
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier: 6f3jSYkDd4WY6lLcYWFhj1kAMPxJvI+/e6glnlHrMTk=
Subject key identifier: 6B:FD:4A:AB:B4:17:C3:80:AD:BD:B0:31:7F:E5:FE:FD:D2:70:1F:66
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number: 90
Signing time: Thu 23 Jul 2026 09:18:47 +0000
Manifest this update: Thu 23 Jul 2026 09:18:46 +0000
Manifest next update: Thu 30 Jul 2026 09:18:46 +0000
Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: fb8II4i+ADXmFy3441sgovBXk+jBFRDoTAlRI8yTf0A=)
2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Validity
Not Before: Jul 23 09:18:46 2026 GMT
Not After : Jul 30 09:18:46 2026 GMT
Subject: CN=6a61dc77-8886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:57:5c:a2:74:91:20:dc:8a:8f:c6:46:67:b4:
e0:72:ef:54:a8:05:89:b0:ea:ef:f8:e3:c2:f3:b6:
f2:ce:55:9f:aa:a2:03:34:88:28:9f:df:6b:c3:4f:
e4:76:d3:c4:60:5e:83:74:e0:70:09:25:72:61:7b:
eb:48:97:71:6c:72:01:57:a9:40:35:1a:5b:2f:3e:
02:e2:f4:02:f1:7f:a3:39:d7:d7:b5:a1:2a:8c:0f:
bb:7f:90:59:d9:25:fb:08:52:26:05:15:35:0d:29:
2e:00:65:db:88:b4:81:b8:2a:c4:55:f3:71:e3:5d:
16:b7:9b:b0:bc:83:c3:d3:1f:43:88:f6:62:56:11:
c7:06:f4:aa:07:c3:b5:2c:22:cb:0a:d9:c1:31:f5:
b8:98:45:aa:f7:c4:ee:80:a6:73:42:8d:b8:a1:ee:
ae:a9:64:f2:88:23:7f:a3:2e:d1:49:35:ba:d9:ef:
38:71:6d:45:e2:c7:f0:02:a2:a7:02:f8:6b:47:4f:
d7:cb:76:b0:36:08:14:86:45:ba:bf:c2:9a:92:cf:
21:19:44:d9:53:85:5d:92:94:95:d9:a1:a6:e7:3d:
8b:4b:72:ff:8f:fb:b1:47:4a:89:73:90:05:b9:11:
5b:cf:ae:e2:67:83:bc:c0:5e:4a:3e:37:18:a4:f8:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:4A:AB:B4:17:C3:80:AD:BD:B0:31:7F:E5:FE:FD:D2:70:1F:66
X509v3 Authority Key Identifier:
keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:e5:fc:f5:1f:0a:88:9f:e2:77:e9:4d:75:3f:2d:8c:60:
0c:e7:13:4f:9f:1d:10:10:a0:40:93:bd:7e:b3:d8:f5:7b:2b:
6e:47:e6:03:3f:9d:83:43:79:cc:49:93:1d:46:e3:87:6f:d0:
06:5d:a5:ca:84:95:11:c0:8c:f6:19:de:0b:75:99:6e:4c:8d:
af:cb:f7:ac:d3:2d:e8:c3:4e:7f:a6:45:c9:44:be:82:8b:d6:
2a:65:8c:7c:4b:d4:e4:15:2e:68:ec:a9:63:58:36:fd:6e:bd:
44:b5:1d:c1:a4:69:8a:15:48:6a:28:d8:04:15:54:23:87:57:
be:e5:9e:b5:f8:42:a8:ed:75:6f:c1:91:bb:e6:8b:29:ad:9a:
68:51:94:0b:d5:d3:2c:ae:76:ab:3d:b8:75:57:50:89:ef:44:
60:29:91:31:ab:59:9b:c2:98:50:f0:7b:f9:ae:5f:00:71:01:
66:31:c8:96:7f:71:6d:67:c1:45:a8:fe:f8:01:50:a9:3e:94:
14:4d:86:a1:96:8f:48:6e:30:66:b5:30:3c:ed:02:8b:fe:5a:
ae:59:9e:54:32:64:54:8f:f4:10:08:7e:a6:3e:23:3f:6e:90:
a6:20:de:b5:1d:6f:29:c8:a6:ce:20:c7:74:e1:aa:f5:dc:62:
19:c5:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:07 2026 by rpki-client