
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier: VVJ9RfWtssqzrh4wihqLxtNwTYLA5C697BP+2nD/yb8=
Subject key identifier: 44:4C:4A:BF:1C:1C:10:8B:54:86:6D:CB:37:B0:5A:0D:6C:89:72:D7
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number: 0104
Signing time: Thu 23 Jul 2026 07:55:39 +0000
Manifest this update: Thu 23 Jul 2026 07:55:38 +0000
Manifest next update: Thu 30 Jul 2026 07:55:38 +0000
Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: Fm4ARqAMiZun25tJ2NkztVxVs3uVhALFA04IJeWba3s=)
2: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=)
3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=)
4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Validity
Not Before: Jul 23 07:55:38 2026 GMT
Not After : Jul 30 07:55:38 2026 GMT
Subject: CN=6a61c8fb-1183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:77:15:30:7a:8a:8b:ff:98:bc:bb:30:24:
cc:ae:e1:80:d0:38:41:d6:7c:4d:b1:c3:c8:de:da:
78:ff:70:88:16:ac:fe:ef:90:ef:af:6d:09:c1:fa:
b5:43:7b:09:a8:6f:43:87:32:b0:e2:75:09:b2:ec:
88:6d:c6:65:82:21:3b:96:5a:cd:77:ca:e8:03:f4:
cc:c4:c8:80:42:73:b6:81:96:6a:8c:5a:c5:78:b9:
50:bc:27:80:20:46:7c:47:b2:15:37:4e:53:02:8e:
0b:47:42:40:27:83:be:f9:34:4c:79:de:a6:ac:1c:
52:49:7d:e6:5c:ae:0b:64:c9:45:15:ae:b1:01:0f:
e1:6c:39:12:7d:07:0f:13:f3:11:71:45:a9:6b:33:
a4:2f:39:f4:76:4f:4e:bb:33:9b:4b:50:b3:ea:45:
16:a5:bf:c9:46:29:b9:2c:10:20:a9:91:c7:57:c2:
97:e7:bc:c3:1d:32:b4:6e:01:86:9e:20:18:60:7d:
db:ae:db:ce:f0:69:2b:2a:b8:76:ad:15:26:af:38:
96:9d:9a:a6:fa:82:c4:a3:58:85:4c:7f:4d:4f:5a:
aa:49:bc:ac:7e:c0:63:0a:12:fd:59:e2:a9:0d:a7:
52:84:6e:1b:1f:4f:c7:85:8b:ce:07:3b:f4:c3:ca:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:4A:BF:1C:1C:10:8B:54:86:6D:CB:37:B0:5A:0D:6C:89:72:D7
X509v3 Authority Key Identifier:
keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:52:5d:12:e2:47:2b:91:ed:68:60:17:2e:ac:f6:03:57:d1:
2a:04:f8:22:14:17:1d:c0:10:59:c4:a4:b0:53:2e:15:95:e6:
10:15:2e:b2:d8:39:bf:72:ba:4e:ed:e6:ad:f4:fc:38:3e:b4:
f2:89:29:41:38:9f:f7:89:75:a9:37:6d:ba:18:51:f9:ee:5e:
1a:5b:85:d8:83:42:a6:f0:d4:a1:5c:19:63:a5:dd:f9:bd:a2:
94:ff:75:47:79:dc:ab:3b:86:ff:79:87:90:4b:fa:54:fa:f1:
8c:40:dd:90:8d:0b:e5:b1:29:42:fb:e6:6a:7b:c3:37:b0:05:
98:d0:30:ae:7b:08:32:0a:9a:4c:8d:d1:4f:13:07:f2:46:c8:
87:23:ae:d6:af:74:58:33:e0:f6:c9:a3:f6:87:85:d9:0b:ef:
bd:1a:d2:5d:1f:25:d2:70:d0:ce:ec:b5:cc:7d:0c:54:7a:56:
de:d9:50:e0:9c:23:bc:82:d2:ba:21:31:a7:65:6a:2f:f5:23:
c6:fc:61:c0:28:17:ea:a1:b9:0a:0b:e6:33:04:4f:a9:bb:4b:
97:2f:ad:ac:ea:e7:a3:5e:0a:32:f1:41:7e:e8:ba:1c:51:d5:
15:3e:22:f9:15:f3:a3:14:d4:f0:44:f2:68:42:83:2e:21:1b:
44:1b:78:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF
NDBGN0I2QkQwHhcNMjYwNzIzMDc1NTM4WhcNMjYwNzMwMDc1NTM4WjAYMRYwFAYD
VQQDEw02YTYxYzhmYi0xMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwx3FTB6iov/mLy7MCTMruGA0DhB1nxNscPI3tp4/3CIFqz+75Dvr20Jwfq1
Q3sJqG9DhzKw4nUJsuyIbcZlgiE7llrNd8roA/TMxMiAQnO2gZZqjFrFeLlQvCeA
IEZ8R7IVN05TAo4LR0JAJ4O++TRMed6mrBxSSX3mXK4LZMlFFa6xAQ/hbDkSfQcP
E/MRcUWpazOkLzn0dk9OuzObS1Cz6kUWpb/JRim5LBAgqZHHV8KX57zDHTK0bgGG
niAYYH3brtvO8GkrKrh2rRUmrziWnZqm+oLEo1iFTH9NT1qqSbysfsBjChL9WeKp
DadShG4bH0/HhYvOBzv0w8oAQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERMSr8c
HBCLVIZtyzewWg1siXLXMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG
RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1
cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXlJdEuJHK5HtaGAXLqz2A1fRKgT4IhQXHcAQWcSksFMuFZXmEBUustg5v3K6
Tu3mrfT8OD608okpQTif94l1qTdtuhhR+e5eGluF2INCpvDUoVwZY6Xd+b2ilP91
R3ncqzuG/3mHkEv6VPrxjEDdkI0L5bEpQvvmanvDN7AFmNAwrnsIMgqaTI3RTxMH
8kbIhyOu1q90WDPg9smj9oeF2QvvvRrSXR8l0nDQzuy1zH0MVHpW3tlQ4JwjvILS
uiExp2VqL/UjxvxhwCgX6qG5CgvmMwRPqbtLly+trOrno14KMvFBfui6HFHVFT4i
+RXzoxTU8ETyaEKDLiEbRBt4tw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:03 2026 by rpki-client