
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: sBaRv0S9d17W3+Z+5EfeCXCYTNsL9pc4axCXx4+5L3g=
Subject key identifier: BC:73:FB:C0:93:FB:35:85:86:80:3F:8F:8C:FC:C0:27:9F:27:68:BD
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B36
Signing time: Tue 24 Mar 2026 19:05:14 +0000
Manifest this update: Tue 24 Mar 2026 19:05:13 +0000
Manifest next update: Tue 31 Mar 2026 19:05:13 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: CqePX9OojC1w2D+za5vA5Daz+pfWntXELC685WhEu9w=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Mar 24 19:05:13 2026 GMT
Not After : Mar 31 19:05:13 2026 GMT
Subject: CN=69c2e06a-0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:f5:45:db:08:18:00:69:03:db:67:bf:cf:
3d:d3:3f:03:31:41:0f:d3:0c:3a:82:92:48:51:9f:
01:dc:27:61:a5:63:3d:f0:e2:22:95:85:a5:0d:5d:
f3:5b:85:4c:f5:ca:32:b9:3d:d2:2b:64:59:82:c8:
1e:af:dc:a4:4c:9c:79:dd:b4:8b:8d:f1:69:04:d7:
17:73:ef:90:8c:e6:09:e8:f8:f6:9e:36:48:0d:dc:
03:19:78:ed:d2:91:eb:fa:de:27:f3:ee:eb:03:f5:
0a:43:73:7b:fa:54:2f:a3:00:8b:23:bb:ed:96:e6:
2a:b4:42:27:f4:1c:68:af:79:2a:60:17:2f:f8:b3:
20:5c:35:d3:1f:3c:5f:d2:7a:55:40:76:cf:dd:dd:
11:a4:37:3a:f2:83:cb:57:ee:8b:d6:8b:43:cc:c1:
15:09:8d:82:35:b6:c0:03:d4:a6:b3:37:8c:e4:66:
2e:ec:32:fa:9d:7f:82:cc:2b:55:75:d2:61:de:08:
1f:87:08:9f:fc:a6:b4:d4:b8:b3:93:56:92:26:84:
e5:46:13:eb:31:9e:ce:55:fe:ce:2e:62:07:c9:9c:
d2:35:46:33:6d:e3:9b:a2:9a:2c:55:56:14:ea:43:
06:20:b1:19:be:e7:b0:b9:58:12:3f:43:e8:96:35:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:FB:C0:93:FB:35:85:86:80:3F:8F:8C:FC:C0:27:9F:27:68:BD
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:90:16:89:f5:de:8b:d8:bc:1d:ab:98:d0:90:62:e1:f3:
eb:8a:1b:80:be:91:0c:d2:ff:e8:76:9f:8f:2b:64:11:74:d5:
89:0d:11:a0:7e:1f:99:77:bd:06:a3:63:86:6e:ee:37:e5:e9:
79:a3:ed:79:52:90:19:ac:e6:a7:18:bc:8a:15:7d:d1:2b:03:
48:e8:eb:37:92:f8:30:b0:40:65:ef:4b:32:d0:34:49:03:5e:
b8:34:4f:fd:86:87:ed:73:2c:8f:52:a4:94:e4:a3:1a:48:1d:
12:27:a1:4d:6d:ae:52:7c:43:de:e9:62:8d:a5:c6:6e:b4:24:
01:72:60:c9:9e:7d:5d:5c:20:70:3e:a5:c0:25:66:4b:8d:f4:
a3:9f:17:e1:4a:b2:56:f6:40:bc:a3:f7:ca:66:06:3b:8f:7a:
62:5d:df:cb:6b:0d:00:8d:a0:06:c4:71:18:fb:d0:f4:fe:72:
2e:0b:98:16:39:87:47:c6:8d:e7:c9:7a:14:44:65:53:d9:98:
c0:d5:14:e9:f6:a1:36:3f:4d:95:5f:59:7d:fd:d4:91:d1:9b:
6a:0d:54:4a:98:56:5a:50:6f:9c:5d:50:39:5d:a4:74:90:5f:
df:db:68:0a:38:d4:4b:24:32:85:6a:3a:75:57:0a:28:19:a2:
54:0b:e8:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD
RDIxNTFCMDIwHhcNMjYwMzI0MTkwNTEzWhcNMjYwMzMxMTkwNTEzWjAYMRYwFAYD
VQQDEw02OWMyZTA2YS0wZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoeT1RdsIGABpA9tnv8890z8DMUEP0ww6gpJIUZ8B3CdhpWM98OIilYWlDV3z
W4VM9coyuT3SK2RZgsger9ykTJx53bSLjfFpBNcXc++QjOYJ6Pj2njZIDdwDGXjt
0pHr+t4n8+7rA/UKQ3N7+lQvowCLI7vtluYqtEIn9Bxor3kqYBcv+LMgXDXTHzxf
0npVQHbP3d0RpDc68oPLV+6L1otDzMEVCY2CNbbAA9SmszeM5GYu7DL6nX+CzCtV
ddJh3ggfhwif/Ka01Lizk1aSJoTlRhPrMZ7OVf7OLmIHyZzSNUYzbeOboposVVYU
6kMGILEZvuewuVgSP0PoljVc4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxz+8CT
+zWFhoA/j4z8wCefJ2i9MB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4
Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2
V0VwMWpEcDlVZnJOSVZHd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADSmQFon13ovYvB2rmNCQYuHz64obgL6RDNL/6HafjytkEXTViQ0RoH4fmXe9
BqNjhm7uN+XpeaPteVKQGazmpxi8ihV90SsDSOjrN5L4MLBAZe9LMtA0SQNeuDRP
/YaH7XMsj1KklOSjGkgdEiehTW2uUnxD3ulijaXGbrQkAXJgyZ59XVwgcD6lwCVm
S430o58X4UqyVvZAvKP3ymYGO496Yl3fy2sNAI2gBsRxGPvQ9P5yLguYFjmHR8aN
58l6FERlU9mYwNUU6fahNj9NlV9Zff3UkdGbag1USphWWlBvnF1QOV2kdJBf39to
CjjUSyQyhWo6dVcKKBmiVAvoVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:25 2026 by rpki-client