
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json)
Hash identifier: LqOxxG9/pY7Jv/QzIQmXQOAYraFcDdYXUiodMGq4Nbw=
Subject key identifier: E2:2D:31:C7:08:C1:EB:92:14:54:47:7C:D9:B6:C8:AD:23:C4:13:A9
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial: 368B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
Manifest number: 360B
Signing time: Thu 24 Sep 2026 14:47:58 +0000
Manifest this update: Thu 24 Sep 2026 14:47:57 +0000
Manifest next update: Thu 01 Oct 2026 14:47:57 +0000
Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: b2ZB34ws+h6cU36QNm02BNOHwDdvE1nlp5wcwjtJ958=)
2: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: bGRZ0FpspSCf0cAveUKjR/NLCR8lXup6exlYiK4KDOA=)
3: ZK6dqsz8SNKa9BIRG-wwKoRLm1s.asa (hash: Dz7ClXtb4X0yBRjApTXpt2z96UXZ22eyuTkwMR3LjYw=)
4: sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa (hash: I6p3UURilsrl6l6rhn0wT3MhCoiuv3Y8LPk+lcr5FbE=)
5: y3XF_d_Fz4sNYXjELzqHJsYq6XU.asa (hash: phuSwfjdb7QT4a5GmgCtJ2giqSwUMfci6tv/INJIFq8=)
6: 87C417D4AD1811F1A4C6F2B14011F970.roa (hash: F9QyhjA4QNdilU+ShIfAj3a6gliCU8PF/F7dlar+ZO8=)
7: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13963 (0x368b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Validity
Not Before: Sep 24 14:47:57 2026 GMT
Not After : Oct 1 14:47:57 2026 GMT
Subject: CN=6ab5381d-a445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:6f:83:59:82:7e:4e:c5:ab:0b:91:f5:dc:
7f:f2:49:e0:b0:3e:a3:dc:21:a2:34:ac:09:38:18:
5f:5b:10:53:34:eb:61:e8:14:af:4b:85:14:44:2e:
d9:d6:71:8e:79:99:44:e4:e3:20:2d:26:91:17:e3:
97:d9:91:5e:20:19:e0:a1:7e:31:be:3a:f8:da:93:
89:63:3a:c2:e5:6d:e4:17:9b:1d:b7:0b:7b:12:15:
9d:35:fa:fa:2e:51:bd:df:82:0f:76:a7:f7:e1:10:
d5:01:73:06:d5:9c:a9:27:45:fd:01:a4:90:8f:ff:
7a:15:d9:18:cd:0f:4b:82:b8:15:b3:15:37:c8:9e:
8e:a6:d7:66:39:89:ae:a4:59:39:7a:0d:dc:e4:25:
bc:17:b5:c5:48:0d:2b:ec:08:56:92:69:e1:b6:51:
4e:b5:97:c8:33:90:37:f8:cf:d5:26:d9:5f:fd:5f:
34:17:61:5a:04:01:8a:70:41:4a:6c:9b:69:14:38:
19:10:13:40:b8:29:e5:24:65:39:3e:85:21:93:d0:
29:70:ec:f4:52:a6:01:85:ab:ca:3d:66:07:37:8f:
af:ac:ea:bd:47:90:a2:4d:ad:fb:c8:5e:a5:39:95:
a0:d5:b2:4c:d8:1f:05:b0:ec:74:bf:c2:2d:f0:cc:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:31:C7:08:C1:EB:92:14:54:47:7C:D9:B6:C8:AD:23:C4:13:A9
X509v3 Authority Key Identifier:
keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e5:5a:bc:29:76:de:0a:0c:af:3f:bb:ac:c9:62:e8:00:27:
70:3b:39:a6:ee:b3:f6:6f:22:39:81:b3:5e:9e:f8:92:af:d8:
3b:2b:cc:68:c3:9d:c3:4f:63:63:21:39:9f:7f:81:46:d3:4e:
83:64:39:25:ef:24:86:cb:08:9f:6a:79:3c:72:5a:e3:6c:84:
4b:62:3e:d8:bc:15:41:19:15:89:f9:30:36:44:bc:63:8c:9f:
96:79:4e:20:ad:da:39:b6:fa:31:1e:d2:29:d1:9a:af:b3:f2:
67:9b:9e:4e:d8:99:a4:a8:58:15:05:7a:2c:ec:55:a3:d8:84:
6e:11:28:9a:aa:0c:60:87:71:2c:2e:37:cf:68:22:8b:0d:9b:
cb:61:c7:bf:9a:5e:c8:dd:b7:d1:21:83:90:42:d6:c9:c9:01:
bf:f9:67:b2:a2:10:00:01:28:c2:d9:d1:03:34:f3:23:93:4e:
8b:db:55:8b:a5:fc:81:56:02:6b:22:e6:dc:11:86:1a:55:d2:
6d:06:0b:bc:b9:c3:e3:ba:bc:ca:73:b6:f1:f8:87:af:57:59:
c8:7e:62:9d:29:c7:88:7a:a0:b1:49:2c:da:67:eb:b3:79:96:
0d:e9:15:90:a7:00:9e:65:e1:bb:b2:f9:01:6a:85:3a:97:a7:
13:c0:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:56:49 2026 by rpki-client