
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier: 0GSZ/e4vDxzjxI6BDudsckT7nEQwfHv45xZ4SPZGqRM=
Subject key identifier: 6E:16:9F:DC:D6:29:C3:B6:05:E4:A5:DF:48:44:33:74:96:41:97:A4
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 35A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number: 3585
Signing time: Fri 24 Jul 2026 14:32:36 +0000
Manifest this update: Fri 24 Jul 2026 14:32:35 +0000
Manifest next update: Fri 31 Jul 2026 14:32:35 +0000
Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: BXcBfTgBkKId2ZCglX1fTRj/9vP0SbTfgHeZfiXgqlY=)
2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=)
3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13733 (0x35a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: Jul 24 14:32:35 2026 GMT
Not After : Jul 31 14:32:35 2026 GMT
Subject: CN=6a637783-d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:64:bf:8b:c3:57:11:e7:28:71:17:bd:1d:
a8:ec:d5:6c:74:3e:07:e0:fc:d1:3d:e7:40:22:be:
b0:bf:fd:fa:32:54:c7:57:9f:e9:d6:9f:a1:19:01:
2f:7d:7b:57:14:4f:33:e9:bd:79:1f:5d:96:ab:fe:
a5:64:db:aa:9d:23:5d:95:3d:b7:d2:95:1c:6f:9a:
d1:18:2c:a4:81:1e:54:24:09:a4:22:76:97:7a:61:
3d:d8:68:7e:49:2c:f0:60:f8:dc:51:73:5e:1d:a9:
69:f4:36:2b:9f:cf:d9:a5:28:0d:c2:d7:f7:f7:cb:
4a:57:52:c7:bd:e9:2b:ce:ae:95:0c:86:0d:41:dc:
90:ba:c1:4e:32:93:11:10:e5:c0:b8:94:04:49:c7:
a2:1b:54:c3:ad:8f:3d:5e:6c:1b:18:ed:b3:5a:f6:
d9:73:a0:c4:80:a1:6c:0b:4e:37:02:06:fd:74:98:
64:5a:ba:89:96:f6:6c:3a:d3:de:79:5d:80:f4:ea:
3a:85:3a:35:0e:56:7c:1b:fb:54:08:a3:35:11:40:
8f:fe:7f:a8:06:7b:39:96:c1:ac:b9:bf:87:7d:58:
d4:54:94:1e:74:9a:48:c8:57:cd:ef:8b:63:e3:db:
5b:47:b8:49:81:ed:b0:6a:ac:3b:af:d5:6d:01:e6:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:9F:DC:D6:29:C3:B6:05:E4:A5:DF:48:44:33:74:96:41:97:A4
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:8d:23:71:9d:6a:34:9f:45:b6:a7:01:cc:4d:68:b5:39:
ec:0d:bc:d2:29:96:97:1b:5d:fe:93:87:6b:e1:ca:ea:60:74:
79:ec:1b:37:45:a0:bd:0b:b4:df:b8:aa:f0:60:b4:99:d2:dc:
ca:ad:41:84:55:46:dc:35:21:bd:4f:3a:54:45:0e:2c:1a:64:
c7:27:d8:87:58:32:e8:70:c5:3a:35:f7:b4:7d:1d:e4:49:bb:
2c:b4:c4:7a:a4:6b:11:fc:28:64:f3:97:9a:57:9a:44:39:00:
16:6c:6c:85:d7:9b:69:2f:5a:8e:66:98:1a:15:65:6c:1f:eb:
1c:81:08:7b:8e:59:24:8c:f1:bc:95:7b:3e:e8:01:a6:a9:7d:
b5:ad:11:70:11:e0:36:e1:2c:9e:59:57:47:48:40:3f:e7:e9:
f2:9e:cf:91:fb:54:8a:4a:54:00:a3:92:c2:d9:c5:6b:18:18:
6a:4c:4a:cd:ee:c6:36:4c:28:ad:8b:d3:ec:93:7b:46:ce:03:
29:85:b9:77:43:60:b6:16:e5:e4:ef:49:d4:e6:75:36:01:d3:
b4:3d:33:3d:b4:aa:64:dc:d9:53:f2:f2:35:4e:e9:5d:15:f8:
15:b2:65:53:6f:2a:2e:97:71:99:49:d8:b0:17:21:b6:03:68:
36:d4:e7:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjYwNzI0MTQzMjM1WhcNMjYwNzMxMTQzMjM1WjAYMRYwFAYD
VQQDEw02YTYzNzc4My1kMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt11kv4vDVxHnKHEXvR2o7NVsdD4H4PzRPedAIr6wv/36MlTHV5/p1p+hGQEv
fXtXFE8z6b15H12Wq/6lZNuqnSNdlT230pUcb5rRGCykgR5UJAmkInaXemE92Gh+
SSzwYPjcUXNeHalp9DYrn8/ZpSgNwtf398tKV1LHvekrzq6VDIYNQdyQusFOMpMR
EOXAuJQESceiG1TDrY89XmwbGO2zWvbZc6DEgKFsC043Agb9dJhkWrqJlvZsOtPe
eV2A9Oo6hTo1DlZ8G/tUCKM1EUCP/n+oBns5lsGsub+HfVjUVJQedJpIyFfN74tj
49tbR7hJge2waqw7r9VtAeb+zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4Wn9zW
KcO2BeSl30hEM3SWQZekMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPkiNI3GdajSfRbanAcxNaLU57A280imWlxtd/pOHa+HK6mB0eewbN0WgvQu0
37iq8GC0mdLcyq1BhFVG3DUhvU86VEUOLBpkxyfYh1gy6HDFOjX3tH0d5Em7LLTE
eqRrEfwoZPOXmleaRDkAFmxshdebaS9ajmaYGhVlbB/rHIEIe45ZJIzxvJV7PugB
pql9ta0RcBHgNuEsnllXR0hAP+fp8p7PkftUikpUAKOSwtnFaxgYakxKze7GNkwo
rYvT7JN7Rs4DKYW5d0Ngthbl5O9J1OZ1NgHTtD0zPbSqZNzZU/LyNU7pXRX4FbJl
U28qLpdxmUnYsBchtgNoNtTnrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:05 2026 by rpki-client