
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: CMYy37yWd19IL/jbO6kWjos8IJ6LQN90V9KK/Kxqwws=
Subject key identifier: 66:5D:9F:0B:31:14:B6:89:63:02:2F:22:7D:C7:B6:D3:38:0F:FE:0B
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: 89
Signing time: Thu 23 Jul 2026 09:27:34 +0000
Manifest this update: Thu 23 Jul 2026 09:27:33 +0000
Manifest next update: Thu 30 Jul 2026 09:27:33 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: D3+Vs4ejPeU9NctTC19vIstZ/tk2FMzPCix3GKkXvMA=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Jul 23 09:27:33 2026 GMT
Not After : Jul 30 09:27:33 2026 GMT
Subject: CN=6a61de86-5ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:28:af:1c:fb:64:4c:b6:9f:c2:c9:8d:a6:
ca:b0:61:3f:71:e2:83:58:a5:95:ee:22:ba:d3:13:
69:c6:33:93:99:31:9e:32:de:ff:28:2e:3e:e1:6c:
f6:d6:a6:b7:9a:14:1f:11:61:b7:58:e5:56:d7:17:
04:9f:b7:b5:f1:7c:13:38:00:44:35:90:8e:ee:64:
1c:9d:4b:aa:1a:d4:a6:dd:71:a9:4e:ba:d8:9f:33:
c9:53:48:11:c2:0c:47:db:db:ca:da:70:db:ac:e1:
27:c8:a0:cb:9d:80:4d:14:6e:3c:f4:c1:9f:4d:2e:
4e:ae:40:c3:8f:66:29:ef:ea:0d:cf:77:75:c4:06:
49:d3:14:59:75:27:f8:d4:fc:75:42:88:65:e8:99:
15:71:4f:bc:3c:bc:bc:74:4a:0d:ea:1e:a6:a1:0c:
22:71:60:07:f2:24:95:b8:69:75:b4:b2:1e:db:de:
96:ff:e5:a3:35:d0:49:61:de:1b:49:fe:0a:8c:02:
34:3b:3a:02:23:3f:c0:56:40:59:e7:29:a0:8d:39:
84:a9:8f:f2:c1:da:4f:de:a3:2a:3e:4f:5d:2b:05:
f6:72:1a:dc:a6:47:87:ca:a6:20:67:43:ca:89:dd:
27:43:42:8b:c6:83:7f:f1:ed:19:90:87:5e:7d:4e:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:9F:0B:31:14:B6:89:63:02:2F:22:7D:C7:B6:D3:38:0F:FE:0B
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:1c:81:0e:41:03:b7:81:f4:45:95:29:8d:c4:32:90:f2:8f:
50:76:ae:b3:f5:dd:54:6b:cc:a8:36:d2:3b:a5:35:e1:21:bc:
75:e9:6f:ff:4e:5d:1c:5d:88:36:ad:10:55:a0:0e:a1:1b:c7:
43:a3:a2:83:9b:56:91:18:0c:13:ae:b7:c0:9d:6e:a5:ae:c0:
86:9b:fa:87:0d:4c:4c:70:df:0e:f9:0d:e5:4d:60:86:7a:c8:
b1:4a:be:f9:f7:d5:eb:1a:1b:07:b3:7f:01:cc:4a:4c:b7:6b:
e5:46:3e:19:f1:c7:24:09:6c:eb:ea:ca:61:53:6e:4d:66:e1:
59:b6:93:16:08:28:de:af:b8:97:83:e7:5d:36:6d:a1:93:5f:
5d:10:db:7f:5e:d2:b2:2a:06:7c:0d:93:9b:33:10:2f:57:58:
fc:b4:a0:30:b3:8d:95:73:a0:5b:52:62:92:70:aa:72:bf:bf:
a1:d8:5d:0f:33:6d:36:5b:04:6c:90:a8:c3:db:b3:18:a8:53:
c5:c9:9b:9c:d5:41:71:be:03:00:11:26:46:62:73:24:4b:33:
bf:e8:21:4f:49:7e:18:0d:8c:ce:73:22:cd:ee:10:9f:24:a5:
34:ae:60:3c:e7:b2:a6:84:67:55:1f:1d:76:56:aa:68:f7:8b:
37:8b:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:26 2026 by rpki-client