
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier: 3sDRVVZYrJZOTky+d2Ws+WMYBI190EjMKWhEaoITF1U=
Subject key identifier: A4:3F:CB:FB:CD:72:6C:B6:54:09:62:92:9D:0B:4A:81:91:35:FE:38
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 3580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number: 3560
Signing time: Tue 12 May 2026 14:31:05 +0000
Manifest this update: Tue 12 May 2026 14:31:04 +0000
Manifest next update: Tue 19 May 2026 14:31:04 +0000
Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: MKRWeGQO88relQJdu/D0W8poI5vV8BPO52zG3P7AoCc=)
2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=)
3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13696 (0x3580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: May 12 14:31:04 2026 GMT
Not After : May 19 14:31:04 2026 GMT
Subject: CN=6a0339a8-4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:30:c8:2e:11:b6:46:aa:00:b0:c3:a7:70:
b1:3c:34:e3:45:20:5b:60:32:70:46:3d:9c:74:ad:
02:07:81:12:61:f6:d9:0b:02:e7:f7:17:c4:d9:a3:
c2:a5:22:f1:af:2b:3f:53:23:17:fa:12:ab:ec:22:
05:83:9c:ac:6e:d9:54:86:69:bf:d6:8d:18:07:50:
34:99:5a:69:5e:8a:f5:f0:64:38:a0:28:db:f6:87:
4b:e1:1c:94:7f:c0:ff:45:21:9c:f0:d2:2f:e1:dd:
2d:75:34:7f:97:c5:13:db:87:3e:31:03:ab:58:db:
a0:48:3c:da:9e:28:42:80:5d:47:84:30:5e:58:5b:
8f:09:e4:43:ea:cd:35:6d:cb:67:82:b0:32:a5:4e:
be:6e:1e:36:e7:5d:81:ae:ec:76:7c:f9:21:03:de:
8f:e5:24:ca:e1:c5:49:d9:25:ba:5a:ef:de:81:d8:
df:68:62:9f:8f:79:96:0f:a9:e4:7b:20:b6:b7:d1:
66:e5:e4:21:1f:77:60:48:00:5e:fc:56:f0:cf:40:
65:a4:7e:fb:74:dd:12:d6:d7:bd:d3:e9:7b:17:d5:
01:3a:3c:05:d3:29:34:66:18:28:e3:c9:28:e5:fc:
ec:a4:1e:41:7c:eb:5e:35:3d:64:29:e7:d0:c5:ad:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:CB:FB:CD:72:6C:B6:54:09:62:92:9D:0B:4A:81:91:35:FE:38
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ef:cb:f1:bc:0f:a8:96:ef:42:d4:f6:8b:96:44:71:40:a6:
ff:de:35:9d:e7:72:93:8f:85:33:a9:8f:47:95:67:6f:5b:a7:
ab:e8:0b:07:fe:72:38:89:e6:81:76:7e:6d:41:dc:06:00:c4:
98:8a:1d:84:5b:ab:c4:b3:88:b9:76:7b:d9:34:03:3c:e3:06:
b2:92:a1:6e:8a:c4:b1:2d:0e:91:bf:71:ff:2a:b8:6c:d9:0b:
2b:a0:5f:dc:71:a0:36:09:29:5e:d6:02:18:66:3e:d4:b4:dc:
e5:38:cd:92:2e:b3:9a:3a:68:7c:04:42:28:04:9b:61:84:89:
af:1a:29:68:83:7c:07:4f:f9:fd:d9:d6:fc:c5:6e:8a:64:36:
66:a0:f2:64:df:b7:4a:08:73:59:16:73:0a:5b:e0:c7:5d:2c:
52:04:3b:15:27:1c:c4:b3:b0:6f:9c:1a:7e:00:91:94:0f:b5:
67:84:9b:a0:5f:0d:81:11:03:c8:31:c4:44:e2:0b:a4:6f:6b:
fc:2a:a6:09:fe:a9:a5:f6:c8:96:8c:96:b1:5f:89:3a:a1:3a:
96:f1:36:9e:82:08:80:82:a8:df:89:75:f6:d0:5a:a3:30:da:
cf:67:ee:e6:7e:59:6a:ee:81:74:95:45:fb:2e:15:4e:9f:ba:
99:17:f7:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjYwNTEyMTQzMTA0WhcNMjYwNTE5MTQzMTA0WjAYMRYwFAYD
VQQDEw02YTAzMzlhOC00YjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7IwyC4RtkaqALDDp3CxPDTjRSBbYDJwRj2cdK0CB4ESYfbZCwLn9xfE2aPC
pSLxrys/UyMX+hKr7CIFg5ysbtlUhmm/1o0YB1A0mVppXor18GQ4oCjb9odL4RyU
f8D/RSGc8NIv4d0tdTR/l8UT24c+MQOrWNugSDzanihCgF1HhDBeWFuPCeRD6s01
bctngrAypU6+bh42512Brux2fPkhA96P5STK4cVJ2SW6Wu/egdjfaGKfj3mWD6nk
eyC2t9Fm5eQhH3dgSABe/Fbwz0BlpH77dN0S1te90+l7F9UBOjwF0yk0Zhgo48ko
5fzspB5BfOteNT1kKefQxa0wNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQ/y/vN
cmy2VAlikp0LSoGRNf44MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAju/L8bwPqJbvQtT2i5ZEcUCm/941nedyk4+FM6mPR5Vnb1unq+gLB/5yOInm
gXZ+bUHcBgDEmIodhFurxLOIuXZ72TQDPOMGspKhborEsS0Okb9x/yq4bNkLK6Bf
3HGgNgkpXtYCGGY+1LTc5TjNki6zmjpofARCKASbYYSJrxopaIN8B0/5/dnW/MVu
imQ2ZqDyZN+3SghzWRZzClvgx10sUgQ7FSccxLOwb5wafgCRlA+1Z4SboF8NgRED
yDHEROILpG9r/CqmCf6ppfbIloyWsV+JOqE6lvE2noIIgIKo34l19tBaozDaz2fu
5n5Zau6BdJVF+y4VTp+6mRf3BA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:28:16 2026 by rpki-client