
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier: ZHQaG9wTTG89VDPAVlRsC5T2qQsskDgif/W5nYW0m/Y=
Subject key identifier: ED:B0:E1:2A:2B:64:4E:3E:10:09:B6:67:D9:EF:BA:0B:E1:03:3E:24
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number: B7
Signing time: Sat 03 Oct 2026 07:40:12 +0000
Manifest this update: Sat 03 Oct 2026 07:40:12 +0000
Manifest next update: Sat 10 Oct 2026 07:40:12 +0000
Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: CcLCoj3bhtS6ZV3+IdZeeRd3GPgcXb2L2IOpvxXhPhU=)
2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: QDXJKmWWvKi740RHNl7bfZXziv3dDMq/AExHCvXOvVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Validity
Not Before: Oct 3 07:40:12 2026 GMT
Not After : Oct 10 07:40:12 2026 GMT
Subject: CN=6ac0b15c-a7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:cb:32:7b:87:09:fb:d8:5f:e6:15:1f:60:
68:a9:99:22:3c:b8:8d:85:75:d2:cc:fb:33:a0:76:
51:a3:bb:9e:ca:22:3d:f0:80:6e:94:9f:99:8e:fb:
8e:cf:17:49:d1:55:6b:59:c6:7f:1a:d0:73:5b:58:
98:69:ea:e8:0d:63:fc:17:26:09:e7:c5:b8:cf:17:
61:42:21:ab:7d:68:fe:65:76:4c:25:fb:31:83:0a:
de:ff:19:a9:ff:5a:74:e8:81:3a:b6:7d:cb:f2:0e:
3f:0c:b9:cc:38:5b:dd:3a:48:e2:22:a4:a7:da:cb:
dc:57:47:fc:5a:a7:3b:9e:0a:41:5f:fa:41:df:fd:
4e:1e:d6:3f:5a:0b:5a:a5:59:9f:0d:23:0b:2a:1f:
a8:9f:81:40:7d:57:83:48:c7:a5:b3:6e:a6:d4:3c:
48:59:e2:b9:2c:e6:53:42:04:eb:49:72:67:3b:cc:
3f:bc:bb:e4:a9:30:fa:68:de:ac:5b:f3:52:04:86:
3d:59:96:58:cc:37:76:63:2b:9e:8e:0c:9f:bb:03:
ea:9e:e1:3a:12:47:72:66:cb:35:30:43:77:e7:36:
19:d0:77:a7:67:71:61:23:6e:7c:e5:0b:79:14:6f:
f2:57:99:83:4e:3c:23:fd:1b:86:6c:15:6f:60:31:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:E1:2A:2B:64:4E:3E:10:09:B6:67:D9:EF:BA:0B:E1:03:3E:24
X509v3 Authority Key Identifier:
keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:db:ca:1f:45:98:9e:41:ec:43:b3:8b:dd:21:b5:3e:50:98:
46:91:19:e4:57:07:0e:c2:25:7b:24:e4:f1:61:84:c2:df:09:
ff:c4:af:e6:f3:05:58:62:f7:f6:60:6a:5a:4e:cf:3b:fa:ed:
4b:88:15:94:ef:f4:b7:b3:45:d0:37:6c:ca:2c:ea:fb:97:6c:
35:68:7f:aa:cc:7b:87:c6:81:70:d5:91:a3:fa:b0:00:58:47:
bb:00:57:97:54:1c:40:50:28:4c:54:15:4f:5c:bd:ba:b0:71:
9e:51:87:b9:4a:f5:09:8e:43:28:7f:83:fb:9f:c7:a7:7b:af:
58:cf:68:da:f4:85:4b:f7:ef:af:c0:b2:8a:d4:9f:77:07:6c:
f4:5c:1e:fc:79:0a:d8:75:65:50:72:d0:10:81:e5:f3:33:dc:
58:49:4d:60:3b:ab:66:01:de:72:1b:88:07:11:3e:15:b3:d3:
b8:79:d6:66:8b:36:e6:3b:88:05:c6:50:62:99:58:0d:00:a8:
61:5a:fe:4f:2b:c3:bb:83:de:4b:1e:c2:5b:79:dc:cc:5a:b4:
ce:71:72:4f:5a:08:4e:a5:85:57:57:31:23:ff:91:22:d8:73:
c1:31:28:1a:9a:84:05:0f:31:7c:37:69:4e:fb:c5:98:25:a9:
74:43:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:58:32 2026 by rpki-client