
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: wPEQ688p+QpbSortSiwxYh5RsWId8tpSoFhlRyeW1sA=
Subject key identifier: 5D:C8:AC:CC:52:39:72:B4:34:78:92:60:4C:4D:7B:D2:A5:8D:E5:76
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 222B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 221F
Signing time: Tue 12 May 2026 15:52:55 +0000
Manifest this update: Tue 12 May 2026 15:52:54 +0000
Manifest next update: Tue 19 May 2026 15:52:54 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: lfLHhmI1bJlXeos78c6kHGsdghxf8/+DFIy/oG3LKL8=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 42CVSUWYduLQVb9MG+B2vLMlfp0/6VbB2Jlt8i5PPHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8747 (0x222b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: May 12 15:52:54 2026 GMT
Not After : May 19 15:52:54 2026 GMT
Subject: CN=6a034cd7-0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:37:02:fd:73:16:8b:58:08:15:0a:21:21:
83:5c:e8:f4:a7:0c:48:b7:73:fd:1b:5d:d7:0d:ae:
9f:93:15:af:61:df:db:ad:98:73:48:57:0c:23:8f:
f5:42:39:22:ec:7c:a6:0a:a2:97:a6:a6:25:48:b7:
ca:0a:f6:f4:64:21:0d:e6:c4:ce:84:a4:b7:39:f7:
e9:01:fc:5f:cb:f0:bd:bd:3d:c8:c1:97:28:b8:a1:
9e:8b:4f:02:a5:16:22:39:dd:b8:f5:a2:ed:9e:f8:
79:5a:1b:f7:92:08:04:0c:06:4d:d7:c6:2f:89:cc:
30:dd:23:62:26:c3:85:a0:7c:61:98:3d:d0:9f:d7:
3b:8e:4e:d7:1e:07:c0:7d:c8:1f:3d:44:23:36:88:
b5:bb:80:5c:65:cf:26:a9:cd:f2:6b:d8:af:bc:31:
c0:f7:95:59:44:b2:9b:17:b2:29:89:60:99:a3:3d:
ac:08:9d:03:de:33:69:8e:67:44:00:88:f9:c8:2e:
a4:c5:2e:f5:1b:26:c9:0a:32:14:c5:30:ee:b7:45:
3a:90:b6:5f:a7:ab:f6:22:fe:02:50:1d:2e:7f:9d:
b6:e5:40:8a:1c:03:55:c8:ef:3b:f1:53:40:bb:bd:
bf:56:83:7a:0d:f3:f0:1c:4b:64:4f:d5:fe:72:76:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:AC:CC:52:39:72:B4:34:78:92:60:4C:4D:7B:D2:A5:8D:E5:76
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cb:4b:5d:a5:1a:42:8e:36:75:69:c6:81:9f:8e:2a:86:a6:
85:67:c5:e8:a3:96:36:b3:8c:4c:e7:c9:89:35:b1:45:77:77:
22:15:64:c1:9c:0a:0b:27:46:cf:34:c9:14:bf:93:20:73:b5:
0f:74:2e:11:7d:9b:22:c2:ca:48:36:29:de:b8:f5:56:13:58:
1b:8d:2a:10:7c:10:84:a4:f0:df:46:7a:45:11:b7:5e:0b:23:
e8:51:3c:0c:94:d4:f9:ed:55:c4:31:29:60:03:95:c4:58:79:
f1:4e:d6:e6:ae:f0:59:8c:a2:4e:dc:40:06:b1:de:f2:fa:3e:
31:f2:14:35:2a:08:04:bc:1d:5e:b3:90:ab:db:0d:e2:73:7b:
d8:b7:13:1e:cc:7b:87:3c:5f:4a:02:61:ce:98:76:76:f8:ec:
83:8f:04:86:eb:60:ec:0f:ac:a4:bd:b8:79:bc:38:04:16:83:
06:eb:f9:38:dc:f4:94:72:54:a3:08:b5:d6:d4:46:f2:c8:18:
36:8f:2a:59:ae:56:d2:49:b1:04:8c:5f:4d:8a:e8:65:ed:63:
7c:ca:98:2e:05:4d:f1:a4:b5:ad:c5:c1:e9:bb:b6:b8:b8:ca:
05:9a:69:41:af:9e:73:33:ba:5f:b3:56:c1:6d:37:f0:f3:31:
9b:ea:e2:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz
OTg3NjYzRTAwHhcNMjYwNTEyMTU1MjU0WhcNMjYwNTE5MTU1MjU0WjAYMRYwFAYD
VQQDEw02YTAzNGNkNy0wOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2cM3Av1zFotYCBUKISGDXOj0pwxIt3P9G13XDa6fkxWvYd/brZhzSFcMI4/1
Qjki7HymCqKXpqYlSLfKCvb0ZCEN5sTOhKS3OffpAfxfy/C9vT3IwZcouKGei08C
pRYiOd249aLtnvh5Whv3kggEDAZN18Yvicww3SNiJsOFoHxhmD3Qn9c7jk7XHgfA
fcgfPUQjNoi1u4BcZc8mqc3ya9ivvDHA95VZRLKbF7IpiWCZoz2sCJ0D3jNpjmdE
AIj5yC6kxS71GybJCjIUxTDut0U6kLZfp6v2Iv4CUB0uf5225UCKHANVyO878VNA
u72/VoN6DfPwHEtkT9X+cnYTnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3IrMxS
OXK0NHiSYExNe9KljeV2MB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG
NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG
VFRWejJCMjl3WWM1aDJZLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuctLXaUaQo42dWnGgZ+OKoamhWfF6KOWNrOMTOfJiTWxRXd3IhVkwZwKCydG
zzTJFL+TIHO1D3QuEX2bIsLKSDYp3rj1VhNYG40qEHwQhKTw30Z6RRG3Xgsj6FE8
DJTU+e1VxDEpYAOVxFh58U7W5q7wWYyiTtxABrHe8vo+MfIUNSoIBLwdXrOQq9sN
4nN72LcTHsx7hzxfSgJhzph2dvjsg48Ehutg7A+spL24ebw4BBaDBuv5ONz0lHJU
owi11tRG8sgYNo8qWa5W0kmxBIxfTYroZe1jfMqYLgVN8aS1rcXB6bu2uLjKBZpp
Qa+eczO6X7NWwW038PMxm+riNA==
-----END CERTIFICATE-----
Generated at Wed May 13 18:23:15 2026 by rpki-client