
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: D1Z+7gbRkX07OSApqoEayyY5LB7KeTe8VMtXxEF84Ss=
Subject key identifier: E0:21:74:07:29:43:66:F6:E6:4D:E6:D1:07:5B:3E:60:82:D0:F2:03
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 0422
Signing time: Mon 21 Sep 2026 00:07:31 +0000
Manifest this update: Mon 21 Sep 2026 00:07:31 +0000
Manifest next update: Mon 28 Sep 2026 00:07:31 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: KQwnlIOwfGal8aY0Dqa+s3Wlu6NKmNpUrw4rSRkUePs=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Sep 21 00:07:31 2026 GMT
Not After : Sep 28 00:07:31 2026 GMT
Subject: CN=6ab07543-1651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:97:8c:86:25:d6:13:b2:4e:c7:17:25:d7:
97:86:d7:6d:7b:52:da:6d:ff:de:95:ef:15:51:fa:
0c:9f:51:75:24:e1:03:0d:9b:16:04:80:06:36:91:
b0:b2:cc:09:9f:86:41:51:a2:ce:f3:69:7b:84:b0:
f7:5f:77:54:a4:d4:7c:07:96:94:e3:d1:3e:39:73:
44:62:e6:7d:76:11:01:75:7c:e7:de:47:eb:ba:95:
e9:38:c4:aa:18:8d:00:96:8c:30:44:0d:35:2a:ab:
82:72:30:a9:80:1c:95:08:4d:9b:11:14:31:be:1e:
05:77:b3:3b:6f:4c:e6:b2:de:17:8b:26:0d:20:57:
60:5f:ec:7f:59:cd:9d:6d:89:ac:01:59:9b:f3:b5:
82:ae:43:63:85:93:46:e3:dc:c9:cf:58:83:07:bc:
9e:f4:c6:2a:ed:77:d6:b4:11:32:d6:b8:2d:ca:f6:
67:be:0e:2e:0d:5c:3d:20:27:1e:93:74:7d:0a:59:
d8:68:c1:6f:44:b6:64:ed:e6:69:22:3b:54:ee:e8:
d7:ef:c3:a1:11:1c:67:94:26:8f:fd:37:cc:f3:33:
f6:87:5e:a3:b7:5c:ab:f4:09:d3:04:af:1b:a3:c8:
3c:18:b8:c4:92:c5:31:ad:a6:64:3f:5f:5a:79:9b:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:74:07:29:43:66:F6:E6:4D:E6:D1:07:5B:3E:60:82:D0:F2:03
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:46:ae:a2:a9:aa:12:d6:55:88:90:f6:5d:11:2a:2d:39:00:
6c:10:9d:05:6c:a4:73:35:35:02:55:55:f5:d9:50:c7:3a:4a:
ed:88:8e:cf:62:e8:fc:05:21:a0:d4:6b:98:58:79:74:8a:dd:
68:a8:b1:5b:99:b4:fc:1b:e5:9c:b4:07:f1:a5:00:3a:cb:5a:
7f:26:2d:43:7f:57:4e:78:6e:a3:96:a3:46:56:f0:4b:db:a0:
a7:af:57:49:d9:0a:23:74:07:38:be:35:d9:24:19:c8:69:2c:
c8:20:15:2a:c0:bd:9d:92:c8:c7:78:7a:ca:a8:df:43:ef:35:
e6:6e:db:0c:db:08:b1:f9:16:52:e4:81:74:bb:dd:47:5e:0d:
6b:dd:bb:13:36:dc:15:f7:2e:8a:2c:88:5b:83:b2:64:bd:f6:
dc:54:10:39:f6:e4:6f:3e:47:d2:a8:db:85:aa:97:de:df:f9:
cf:12:34:8d:38:0c:4a:e0:15:30:0e:35:4c:ed:a5:84:59:81:
58:7c:ba:2a:c6:d0:79:39:87:54:32:ef:16:e6:ac:ef:51:93:
ec:a3:3a:bb:af:f2:b8:4f:6d:bc:b9:70:95:7f:79:9e:9b:f5:
60:40:cb:fe:ea:bc:37:51:88:ed:58:b3:fe:ce:11:91:07:c3:
c2:96:8c:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy
MzlFREY5MjAwHhcNMjYwOTIxMDAwNzMxWhcNMjYwOTI4MDAwNzMxWjAYMRYwFAYD
VQQDEw02YWIwNzU0My0xNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJ+XjIYl1hOyTscXJdeXhtdte1Labf/ele8VUfoMn1F1JOEDDZsWBIAGNpGw
sswJn4ZBUaLO82l7hLD3X3dUpNR8B5aU49E+OXNEYuZ9dhEBdXzn3kfrupXpOMSq
GI0AlowwRA01KquCcjCpgByVCE2bERQxvh4Fd7M7b0zmst4XiyYNIFdgX+x/Wc2d
bYmsAVmb87WCrkNjhZNG49zJz1iDB7ye9MYq7XfWtBEy1rgtyvZnvg4uDVw9ICce
k3R9ClnYaMFvRLZk7eZpIjtU7ujX78OhERxnlCaP/TfM8zP2h16jt1yr9AnTBK8b
o8g8GLjEksUxraZkP19aeZv1fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOAhdAcp
Q2b25k3m0QdbPmCC0PIDMB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3
NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm
QXRFaW9OaU9qSFlqbnQtU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVUauoqmqEtZViJD2XREqLTkAbBCdBWykczU1AlVV9dlQxzpK7YiOz2Lo/AUh
oNRrmFh5dIrdaKixW5m0/BvlnLQH8aUAOstafyYtQ39XTnhuo5ajRlbwS9ugp69X
SdkKI3QHOL412SQZyGksyCAVKsC9nZLIx3h6yqjfQ+815m7bDNsIsfkWUuSBdLvd
R14Na927EzbcFfcuiiyIW4OyZL323FQQOfbkbz5H0qjbhaqX3t/5zxI0jTgMSuAV
MA41TO2lhFmBWHy6KsbQeTmHVDLvFuas71GT7KM6u6/yuE9tvLlwlX95npv1YEDL
/uq8N1GI7Viz/s4RkQfDwpaM+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:53 2026 by rpki-client