
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json)
Hash identifier: 84cu9DPUHiEolmDwSWtXoIfkmyUlb2cqB/349osfz5w=
Subject key identifier: 0E:A7:E9:68:C6:91:CA:0E:EF:33:58:3F:EF:2E:CC:75:33:64:EE:2F
Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
Manifest number: 014A
Signing time: Wed 25 Mar 2026 04:29:20 +0000
Manifest this update: Wed 25 Mar 2026 04:29:20 +0000
Manifest next update: Wed 01 Apr 2026 04:29:20 +0000
Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: WIQ16dQJF4MoU8jChj/rJNGsrYyhEb9+ybxrI+xZq+0=)
2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: DyACrMkOfJlPNhHPts7x+Wbv5pZAYUHiquFq75vV6IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Validity
Not Before: Mar 25 04:29:20 2026 GMT
Not After : Apr 1 04:29:20 2026 GMT
Subject: CN=69c364a0-bcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:7d:13:00:ac:b2:b5:a1:e3:54:cc:55:c9:
c1:b6:d6:02:39:80:5c:49:bc:33:ed:33:df:be:2c:
41:4b:b4:1d:b0:c8:d3:ad:a5:85:9c:f7:4a:30:0b:
3b:d3:90:b8:06:e5:d2:81:78:44:36:53:aa:21:7b:
cd:4a:d5:88:c8:86:0e:8b:e6:73:40:ac:46:fe:d2:
3c:80:8d:3f:49:22:01:68:76:a6:8b:16:64:36:a9:
ea:a9:53:e5:78:8b:37:0e:53:83:87:4d:7c:3a:13:
75:e8:88:c0:c4:10:9f:4b:e6:8e:be:0b:ae:87:6f:
bc:1b:e1:e5:67:72:1a:1f:ce:77:29:d7:69:bb:01:
79:6c:fc:91:51:19:49:f5:12:b9:ea:7b:37:ba:a7:
4c:1b:04:e2:f6:c3:5f:c8:17:e3:e0:90:7c:2d:cf:
29:04:06:ea:26:54:f9:77:91:9f:b7:ee:88:46:d5:
21:9a:04:74:9f:7a:53:78:2e:1a:ff:ab:b4:a2:94:
b1:5c:e4:25:cc:0f:1d:5f:db:4a:f0:8e:e4:05:15:
b2:07:e3:55:54:bd:31:c3:3a:ee:fe:a8:7a:fd:b1:
ca:77:83:8e:57:84:73:b4:93:37:c3:d0:6b:e8:95:
ff:18:d0:21:54:18:63:9c:4f:21:34:83:1d:69:09:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A7:E9:68:C6:91:CA:0E:EF:33:58:3F:EF:2E:CC:75:33:64:EE:2F
X509v3 Authority Key Identifier:
keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:47:b7:fd:35:84:6a:81:cf:4e:4d:fb:8e:44:ef:45:be:
97:f0:ac:f5:d1:13:3b:c3:30:aa:88:7b:ea:50:e9:77:0c:ff:
83:24:e4:2c:63:e0:5d:56:5f:d1:ca:96:d9:5a:62:7a:22:05:
e4:42:70:30:c2:80:b6:bd:cb:2b:73:c7:47:9a:d1:c9:2b:ff:
57:bb:95:4a:3f:fb:49:5c:17:b0:bf:ac:db:80:22:60:8e:76:
aa:ae:09:73:c8:eb:c5:f6:32:16:e4:f4:98:91:84:7a:bd:83:
15:8c:65:44:e5:67:be:b7:db:31:4e:14:3c:17:4f:8c:57:12:
86:bd:c5:5a:88:7b:c6:a5:9f:b1:5e:31:dd:cd:c1:cc:4f:5c:
3f:e9:93:91:4b:fb:53:d5:38:bb:f8:f5:ab:4e:57:1b:e1:42:
80:46:9d:a6:4b:c0:8e:11:35:08:d9:e4:73:96:0f:5f:67:30:
80:c5:6c:fe:79:7b:1d:ee:08:27:ec:f8:42:49:0a:bc:eb:2c:
30:cd:e3:b7:51:bf:26:af:e1:28:fa:59:f5:78:ae:2a:39:a8:
e1:41:d0:b9:c5:d5:b9:c1:19:37:b3:25:24:f7:50:51:43:1e:
d7:65:05:4e:ba:f5:39:82:76:6b:78:8a:9c:71:13:c8:61:6a:
5d:01:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:25 2026 by rpki-client