
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier: Nf34T0LQsjYbkcPGIUUxIaWZ9FanHKUZ4SxNVnFOD4o=
Subject key identifier: B3:21:83:3E:6A:56:A5:86:48:4B:18:A3:BD:C0:A4:B3:51:14:06:64
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 1450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number: 1444
Signing time: Tue 24 Mar 2026 16:47:43 +0000
Manifest this update: Tue 24 Mar 2026 16:47:42 +0000
Manifest next update: Tue 31 Mar 2026 16:47:42 +0000
Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: OcL2HcLz2paF8q3ANMw7kxPDlfRH/IAJK23XqRgem9c=)
2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: T0Ym6/qSYZ8bInetk9oWjUHQlgplGzQpxO5OFOEk2VM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5200 (0x1450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: Mar 24 16:47:42 2026 GMT
Not After : Mar 31 16:47:42 2026 GMT
Subject: CN=69c2c02f-18be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:90:61:2a:c8:17:19:0c:4e:85:d5:56:b6:
7e:c5:7f:33:1f:dc:b3:c7:d0:bf:0d:a4:7a:1c:f2:
76:28:2b:49:36:d4:36:1b:45:e4:3b:2f:3f:07:2d:
ec:04:ec:f8:82:28:b7:7a:b5:c7:73:10:c2:59:89:
de:67:4e:99:05:be:75:a8:08:cc:68:88:5a:48:84:
d8:b5:26:0b:be:78:a7:e6:13:4f:86:b7:52:eb:a3:
89:a5:d6:54:c7:2a:e8:fe:cc:7c:89:d6:4c:5e:70:
4b:a2:39:4a:41:9b:21:47:f7:5c:59:eb:11:c6:87:
d4:ec:a5:d8:3f:82:55:3a:29:6f:06:74:4e:79:9f:
38:c1:82:19:9f:ca:b7:70:25:6d:cb:93:c3:d6:80:
c9:3c:41:1b:55:86:c1:3e:30:0c:07:ce:44:8f:ed:
6b:f9:d0:36:e0:b7:51:db:6a:0c:f4:44:b1:d6:4e:
d5:70:dc:26:a6:2e:d0:d6:be:b4:ec:e8:74:ed:58:
23:6c:d3:bc:9a:6b:77:c2:21:86:ff:64:14:76:60:
05:df:eb:c0:29:f7:1c:38:b8:8e:84:98:47:ee:47:
9d:54:2e:45:d6:ee:f2:b0:93:40:80:0f:b4:bd:af:
fc:20:e0:24:d4:c3:e3:3c:88:e9:79:4a:3e:9a:d6:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:83:3E:6A:56:A5:86:48:4B:18:A3:BD:C0:A4:B3:51:14:06:64
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:56:e4:cd:6c:df:a2:45:d3:3e:ea:b3:36:61:44:d7:38:
23:e1:72:dd:d9:d1:69:5b:28:2a:c4:90:fc:5d:b2:c4:e8:d0:
a6:a0:77:1a:3d:ee:95:42:76:fb:e5:3c:5a:8f:47:6e:80:15:
05:1d:a4:a6:69:ab:e2:95:38:d4:fc:ae:18:90:58:c7:1f:a1:
07:06:a5:31:f8:0c:3e:e0:3f:76:82:92:89:85:71:82:ff:c6:
8d:a3:6d:dc:70:a2:7c:71:4a:9e:93:e2:e5:81:f8:9c:24:5f:
59:fc:9d:b3:ea:6b:5f:36:ce:05:46:23:84:a4:de:72:7a:47:
78:7d:0f:d2:fd:f6:24:3f:2a:9e:54:ca:0a:87:03:37:fd:65:
34:f0:3b:18:9d:f8:f9:45:ed:4e:a5:4f:65:07:a0:c2:61:2e:
ff:63:93:21:f6:0f:c6:bb:b6:9d:7c:18:e6:63:ce:4a:78:aa:
5e:81:f1:b0:ca:b8:2b:57:ee:62:7f:9a:3f:ae:7a:19:b8:d4:
47:f4:50:66:01:5f:4c:06:5a:2b:36:1e:79:30:28:e8:7d:8a:
f0:1b:ac:99:93:ee:9a:3d:2f:bc:9a:24:0e:9b:46:4e:74:37:
70:11:c9:1a:3b:11:5e:9e:a8:55:1a:54:f6:3c:f5:37:4a:3b:
d0:0b:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:13 2026 by rpki-client