
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File: o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier: RJ68jpqaYIq8j3CJGSj2VUwE4kJGo7FbNHmjCiG+L+Q=
Subject key identifier: 35:E1:24:A4:29:8F:25:CE:2F:B7:72:0B:BA:AC:49:8F:43:E0:7D:C6
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer: /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number: 56
Signing time: Mon 11 May 2026 08:21:29 +0000
Manifest this update: Mon 11 May 2026 08:21:28 +0000
Manifest next update: Mon 18 May 2026 08:21:28 +0000
Files and hashes: 1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: 3nAZu2RTUmpTtVgpLJUqRXPZx6KaeefobmVoJdwkIUk=)
2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Validity
Not Before: May 11 08:21:28 2026 GMT
Not After : May 18 08:21:28 2026 GMT
Subject: CN=6a019189-6bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:bb:70:cc:4b:01:bf:32:0b:2c:aa:e0:2e:
16:fa:d4:86:0c:c3:0d:b7:8f:88:87:18:b0:9c:85:
b7:9a:7b:a2:5f:9b:31:05:42:04:3d:74:d8:36:64:
31:5d:6a:22:bf:14:e0:a2:80:87:44:e0:c8:b9:48:
d4:2d:77:80:d1:8f:d0:b4:65:4a:e0:87:11:86:da:
e6:8f:d0:2f:a8:f1:03:34:9b:35:c9:6b:fe:8e:82:
d8:b8:54:cf:53:a0:6c:8d:ad:4b:26:2c:a5:ca:ab:
35:be:6e:6e:b3:76:f3:60:54:a2:46:90:6b:27:52:
ea:e8:fd:6f:4a:a4:4a:a4:b5:ca:ad:67:7b:92:7e:
c7:fb:83:1c:01:3b:d4:40:28:24:be:b9:75:3e:6b:
e6:d3:32:c2:cf:12:b6:f7:1b:84:45:9d:87:48:da:
4a:7f:82:91:62:14:c6:c9:1b:0c:b4:18:dd:9f:38:
12:28:c1:74:af:d8:36:e5:72:d7:a9:56:d3:2c:b4:
db:96:37:30:54:e6:0a:f2:3e:34:da:8c:72:eb:10:
d9:f2:c3:e5:a1:22:e7:b7:65:d0:6f:df:11:eb:10:
c5:2c:fe:7a:6d:d7:25:97:65:fe:1c:8e:44:43:8c:
21:c3:27:2f:f2:1a:a4:3d:fb:61:3b:42:84:d0:87:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E1:24:A4:29:8F:25:CE:2F:B7:72:0B:BA:AC:49:8F:43:E0:7D:C6
X509v3 Authority Key Identifier:
keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:40:c6:42:c5:a7:11:35:5f:ec:e9:f1:94:eb:89:dc:cd:03:
20:95:21:ac:e0:37:d9:2c:53:1a:9e:91:86:b9:95:6d:e2:f7:
ba:63:5c:e1:50:33:05:df:2f:73:90:2c:2d:df:4d:d2:5f:72:
b4:09:2e:a9:82:5b:db:53:c9:54:2c:11:51:6a:de:f3:5a:0e:
5a:29:e9:08:e2:4a:51:a5:85:bd:6f:f5:13:1f:e2:81:b8:30:
7d:f5:df:c9:ee:93:0c:2f:29:ea:35:ab:80:6b:2e:aa:19:d2:
e4:30:03:8f:4e:65:6f:5d:ef:2a:29:46:be:4a:97:1f:a8:2c:
ff:f3:68:a9:87:f5:da:03:4e:49:c1:b1:13:28:07:81:fe:c0:
0a:8c:75:2a:30:f8:df:b3:36:63:66:0c:27:5f:25:1e:54:11:
c9:98:f3:4c:15:c0:46:e2:9d:bd:30:53:81:2d:a8:db:80:7e:
ef:64:6f:64:c1:9d:39:4c:5f:ca:26:0f:6a:3d:cb:c4:f6:19:
60:fa:fa:3b:a0:22:ff:24:77:f4:24:5a:03:af:6a:05:44:a7:
4e:9d:c6:d3:be:de:6b:c3:37:3c:da:06:7a:59:72:43:bb:7d:
8d:56:ef:e5:84:4e:15:1e:43:fb:2f:4d:c9:fe:b1:88:7b:29:
3c:1d:51:dd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTNENzExMC8GA1UEBRMoQTM4NzAyMTgyQjA5QUE2MTc4RUJDQUFCQjJGQ0Y4REE1
NEFERUI1MzAeFw0yNjA1MTEwODIxMjhaFw0yNjA1MTgwODIxMjhaMBgxFjAUBgNV
BAMTDTZhMDE5MTg5LTZiYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYl7twzEsBvzILLKrgLhb61IYMww23j4iHGLCchbeae6JfmzEFQgQ9dNg2ZDFd
aiK/FOCigIdE4Mi5SNQtd4DRj9C0ZUrghxGG2uaP0C+o8QM0mzXJa/6Ogti4VM9T
oGyNrUsmLKXKqzW+bm6zdvNgVKJGkGsnUuro/W9KpEqktcqtZ3uSfsf7gxwBO9RA
KCS+uXU+a+bTMsLPErb3G4RFnYdI2kp/gpFiFMbJGwy0GN2fOBIowXSv2Dblctep
VtMstNuWNzBU5gryPjTajHLrENnyw+WhIue3ZdBv3xHrEMUs/npt1yWXZf4cjkRD
jCHDJy/yGqQ9+2E7QoTQhzGJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNeEkpCmP
Jc4vt3ILuqxJj0PgfcYwHwYDVR0jBBgwFoAUo4cCGCsJqmF468qrsvz42lSt61Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3LzZGREMwMTZDQ0U4
QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1GNDY4cXJzdno0MmxTdDYx
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbzRjQ0dDc0pxbUY0NjhxcnN2ejQybFN0NjFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
M0Q3LzZGREMwMTZDQ0U4QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1G
NDY4cXJzdno0MmxTdDYxTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCnQMZCxacRNV/s6fGU64nczQMglSGs4DfZLFManpGGuZVt4ve6Y1zhUDMF3y9z
kCwt303SX3K0CS6pglvbU8lULBFRat7zWg5aKekI4kpRpYW9b/UTH+KBuDB99d/J
7pMMLynqNauAay6qGdLkMAOPTmVvXe8qKUa+SpcfqCz/82iph/XaA05JwbETKAeB
/sAKjHUqMPjfszZjZgwnXyUeVBHJmPNMFcBG4p29MFOBLajbgH7vZG9kwZ05TF/K
Jg9qPcvE9hlg+vo7oCL/JHf0JFoDr2oFRKdOncbTvt5rwzc82gZ6WXJDu32NVu/l
hE4VHkP7L03J/rGIeyk8HVHd
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:24 2026 by rpki-client