
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json)
Hash identifier: eic93aOiv6/tnTu393ZK0/FkHZiAlG3dM7+U9lNaJg4=
Subject key identifier: 26:B1:D6:48:03:6F:05:D2:64:7F:10:76:C6:25:6F:B2:F7:1B:0F:CE
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
Manifest number: 6C
Signing time: Mon 11 May 2026 08:00:28 +0000
Manifest this update: Mon 11 May 2026 08:00:28 +0000
Manifest next update: Mon 18 May 2026 08:00:28 +0000
Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: Ig663DFTFxq3xBUbq0PMV1LAltheClozWEwaH7rnZ9g=)
2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Validity
Not Before: May 11 08:00:28 2026 GMT
Not After : May 18 08:00:28 2026 GMT
Subject: CN=6a018c9c-fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:14:84:2f:e1:9f:58:ad:29:04:ab:23:7e:
1c:2b:28:60:2d:a8:8c:28:55:24:d9:17:9d:fe:2f:
7d:1c:7e:94:07:7a:ad:b1:f5:8a:8d:3c:37:ae:52:
b2:75:72:6e:b0:6b:bc:f0:0d:7e:d3:de:48:02:39:
47:cc:a6:2b:93:db:6f:44:97:1e:70:e0:9b:03:72:
ce:c3:fa:19:c5:f0:df:96:5b:02:a5:9b:e5:72:d4:
cf:7c:27:4b:af:f5:ae:5c:aa:e5:62:2c:af:6d:3e:
40:63:ac:43:a9:16:51:39:3d:cf:2a:b2:89:1a:6b:
f9:84:76:ff:d9:c4:2a:72:25:37:1a:0c:1a:78:d0:
8e:f0:b7:25:1b:68:a6:c6:b2:e9:74:85:55:e9:97:
2b:ad:e4:ab:2d:f8:f6:94:ae:1c:ac:90:bb:a4:6e:
91:15:b6:ac:ce:03:e6:83:88:ab:f6:03:c9:2e:f7:
a1:c3:db:f7:11:60:a1:f6:9c:94:fd:2e:82:44:5c:
21:7c:05:8f:a9:f4:86:7e:a2:9d:50:b2:55:5d:c1:
0b:4d:64:82:d8:28:97:b6:06:29:66:f9:b0:76:b2:
33:24:7c:c7:b4:42:ed:6a:4c:f5:bc:3b:1c:ba:74:
05:41:01:f5:f6:1a:11:ab:1e:f5:25:d3:da:44:29:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B1:D6:48:03:6F:05:D2:64:7F:10:76:C6:25:6F:B2:F7:1B:0F:CE
X509v3 Authority Key Identifier:
keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:b8:49:9e:f6:26:34:b0:23:53:3d:57:4f:73:50:77:ff:
17:1b:a9:fd:ce:05:14:9d:9c:30:44:d5:50:a4:b5:9b:a3:2b:
eb:af:94:db:2f:13:aa:c8:d6:3f:aa:d9:bd:5f:df:a5:9f:f7:
be:99:6d:11:ac:56:54:89:86:a8:d4:9b:a0:16:d4:a7:1e:bd:
d6:4a:8f:b8:f7:62:ac:18:da:55:7d:b2:1c:83:c5:06:b3:f7:
00:1d:80:71:49:39:d6:a4:a6:ed:19:58:3c:14:5c:f3:62:fe:
71:b8:3d:41:7f:23:8f:9a:b7:5d:ee:85:96:46:8c:5e:b3:7f:
d6:ed:af:69:6e:da:cb:d6:d9:22:05:d4:0b:83:df:dd:33:26:
2e:c4:88:54:a3:db:09:51:3c:f5:0f:73:a0:be:fc:54:ed:73:
5b:0e:5e:8a:cb:1c:c3:5c:65:c1:42:cc:cd:91:b5:08:52:3b:
d3:0e:7d:03:3d:a9:e8:00:2b:75:ec:12:5a:eb:cc:1c:cb:ad:
85:bd:dd:30:ac:43:60:58:1b:6b:dc:e0:7b:7c:66:00:6c:60:
dd:4b:46:48:e3:e6:4e:fb:b0:81:59:93:96:1b:03:40:b4:02:
df:60:b7:e3:9a:5c:99:9e:62:6a:79:4e:49:12:6e:09:e8:3d:
29:df:a1:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1
NDhDMDFCMTAeFw0yNjA1MTEwODAwMjhaFw0yNjA1MTgwODAwMjhaMBgxFjAUBgNV
BAMTDTZhMDE4YzljLWZlMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8MBSEL+GfWK0pBKsjfhwrKGAtqIwoVSTZF53+L30cfpQHeq2x9YqNPDeuUrJ1
cm6wa7zwDX7T3kgCOUfMpiuT229Elx5w4JsDcs7D+hnF8N+WWwKlm+Vy1M98J0uv
9a5cquViLK9tPkBjrEOpFlE5Pc8qsokaa/mEdv/ZxCpyJTcaDBp40I7wtyUbaKbG
sul0hVXplyut5Kst+PaUrhyskLukbpEVtqzOA+aDiKv2A8ku96HD2/cRYKH2nJT9
LoJEXCF8BY+p9IZ+op1QslVdwQtNZILYKJe2Bilm+bB2sjMkfMe0Qu1qTPW8Oxy6
dAVBAfX2GhGrHvUl09pEKR19AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJrHWSANv
BdJkfxB2xiVvsvcbD84wHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4
RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st
N2p3OG1hVW5pa0ZTTUFiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBXI7hJnvYmNLAjUz1XT3NQd/8XG6n9zgUUnZwwRNVQpLWboyvrr5TbLxOqyNY/
qtm9X9+ln/e+mW0RrFZUiYao1JugFtSnHr3WSo+492KsGNpVfbIcg8UGs/cAHYBx
STnWpKbtGVg8FFzzYv5xuD1BfyOPmrdd7oWWRoxes3/W7a9pbtrL1tkiBdQLg9/d
MyYuxIhUo9sJUTz1D3OgvvxU7XNbDl6KyxzDXGXBQszNkbUIUjvTDn0DPanoACt1
7BJa68wcy62Fvd0wrENgWBtr3OB7fGYAbGDdS0ZI4+ZO+7CBWZOWGwNAtALfYLfj
mlyZnmJqeU5JEm4J6D0p36Ev
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:43 2026 by rpki-client