
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: af/N5n7WNdleY2MCqQCaI4185YjIOrhGboBB9/Is7IA=
Subject key identifier: 10:AA:DA:FB:41:24:68:8C:CC:C2:72:3D:F8:CB:2E:FC:85:7E:45:D5
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 352F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 3524
Signing time: Tue 24 Mar 2026 14:51:36 +0000
Manifest this update: Tue 24 Mar 2026 14:51:36 +0000
Manifest next update: Tue 31 Mar 2026 14:51:36 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: h1ghfvnIy4MqclcGjrxA680j4nf2KHe64ES995yus/w=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: 5ajoABIPQKy84nhI8bYLiigoWeWTj4zuppcdTO5917w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13615 (0x352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Validity
Not Before: Mar 24 14:51:36 2026 GMT
Not After : Mar 31 14:51:36 2026 GMT
Subject: CN=69c2a4f8-6ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:86:aa:7d:42:69:72:6c:80:2d:aa:05:7c:
f5:6e:63:1d:13:d5:73:87:53:70:8e:1c:b9:c1:55:
42:c5:0e:fa:19:43:7b:dd:36:35:e8:4c:9d:b0:48:
3d:9c:26:ab:00:db:1b:96:e6:ab:79:03:b0:df:4a:
e2:e9:a5:9c:0f:db:54:e4:c6:54:5f:ca:2e:5f:72:
9c:49:d4:10:d4:86:df:09:f6:d6:df:99:99:44:4e:
99:0c:0d:46:0c:a0:c3:a3:84:43:be:df:b9:ec:c5:
9e:ac:1b:07:d0:4e:4c:ec:0b:5c:25:72:e4:3f:58:
bf:1b:55:83:b9:b0:38:cd:97:4d:26:ab:b9:3d:e1:
60:10:86:d3:85:79:24:80:84:8f:5c:a4:d0:84:c1:
ec:e8:85:5c:45:60:7a:b2:3c:67:e9:fb:ed:7b:fd:
83:a7:97:78:16:89:6f:eb:35:2e:c2:a0:6a:58:61:
5d:99:c8:b1:c6:ee:29:90:7d:26:6f:88:f0:1d:d0:
1a:ee:14:cb:93:4d:1c:dc:69:b5:de:68:92:ac:04:
6a:5d:21:8e:a6:23:e4:fa:51:f4:1c:d2:ec:eb:16:
bf:6f:77:29:19:59:36:e9:91:80:0a:8c:57:f2:94:
84:6d:dd:4c:0b:f0:1b:72:03:ba:42:3e:60:5e:b2:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AA:DA:FB:41:24:68:8C:CC:C2:72:3D:F8:CB:2E:FC:85:7E:45:D5
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c4:b2:99:ea:f3:db:ba:8d:ab:7c:cc:ec:94:c1:be:48:90:
72:e5:8c:3b:3d:e6:f1:0c:7f:e4:9a:8f:5d:db:78:32:4d:60:
fb:ac:8c:91:9d:14:d8:d4:15:f7:50:98:3c:78:a0:54:e1:bb:
33:12:9f:6d:b2:c4:7e:7c:0b:1d:d2:e6:2b:22:06:89:6e:5a:
f5:1f:55:5e:12:1c:4a:20:7f:73:2a:6b:08:a7:21:94:8c:39:
0c:0c:41:e2:71:0b:21:9b:4e:44:06:73:b3:7c:0d:ec:10:57:
4b:79:49:f3:81:41:18:48:c5:6f:ea:ea:d2:c5:49:fc:99:ad:
b8:5b:b8:64:c9:ef:1e:7a:c5:42:a9:86:74:77:49:22:20:5e:
75:73:ed:f4:44:d7:27:3e:35:23:ae:5b:fc:a4:6f:52:33:d6:
f4:48:4d:cf:b2:98:3c:59:1e:5a:03:73:30:7a:dc:b2:ed:2f:
be:41:ac:14:9a:5f:1f:f3:85:76:de:94:82:22:ba:a9:8d:e9:
f1:15:42:60:23:1d:2b:6e:bf:d0:4a:1b:e9:b9:b0:63:5f:b4:
76:52:37:32:d3:f8:06:f6:92:a6:15:c6:ff:5d:81:da:7a:72:
7b:e8:ce:02:38:48:cf:f2:11:0f:1a:5b:2b:ed:ed:32:86:7f:
79:56:56:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE
RkNEOUUzOTYwHhcNMjYwMzI0MTQ1MTM2WhcNMjYwMzMxMTQ1MTM2WjAYMRYwFAYD
VQQDEw02OWMyYTRmOC02ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22iGqn1CaXJsgC2qBXz1bmMdE9Vzh1Nwjhy5wVVCxQ76GUN73TY16EydsEg9
nCarANsbluareQOw30ri6aWcD9tU5MZUX8ouX3KcSdQQ1IbfCfbW35mZRE6ZDA1G
DKDDo4RDvt+57MWerBsH0E5M7AtcJXLkP1i/G1WDubA4zZdNJqu5PeFgEIbThXkk
gISPXKTQhMHs6IVcRWB6sjxn6fvte/2Dp5d4Folv6zUuwqBqWGFdmcixxu4pkH0m
b4jwHdAa7hTLk00c3Gm13miSrARqXSGOpiPk+lH0HNLs6xa/b3cpGVk26ZGACoxX
8pSEbd1MC/AbcgO6Qj5gXrKZ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCq2vtB
JGiMzMJyPfjLLvyFfkXVMB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE
OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDI2Ny8xOTBFQUI1QzFEOTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196
VTdHTDBZZ29USnJmelo0NVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtMSymerz27qNq3zM7JTBvkiQcuWMOz3m8Qx/5JqPXdt4Mk1g+6yMkZ0U2NQV
91CYPHigVOG7MxKfbbLEfnwLHdLmKyIGiW5a9R9VXhIcSiB/cyprCKchlIw5DAxB
4nELIZtORAZzs3wN7BBXS3lJ84FBGEjFb+rq0sVJ/JmtuFu4ZMnvHnrFQqmGdHdJ
IiBedXPt9ETXJz41I65b/KRvUjPW9EhNz7KYPFkeWgNzMHrcsu0vvkGsFJpfH/OF
dt6UgiK6qY3p8RVCYCMdK26/0Eob6bmwY1+0dlI3MtP4BvaSphXG/12B2npye+jO
AjhIz/IRDxpbK+3tMoZ/eVZWHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:20:05 2026 by rpki-client