
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: XKRBVaC9exxGd76007toHTlm7K+GEx0JEugXevLW4A0=
Subject key identifier: CC:B3:96:D8:42:22:66:16:05:0F:7B:A2:83:EE:7E:C5:C4:3D:B5:5E
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1089
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 106A
Signing time: Tue 12 May 2026 17:25:43 +0000
Manifest this update: Tue 12 May 2026 17:25:43 +0000
Manifest next update: Tue 19 May 2026 17:25:43 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: ZJdgsXQSIVJ2GT4v8OLeOCw1An8wzldB6VxY5vRXHJU=)
2: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=)
3: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: Ozwp1kQwSuNs6iz+2dHQMlCodRL+rieEB3kAG5gutg4=)
4: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=)
5: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=)
6: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4233 (0x1089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: May 12 17:25:43 2026 GMT
Not After : May 19 17:25:43 2026 GMT
Subject: CN=6a036297-123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:36:7b:de:aa:d4:ca:de:7e:07:85:fe:5a:
d9:43:58:1d:43:ee:e7:62:d8:ca:10:79:7f:ee:7b:
23:8c:bd:b0:9b:21:00:bd:56:50:ad:50:f3:35:95:
4b:27:a3:b1:28:e9:51:22:1a:aa:b6:61:d5:5e:29:
96:eb:5e:ab:17:19:48:67:79:d2:62:bd:63:dc:f5:
f8:10:a2:c5:26:97:fd:a1:b8:5a:d1:a9:05:ec:fa:
55:48:e5:1e:a5:f8:6b:d0:86:0d:63:39:35:82:9b:
14:f8:6d:e1:3c:f2:a3:d3:5f:95:37:5a:7c:c7:64:
10:88:d9:d0:4e:12:bf:9f:99:c4:05:fa:69:2d:46:
15:0e:82:23:bd:1e:75:b3:f7:3d:57:62:2c:e8:dc:
1f:81:b3:9b:73:e5:11:08:e3:e5:18:cb:f2:08:80:
ae:e0:50:e8:07:32:ad:6d:49:a2:c6:0a:01:11:83:
16:ee:68:04:e6:87:8b:50:a5:bc:05:e1:35:84:de:
b6:76:36:c4:cb:31:fa:d2:6c:d0:21:51:ff:a0:eb:
16:cc:08:54:d1:29:e0:62:1f:35:0e:91:c0:b7:18:
3c:af:e1:8f:f2:0e:bd:d6:b1:6e:f5:46:98:b4:82:
7e:fc:e6:7c:85:69:0b:dd:a5:46:5e:d7:76:7d:8f:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:96:D8:42:22:66:16:05:0F:7B:A2:83:EE:7E:C5:C4:3D:B5:5E
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:32:c1:37:0d:41:80:5f:61:f1:2c:6d:67:58:58:ba:da:
83:1a:d2:40:1a:a2:61:ff:f8:02:3b:9d:18:48:bd:ce:e0:09:
24:bf:e5:48:b5:5d:41:c4:b8:2f:d0:e2:1c:69:ac:d7:1d:96:
1d:aa:f4:64:d5:fc:8f:36:51:29:90:73:e8:e6:e2:8e:c2:c6:
88:44:fb:e6:61:05:1e:b5:ef:df:2d:68:c2:ab:b1:1f:c4:d6:
cf:5d:62:6e:75:54:d7:ff:94:7d:f7:d5:78:b1:04:85:70:c8:
fa:b0:57:56:95:6e:68:b1:ee:50:bc:5c:7b:78:ef:2d:15:24:
3e:fc:66:b8:f7:93:b1:d0:1a:bb:bc:6b:67:27:7d:2d:3d:2b:
b6:49:72:6a:22:7a:e4:25:49:e9:08:42:1f:36:c2:d8:e7:ce:
99:d7:56:c1:03:35:bd:01:24:3b:53:10:a9:80:fc:20:83:94:
41:e6:da:4a:0d:0e:db:96:da:7a:6f:31:6a:33:b6:12:62:f7:
af:12:f2:e2:f8:00:b4:93:62:ab:6b:eb:e7:97:7c:c1:27:1e:
f8:23:12:8a:5d:a8:73:8b:7e:3a:ac:99:b9:f5:8f:f4:17:51:
05:18:7f:fd:bb:4e:d3:1f:4f:5d:fa:e7:12:62:cb:92:fa:65:
70:ae:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:45 2026 by rpki-client