
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json)
Hash identifier: Zt5qdH2SHuACzVuJTdwMELmwt9OpEwR5J99fykrsbj8=
Subject key identifier: 1D:56:BA:5C:1D:3A:1E:1D:62:8A:74:FB:8E:14:F1:67:6F:7F:71:86
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial: 05B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
Manifest number: 05A0
Signing time: Tue 24 Mar 2026 22:54:36 +0000
Manifest this update: Tue 24 Mar 2026 22:54:36 +0000
Manifest next update: Tue 31 Mar 2026 22:54:36 +0000
Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: JUk85/5ob/NksgzmJ08OIlUTO3ZbW8r1/ht9AtTZXjA=)
2: 02817064DCD811F0A33153DF516F56BC.roa (hash: A0XhDPuStyqiQYD+/HDNtMid0Z+VUqgdpsSkPHtmU0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Validity
Not Before: Mar 24 22:54:36 2026 GMT
Not After : Mar 31 22:54:36 2026 GMT
Subject: CN=69c3162c-a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:f9:6d:04:22:6b:0d:21:3c:e9:fb:2f:cc:
de:af:53:91:3f:5f:b3:0b:4e:ec:5c:04:cb:83:a5:
54:32:7b:dd:e2:3c:6d:35:1b:e2:23:ac:d1:e9:78:
a9:d5:dc:1a:ed:2c:5c:58:99:d7:2d:b1:82:39:50:
cd:eb:93:d5:e7:ae:c2:14:95:3f:e1:84:71:79:0d:
62:89:ed:3a:73:1c:5c:96:e1:b3:9a:ba:fe:f7:66:
7a:d7:07:cb:c1:33:c8:b7:a7:70:62:29:71:3e:1f:
70:c2:8c:40:db:c6:9c:de:cb:ec:11:a5:4a:ef:eb:
d1:0c:b5:41:ca:08:8e:80:bb:cf:c3:19:5c:1c:04:
83:a3:58:5c:8c:1b:fb:ed:bb:9b:8b:85:1f:1d:a2:
bd:43:8c:6c:34:b0:24:a5:d2:2f:26:e7:a6:67:25:
ef:df:0d:4f:63:37:f0:0b:67:03:2e:7b:e0:3f:14:
ac:fc:14:7b:a9:da:63:00:2b:81:23:88:05:46:a3:
13:67:34:b2:57:94:ca:15:c9:43:b3:a3:e9:d5:56:
00:8f:ba:14:8d:4d:66:61:d6:84:35:f1:b3:a0:2f:
db:a2:64:0b:2a:a9:9c:98:e5:99:bd:e6:1b:75:da:
8f:7b:0d:8a:c2:fe:3b:f0:a3:d0:2d:55:5e:2a:fb:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:BA:5C:1D:3A:1E:1D:62:8A:74:FB:8E:14:F1:67:6F:7F:71:86
X509v3 Authority Key Identifier:
keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:67:07:00:9d:36:39:73:19:5e:d9:94:19:55:4a:1c:26:
75:6f:7f:09:42:eb:a0:07:1e:06:56:14:ca:28:df:a2:44:35:
35:b9:fa:4c:19:4f:8e:aa:93:ee:2d:6a:bc:51:21:7e:35:f6:
3b:9b:4b:52:5f:ff:4b:28:1b:bf:ca:ef:ba:c4:8d:b1:d3:00:
c2:bc:4a:f7:93:25:ff:13:81:03:1c:20:50:b3:05:19:2e:c0:
41:fc:99:31:ed:23:c2:98:3b:f2:9d:90:dd:d2:7b:4f:ba:b9:
6b:62:35:06:ac:49:1d:79:03:3b:f7:b2:0a:ba:ca:16:7f:94:
7f:d9:50:b8:ae:8d:a0:79:12:9d:53:b7:d0:bd:f9:8b:57:b1:
d0:fa:be:11:a2:47:b8:c4:23:ea:99:71:82:07:41:bb:2f:cd:
0a:9c:51:d5:6c:45:cf:46:ea:a0:5a:03:fb:51:bd:e9:92:1e:
98:ef:76:cb:24:10:8f:f1:e1:29:84:c4:56:84:a8:78:00:0c:
e6:fc:d6:db:55:6f:4b:30:58:f6:99:98:3a:13:18:5c:64:d0:
2e:1b:a6:98:9f:53:e1:44:b9:b0:91:25:ae:9f:48:c2:97:dc:
9b:90:a6:21:50:75:54:0f:f8:06:73:29:e4:5c:ad:46:8b:72:
e8:9d:29:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE
REZFMUY2NTUwHhcNMjYwMzI0MjI1NDM2WhcNMjYwMzMxMjI1NDM2WjAYMRYwFAYD
VQQDEw02OWMzMTYyYy1hOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6OT5bQQiaw0hPOn7L8zer1ORP1+zC07sXATLg6VUMnvd4jxtNRviI6zR6Xip
1dwa7SxcWJnXLbGCOVDN65PV567CFJU/4YRxeQ1iie06cxxcluGzmrr+92Z61wfL
wTPIt6dwYilxPh9wwoxA28ac3svsEaVK7+vRDLVBygiOgLvPwxlcHASDo1hcjBv7
7bubi4UfHaK9Q4xsNLAkpdIvJuemZyXv3w1PYzfwC2cDLnvgPxSs/BR7qdpjACuB
I4gFRqMTZzSyV5TKFclDs6Pp1VYAj7oUjU1mYdaENfGzoC/bomQLKqmcmOWZveYb
ddqPew2Kwv478KPQLVVeKvv1hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1Wulwd
Oh4dYop0+44U8Wdvf3GGMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw
OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy
VEtqSUgtUDIzTHpkX2g5bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUN9nBwCdNjlzGV7ZlBlVShwmdW9/CULroAceBlYUyijfokQ1Nbn6TBlPjqqT
7i1qvFEhfjX2O5tLUl//Sygbv8rvusSNsdMAwrxK95Ml/xOBAxwgULMFGS7AQfyZ
Me0jwpg78p2Q3dJ7T7q5a2I1BqxJHXkDO/eyCrrKFn+Uf9lQuK6NoHkSnVO30L35
i1ex0Pq+EaJHuMQj6plxggdBuy/NCpxR1WxFz0bqoFoD+1G96ZIemO92yyQQj/Hh
KYTEVoSoeAAM5vzW21VvSzBY9pmYOhMYXGTQLhummJ9T4US5sJElrp9Iwpfcm5Cm
IVB1VA/4BnMp5FytRoty6J0p6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:58 2026 by rpki-client