
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File: pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier: zanWXLSrfz4ll26yQ4x5GRsr+hcTPWmrEp50uGpWPp0=
Subject key identifier: E8:5A:C5:90:88:73:CE:22:82:A3:C4:27:C1:E0:B7:E7:F3:91:82:B9
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer: /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number: 53
Signing time: Mon 11 May 2026 08:23:27 +0000
Manifest this update: Mon 11 May 2026 08:23:27 +0000
Manifest next update: Mon 18 May 2026 08:23:27 +0000
Files and hashes: 1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: 7gWnNbW/Z66xdP4PxM0gV37v60BsCe+9jzjE0uDm6Lg=)
2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Validity
Not Before: May 11 08:23:27 2026 GMT
Not After : May 18 08:23:27 2026 GMT
Subject: CN=6a0191ff-809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:20:be:49:ff:9f:fd:f7:88:60:7b:c9:47:
40:46:63:b4:8b:f1:67:ca:45:fe:f6:38:5d:8b:33:
28:73:82:2f:90:af:76:0e:c5:e2:43:5d:94:f7:e3:
39:93:1b:80:0c:74:5f:6e:ff:40:dd:54:de:72:99:
be:93:4f:d3:f8:1d:9f:94:af:0c:34:2e:ee:32:87:
bb:4a:56:46:8a:78:5d:05:1b:eb:39:2b:c4:c3:65:
a8:42:1d:34:1a:4e:c9:9b:ba:9e:1a:c1:17:67:e8:
ca:8b:8b:a1:b9:38:5a:d1:12:96:e5:aa:4c:04:87:
5f:30:98:fb:f4:6c:ef:08:42:01:f0:b5:54:e5:cc:
5a:de:6a:58:05:39:96:9a:8d:a3:9c:66:01:eb:98:
24:40:57:d0:98:c6:a0:49:97:24:94:d0:1e:16:86:
0e:96:79:22:cd:a6:d2:30:4c:21:2e:90:ba:22:91:
73:d4:01:9a:84:82:8e:27:ca:15:60:df:ac:b0:e4:
6f:e3:19:0b:ba:88:9e:84:af:ff:e6:54:4a:70:06:
d6:37:35:2f:dd:6e:14:2b:19:0b:d1:cf:e4:8c:55:
4e:81:30:b1:15:ca:4d:a0:c6:36:39:04:24:32:d2:
2a:7d:88:63:f4:1f:2a:20:18:02:35:62:35:bb:74:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:C5:90:88:73:CE:22:82:A3:C4:27:C1:E0:B7:E7:F3:91:82:B9
X509v3 Authority Key Identifier:
keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:72:18:8c:4e:92:3c:4b:2b:37:77:32:a8:0b:b0:8d:4f:
dc:ee:16:6b:37:ee:c7:b8:b8:bb:65:33:1a:f1:27:2d:3e:eb:
14:cc:2b:d6:e5:04:81:2a:9d:a1:3d:bc:09:d2:9d:9e:8d:a0:
81:82:a3:ed:c4:4c:ff:d8:4b:09:30:11:96:a6:d5:2d:d0:35:
a8:af:c0:a2:cb:45:7a:32:c7:a9:e7:cc:24:55:33:5f:77:0a:
a7:ff:77:bb:e8:11:b1:7c:52:05:6d:32:ca:a1:03:f3:92:75:
c7:1e:da:dd:a9:70:78:ae:1b:2f:aa:15:96:fc:1b:9f:69:15:
13:73:85:b6:0f:4d:00:bd:3f:07:65:2a:69:8f:f7:85:c2:21:
9d:1f:b6:2c:5f:19:48:0e:9f:cc:7b:17:5e:b2:e7:0f:24:6f:
e3:c8:08:72:27:10:97:ca:fa:ca:71:b0:78:69:97:ce:50:16:
3e:91:cc:d5:49:6e:bc:e1:7b:dd:5c:aa:df:4b:0c:4b:d0:4f:
ae:8f:d3:a4:95:63:c3:20:ec:21:95:73:74:84:c7:22:36:fa:
84:01:b1:d4:06:6f:73:b6:46:54:f0:27:30:12:6f:62:74:b4:
8e:40:9e:40:61:c1:4b:94:77:17:a7:13:75:13:c8:52:42:f7:
5f:3c:ff:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QUJBQTExMC8GA1UEBRMoQTRFOEVCQzNBNzM5NzU5OTkwNERBNkM3Njk0ODk1QkJD
OUU5MTNFRTAeFw0yNjA1MTEwODIzMjdaFw0yNjA1MTgwODIzMjdaMBgxFjAUBgNV
BAMTDTZhMDE5MWZmLTgwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXByC+Sf+f/feIYHvJR0BGY7SL8WfKRf72OF2LMyhzgi+Qr3YOxeJDXZT34zmT
G4AMdF9u/0DdVN5ymb6TT9P4HZ+Urww0Lu4yh7tKVkaKeF0FG+s5K8TDZahCHTQa
Tsmbup4awRdn6MqLi6G5OFrREpblqkwEh18wmPv0bO8IQgHwtVTlzFrealgFOZaa
jaOcZgHrmCRAV9CYxqBJlySU0B4Whg6WeSLNptIwTCEukLoikXPUAZqEgo4nyhVg
36yw5G/jGQu6iJ6Er//mVEpwBtY3NS/dbhQrGQvRz+SMVU6BMLEVyk2gxjY5BCQy
0ip9iGP0HyogGAI1YjW7dNMVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6FrFkIhz
ziKCo8QnweC35/ORgrkwHwYDVR0jBBgwFoAUpOjrw6c5dZmQTabHaUiVu8npE+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzRDNENBREE4RDE5
RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFptUVRhYkhhVWlWdThucEUt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcE9qcnc2YzVkWm1RVGFiSGFVaVZ1OG5wRS00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB
QkFBLzRDNENBREE4RDE5RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFpt
UVRhYkhhVWlWdThucEUtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBR7HIYjE6SPEsrN3cyqAuwjU/c7hZrN+7HuLi7ZTMa8SctPusUzCvW5QSBKp2h
PbwJ0p2ejaCBgqPtxEz/2EsJMBGWptUt0DWor8Ciy0V6Msep58wkVTNfdwqn/3e7
6BGxfFIFbTLKoQPzknXHHtrdqXB4rhsvqhWW/BufaRUTc4W2D00AvT8HZSppj/eF
wiGdH7YsXxlIDp/MexdesucPJG/jyAhyJxCXyvrKcbB4aZfOUBY+kczVSW684Xvd
XKrfSwxL0E+uj9OklWPDIOwhlXN0hMciNvqEAbHUBm9ztkZU8CcwEm9idLSOQJ5A
YcFLlHcXpxN1E8hSQvdfPP/7
-----END CERTIFICATE-----
Generated at Wed May 13 03:44:12 2026 by rpki-client