
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: 2muRCo+Fp+aRW3oYNx85jrgSYVSr2PQsviVAYf1xru8=
Subject key identifier: 92:41:FC:98:55:A1:AE:F8:07:19:74:E9:1C:38:86:BA:76:E0:B5:1D
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 10D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 10B8
Signing time: Thu 08 Oct 2026 17:25:55 +0000
Manifest this update: Thu 08 Oct 2026 17:25:54 +0000
Manifest next update: Thu 15 Oct 2026 17:25:54 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: DpKrFkwVaWCoo4AG1OQ4fQFshHbteqkAzqzjXYSbipc=)
2: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=)
3: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=)
4: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=)
5: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=)
6: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=)
7: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Oct 8 17:25:54 2026 GMT
Not After : Oct 15 17:25:54 2026 GMT
Subject: CN=6ac7d223-8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:ec:e2:fe:9a:07:d3:db:c4:40:ab:fe:26:
89:1f:28:eb:99:3f:6d:65:36:aa:c9:c0:a0:2f:d5:
fb:e7:82:22:85:b3:69:07:9b:ec:fa:7e:0e:cf:b8:
3a:6b:e5:94:83:da:50:0e:9b:4e:10:01:5b:1d:d4:
5b:bb:94:81:60:2c:b7:e2:43:e6:c9:62:2e:31:12:
32:b9:4a:df:bc:86:74:f1:9d:b6:28:be:7d:a3:a3:
b9:2c:b2:cf:5b:e2:61:2a:80:3f:08:f1:00:19:33:
93:a5:ee:db:c7:f5:94:ac:f6:c9:a5:17:94:6e:d8:
3a:28:46:9c:3c:93:61:4f:3e:ad:55:d3:3f:ba:0a:
2a:78:b8:57:90:ea:e5:20:9c:e1:fb:79:1a:92:92:
95:1e:d7:61:b4:20:3f:0e:a7:fd:88:ab:ec:39:45:
77:ed:d4:d6:52:70:8e:13:c5:b5:1d:c0:1d:fd:eb:
23:64:97:e6:ee:40:c8:b6:c7:cf:5e:a5:c4:e3:72:
6f:21:a8:26:1a:b5:16:0a:e6:c6:b0:46:9c:f9:59:
6c:ec:c9:08:61:26:48:0f:17:dd:10:c3:2a:b9:ee:
a0:90:c6:55:74:6e:e5:3f:79:b3:fc:01:50:5f:d4:
50:ce:7b:27:77:4b:87:4d:84:23:15:37:b8:90:1a:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:FC:98:55:A1:AE:F8:07:19:74:E9:1C:38:86:BA:76:E0:B5:1D
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:91:c9:ef:b3:85:8f:24:46:18:30:cc:34:76:c9:d4:b8:
70:b2:68:12:d1:e3:57:71:98:ce:5a:36:51:81:14:87:b5:18:
02:6c:e0:26:df:55:f8:31:87:f7:e5:ef:85:66:27:f8:32:e0:
4b:1e:2e:27:ff:d6:13:77:b8:1d:a7:74:24:3c:80:de:54:f9:
68:0b:64:b0:4f:a3:cf:02:a2:ae:91:6d:e5:6a:ef:c5:24:26:
74:71:f6:2d:54:32:ee:00:a5:0d:ac:e1:12:46:7b:26:c5:bd:
6c:66:6f:01:d1:e2:e6:0b:26:13:a3:e7:12:c2:1f:37:02:42:
94:4d:2f:9c:45:1e:32:bc:e8:0e:79:4a:3a:98:51:eb:2d:2a:
b7:e3:28:ad:d7:51:dd:0e:2b:55:65:08:50:66:10:1c:16:72:
dd:78:d1:2c:03:73:89:dd:79:50:a1:94:89:57:c3:88:7e:fd:
5d:fb:49:67:c5:e2:ff:c4:1f:60:05:c9:38:9f:6c:4a:87:1a:
bf:e1:62:45:a2:6f:c1:d1:82:4a:c4:21:1b:87:bf:a6:1f:f8:
2d:8a:2e:69:21:c5:68:b1:0f:9b:88:57:f1:ad:e1:5d:15:2e:
9c:cc:9f:e0:f9:30:e1:9a:a1:2e:1d:d0:6d:73:08:7f:8d:db:
d7:ba:62:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICENkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy
Q0Y3OTI5NEQwHhcNMjYxMDA4MTcyNTU0WhcNMjYxMDE1MTcyNTU0WjAYMRYwFAYD
VQQDEw02YWM3ZDIyMy04ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzvzs4v6aB9PbxECr/iaJHyjrmT9tZTaqycCgL9X754IihbNpB5vs+n4Oz7g6
a+WUg9pQDptOEAFbHdRbu5SBYCy34kPmyWIuMRIyuUrfvIZ08Z22KL59o6O5LLLP
W+JhKoA/CPEAGTOTpe7bx/WUrPbJpReUbtg6KEacPJNhTz6tVdM/ugoqeLhXkOrl
IJzh+3kakpKVHtdhtCA/Dqf9iKvsOUV37dTWUnCOE8W1HcAd/esjZJfm7kDItsfP
XqXE43JvIagmGrUWCubGsEac+Vls7MkIYSZIDxfdEMMque6gkMZVdG7lP3mz/AFQ
X9RQznsnd0uHTYQjFTe4kBpHJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJB/JhV
oa74Bxl06Rw4hrp24LUdMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC
QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4
ZlpObFNLTWlPTGdzOTVLVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACQmRye+zhY8kRhgwzDR2ydS4cLJoEtHjV3GYzlo2UYEUh7UYAmzgJt9V+DGH
9+XvhWYn+DLgSx4uJ//WE3e4Had0JDyA3lT5aAtksE+jzwKirpFt5WrvxSQmdHH2
LVQy7gClDazhEkZ7JsW9bGZvAdHi5gsmE6PnEsIfNwJClE0vnEUeMrzoDnlKOphR
6y0qt+MorddR3Q4rVWUIUGYQHBZy3XjRLANzid15UKGUiVfDiH79XftJZ8Xi/8Qf
YAXJOJ9sSocav+FiRaJvwdGCSsQhG4e/ph/4LYouaSHFaLEPm4hX8a3hXRUunMyf
4Pkw4ZqhLh3QbXMIf43b17pieA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:02:16 2026 by rpki-client