
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier: YIxVSNDjlcgVxRAbPuHWEO9SXZoCoF24AumxGLJaF4w=
Subject key identifier: F0:45:41:3E:A2:EE:16:A6:57:0A:48:02:CC:6A:64:B5:FB:13:13:7E
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 1469
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number: 145D
Signing time: Tue 12 May 2026 16:53:43 +0000
Manifest this update: Tue 12 May 2026 16:53:43 +0000
Manifest next update: Tue 19 May 2026 16:53:43 +0000
Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: v5gSAAfw6fH6QXGGMoHFNYNMaIUR0mrodBYF6tw3x9Y=)
2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: T0Ym6/qSYZ8bInetk9oWjUHQlgplGzQpxO5OFOEk2VM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225 (0x1469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: May 12 16:53:43 2026 GMT
Not After : May 19 16:53:43 2026 GMT
Subject: CN=6a035b17-4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:98:5c:62:d4:58:98:5f:a5:84:48:44:54:
02:ac:d2:b4:c9:8c:3f:31:a1:9d:83:e4:eb:5b:51:
a8:57:d8:36:b5:82:ca:4e:df:d9:dd:3f:6f:a6:47:
2c:3b:01:43:67:65:16:5f:79:87:83:32:f9:52:f4:
36:d7:4a:6d:f3:4f:d7:5e:42:40:8b:9a:b3:b2:84:
39:1d:a3:93:e0:a6:5f:85:ff:21:19:2a:40:2d:6f:
09:1d:70:0d:16:0f:55:db:c5:8f:c8:c3:96:bd:1b:
55:d5:37:c2:0b:98:5b:9d:0a:6e:e7:45:a0:37:2f:
22:c4:c4:d4:ce:97:ad:41:5a:59:29:e2:fc:2d:7f:
30:2a:f4:a0:d8:bf:b1:ea:ef:6e:0b:59:a8:db:5f:
0a:44:c0:d3:77:12:d5:42:86:d5:a8:ba:17:98:28:
c1:5e:1e:9b:c9:f0:ab:07:36:07:68:23:d7:bf:d7:
77:14:8d:0c:bb:a3:22:52:78:50:cd:7b:7d:21:2c:
9d:33:4f:b8:2f:42:02:88:8e:6d:fc:e4:f5:2a:68:
dd:11:00:3d:a6:9d:32:86:1e:66:a2:91:05:e3:f9:
d7:b5:7e:ba:c3:e5:45:90:b5:53:1a:0f:3c:1e:a8:
c1:25:80:dc:5a:6c:f6:1f:94:b1:c1:b2:e1:25:55:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:41:3E:A2:EE:16:A6:57:0A:48:02:CC:6A:64:B5:FB:13:13:7E
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:64:12:32:b3:96:d3:b9:bc:63:7f:78:e3:b8:77:98:f2:
e9:d4:3f:65:c4:98:88:48:37:f9:5a:0e:01:ec:0a:d3:77:94:
c9:bc:22:55:6d:a2:93:26:52:20:f3:38:4f:cb:fa:62:a7:77:
c9:40:0b:90:03:f6:35:b8:bd:4d:aa:ae:03:d1:34:30:82:1f:
4b:2e:00:13:61:79:38:ab:4d:66:92:16:2a:01:76:db:2a:77:
c0:25:44:6b:14:c1:26:dc:f7:fe:8f:1e:e6:58:7d:cc:c1:80:
8d:38:7a:2c:54:b4:6a:88:13:d6:8b:2b:0a:2b:50:d7:03:2e:
0f:49:96:cb:b0:0c:3d:0f:35:79:9d:91:d4:ce:3e:2a:bb:b4:
38:63:b4:bb:31:7b:c8:5d:9b:31:06:35:e1:30:af:47:0a:8c:
8b:5a:e4:39:c8:ac:74:d8:60:9e:07:a3:b7:0b:0f:0b:46:8b:
84:6f:f5:f2:53:01:4e:5b:c0:18:71:23:54:66:14:7f:1d:c9:
97:f7:1d:44:23:0f:18:71:a0:50:a8:4c:18:af:58:39:54:0c:
4e:42:74:b7:86:d4:c9:0a:ba:07:22:e1:c3:9d:e7:d7:28:8b:
dc:71:c6:d0:8d:0d:cd:1f:30:72:14:85:84:7a:c5:f3:bf:73:
00:83:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:17:31 2026 by rpki-client