
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
File: 1OdEGcvjVoAT4bz3doRyhsGYhFo.mft (raw, json)
Hash identifier: dUng6NUSzJAi/S5Xe/EU0bx2DwSgp7fbgp/sAcD8sHg=
Subject key identifier: CE:22:AC:2A:32:72:3A:2A:C6:07:21:82:5D:55:F2:53:27:2D:3C:19
Authority key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Certificate issuer: /CN=A91A547E/serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
Manifest number: 2C
Signing time: Thu 23 Jul 2026 10:45:52 +0000
Manifest this update: Thu 23 Jul 2026 10:45:52 +0000
Manifest next update: Thu 30 Jul 2026 10:45:52 +0000
Files and hashes: 1: 1OdEGcvjVoAT4bz3doRyhsGYhFo.crl (hash: AZdyD82K6hSps/HqhbldG8x7xn+zD8wB9A6cJpdQw9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Validity
Not Before: Jul 23 10:45:52 2026 GMT
Not After : Jul 30 10:45:52 2026 GMT
Subject: CN=6a61f0e0-3fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:80:39:a9:43:3d:82:f9:a2:52:b3:8b:af:
16:07:53:73:22:90:ff:a9:68:b2:2d:92:0a:07:1e:
6f:f2:6e:0b:5b:0a:18:f6:ba:c8:16:5f:65:63:80:
41:f7:ff:af:bd:44:67:8c:e4:f9:b4:50:c7:4f:44:
fd:c9:52:e0:a8:93:a8:2e:38:8e:4b:d8:1f:22:4b:
0a:a2:5a:6b:b6:b8:9d:1c:49:60:8c:ad:11:5c:a8:
a0:a0:f1:a3:aa:0e:d0:4a:a2:b2:35:b4:4d:7b:db:
07:fe:82:49:8c:47:6c:b8:8b:6a:1c:b8:68:b9:ed:
95:70:59:c4:87:1b:f4:13:c9:52:50:53:7f:9a:92:
cb:93:64:ae:97:c9:57:de:7a:c1:4d:f1:3d:f3:53:
66:65:91:b9:a3:f8:dc:9b:48:d3:fe:61:9f:cd:f4:
bb:94:e9:21:64:cd:2b:4c:4e:1b:fc:ab:50:70:a9:
1c:ea:76:b1:ef:b9:04:d1:20:c3:78:7c:65:dd:e4:
af:44:28:20:3d:12:b0:1d:d9:60:d5:30:dd:b0:05:
12:18:2f:ee:2f:5e:1a:80:13:1e:57:59:ff:b0:4d:
0d:a6:a6:4f:40:77:c0:0e:7b:98:34:36:3c:08:48:
5f:f4:d6:7d:0c:a3:b5:32:0f:b6:c1:a2:ab:2c:33:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:AC:2A:32:72:3A:2A:C6:07:21:82:5D:55:F2:53:27:2D:3C:19
X509v3 Authority Key Identifier:
keyid:D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:17:67:8e:d7:8b:4e:21:90:a0:88:af:13:69:ba:e5:bf:
99:e0:fe:05:fc:ed:d6:6c:0a:ea:7e:4a:b2:13:6e:47:49:e3:
a8:38:9b:c4:5f:3f:7a:53:ab:3c:ba:39:0e:44:fd:1b:20:80:
25:b7:22:be:79:fb:2e:bf:32:b7:c6:4b:2e:73:fe:5c:73:2c:
e3:d0:14:ab:99:dc:1f:fa:dd:d0:ff:47:21:4f:70:32:55:e6:
93:30:2a:b0:d7:80:4f:5b:20:06:77:40:5f:b1:b7:a6:e1:53:
6d:23:c2:1c:08:a4:97:f1:8c:f8:8a:ed:a7:e9:d8:18:37:35:
1c:d5:a4:0a:6f:bf:87:3a:88:9c:6f:bc:19:fd:b3:cb:f6:a7:
34:07:b9:c2:1c:5c:36:90:90:49:4d:f3:84:7b:1b:5f:bb:b8:
3b:5e:04:6a:ca:6d:07:c1:9c:bc:9c:60:90:35:c1:f7:de:65:
48:6f:c0:42:30:49:e4:e6:42:df:46:3e:bd:62:23:ee:d8:29:
45:f3:ea:e7:50:41:f0:57:58:45:e0:de:bc:5e:0e:74:88:9b:
de:89:09:b7:aa:1e:d3:c2:f7:f7:35:95:16:9c:e1:b0:20:53:
da:98:4e:22:ce:47:67:bf:32:bf:e9:1c:cb:c4:77:67:b9:4c:
47:1f:46:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NTQ3RTExMC8GA1UEBRMoRDRFNzQ0MTlDQkUzNTY4MDEzRTFCQ0Y3NzY4NDcyODZD
MTk4ODQ1QTAeFw0yNjA3MjMxMDQ1NTJaFw0yNjA3MzAxMDQ1NTJaMBgxFjAUBgNV
BAMTDTZhNjFmMGUwLTNmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5YYA5qUM9gvmiUrOLrxYHU3MikP+paLItkgoHHm/ybgtbChj2usgWX2VjgEH3
/6+9RGeM5Pm0UMdPRP3JUuCok6guOI5L2B8iSwqiWmu2uJ0cSWCMrRFcqKCg8aOq
DtBKorI1tE172wf+gkmMR2y4i2ocuGi57ZVwWcSHG/QTyVJQU3+aksuTZK6XyVfe
esFN8T3zU2Zlkbmj+NybSNP+YZ/N9LuU6SFkzStMThv8q1BwqRzqdrHvuQTRIMN4
fGXd5K9EKCA9ErAd2WDVMN2wBRIYL+4vXhqAEx5XWf+wTQ2mpk9Ad8AOe5g0NjwI
SF/01n0Mo7UyD7bBoqssM3g5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUziKsKjJy
OirGByGCXVXyUyctPBkwHwYDVR0jBBgwFoAU1OdEGcvjVoAT4bz3doRyhsGYhFow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NDdFL0JDQkU0RTIyNDFE
QTExRjE5RERDODkwMkI1ODMzNzczLzFPZEVHY3ZqVm9BVDRiejNkb1J5aHNHWWhG
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMU9kRUdjdmpWb0FUNGJ6M2RvUnloc0dZaEZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1
NDdFL0JDQkU0RTIyNDFEQTExRjE5RERDODkwMkI1ODMzNzczLzFPZEVHY3ZqVm9B
VDRiejNkb1J5aHNHWWhGby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4lhdnjteLTiGQoIivE2m65b+Z4P4F/O3WbArqfkqyE25HSeOoOJvEXz96U6s8
ujkORP0bIIAltyK+efsuvzK3xksuc/5ccyzj0BSrmdwf+t3Q/0chT3AyVeaTMCqw
14BPWyAGd0Bfsbem4VNtI8IcCKSX8Yz4iu2n6dgYNzUc1aQKb7+HOoicb7wZ/bPL
9qc0B7nCHFw2kJBJTfOEextfu7g7XgRqym0HwZy8nGCQNcH33mVIb8BCMEnk5kLf
Rj69YiPu2ClF8+rnUEHwV1hF4N68Xg50iJveiQm3qh7Twvf3NZUWnOGwIFPamE4i
zkdnvzK/6RzLxHdnuUxHH0aC
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:55 2026 by rpki-client