0:df:db:
67:e0:aa:0b:cd:3f:1f:13:e7:18:d9:dc:dc:f1:52:
c8:16:2b:de:7e:12:b1:23:fb:b7:04:92:18:26:05:
bf:db:10:e5:32:c2:60:49:e0:5f:f1:b9:ec:43:5f:
d9:58:fb:e6:7f:f9:93:20:6d:e7:4d:c7:75:17:c0:
d8:d9:12:8a:85:90:72:b9:63:47:50:25:7c:60:28:
ce:17:31:2c:28:5b:a5:fd:ff:6b:0d:00:51:cd:27:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:14:C4:CE:EF:23:80:E9:84:60:83:A1:3F:08:57:82:D9:44:38
X509v3 Authority Key Identifier:
keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:78:ab:dc:64:31:b2:29:87:ae:42:6e:b2:67:08:1c:c1:
45:83:0c:bb:d8:ec:a5:74:94:0d:6d:8d:67:61:58:0b:e0:d8:
75:1b:15:84:33:15:f4:84:c9:35:94:0e:54:56:0f:8f:c4:76:
15:5e:e7:e2:3a:82:8e:e2:76:32:f6:0e:79:06:7b:b3:ea:7d:
4e:55:3f:a1:be:2e:8f:73:1b:7a:9a:ee:8e:2a:6a:f2:04:6f:
cb:7c:47:04:6f:63:a5:35:24:00:96:27:01:20:4d:5b:41:65:
78:62:f3:5a:f3:31:00:22:18:d9:9d:05:3f:d6:b7:0f:09:d6:
93:57:ae:b3:16:e7:e2:6a:fb:e2:95:5d:ec:6b:8e:84:cf:c2:
4a:3a:f2:43:c9:cc:b3:0a:89:6b:8d:26:ba:22:78:c9:fb:a8:
b3:fa:9c:56:84:a1:6d:6b:27:de:a7:fd:90:26:01:ea:2c:ce:
58:20:e3:e6:06:98:26:b7:cf:67:6d:8a:4e:86:f2:4a:01:f5:
88:22:1e:fc:15:f8:80:1b:8e:c9:d3:d4:bd:fb:8d:33:e2:88:
3b:ab:9b:09:d8:29:04:f8:df:51:f7:f7:c2:20:2c:04:b7:17:
89:3f:2e:63:e2:af:4a:2b:4c:51:fc:db:3a:f8:b0:e5:e0:84:
84:78:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:29 2026 by rpki-client