
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: lF/p5Q6ncekfG32+02Cc8WkDVWJgnKZJcNvMZetKIYM=
Subject key identifier: B6:BB:FD:F7:51:48:F5:58:83:DE:4C:46:9E:CF:B8:88:2E:17:EF:A4
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 03DB
Signing time: Thu 23 Jul 2026 01:43:47 +0000
Manifest this update: Thu 23 Jul 2026 01:43:46 +0000
Manifest next update: Thu 30 Jul 2026 01:43:46 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: xi/M6/7p0XZw/yoK0b5P2FeE2ONVmfZctAgRwXzStas=)
2: B111111288B411EF80480527C4F9AE02.roa (hash: xJMBIq+z+Hr5KMjAaKBxe80ZwBF0kEHvPHKxaRo9DIQ=)
3: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: eo97g9UlZshMJA4HXsGwl2EqgsYxkz3OFQu0ZT7ioY4=)
4: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: AKoZyPuf4M9ZcEU/leMev9H1xz48aswraZiTQr7vftg=)
5: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: a0HTQdr8HylIpzgbI0QRxkVKLMCusDxHj8vJRj2eoYc=)
6: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: eKDAjFI7uLbjlMqzaXqO/giEMIaCgnJ47zdh3OypaOI=)
7: FFB2452E76BB11F1A17B5E6873A30FBC.roa (hash: 1jx7Q5GTG9FoSXhVLt0YV+Ffy9uOjyaP2JUiDvYshOY=)
8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: xU1zjA76l+0iM9bsFjOEAgjkfSx72d/teh/7jiFl8qs=)
9: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: pJq2I6/phF6xwFXAl6PEEV/RgzAR5E+0Z+tE1UwO0T8=)
10: F2F59366E93211F0977E0D6F386F56BC.roa (hash: SaqwUER8FXoCY8XMwl3VUuOZz0WZkKo6QxxCfB6IRAo=)
11: 72CB1E1C7B5011F1B2F9C2DC58A30FBC.roa (hash: dORDFnaaxQGY4vjjFr7BGYntkVIFxkqdlRTgdg+fLbo=)
12: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: brgVDCGXixcbJRNF8ggHKQFgFrzS4R9OgM/PcYC5nQc=)
13: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: 9E7fitqPq9ar/Ob4y6a6R4Pwq8T7ZTTzFgXU4K5+Oug=)
14: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: H7MTLgBvJqkX/zlXhQ1M+AoAUBypYzZNCTAi5k1DtyM=)
15: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CDOHJRFPLioKIq0PuStTWBZGQbhh1O/85ZcAsgFBOoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 23 01:43:46 2026 GMT
Not After : Jul 30 01:43:46 2026 GMT
Subject: CN=6a6171d3-1058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:a5:ff:7b:06:e6:99:a8:fa:12:72:f8:57:
9f:ea:c8:47:c1:35:3a:d3:02:cd:fa:bf:66:82:30:
b0:66:dc:71:e5:7d:56:ab:cc:72:50:dd:a5:d6:3b:
a8:89:e4:35:dd:5e:c9:49:a5:ea:bf:5b:48:c0:fe:
4a:70:15:19:7e:7c:d9:a0:95:40:bd:c5:ec:73:7a:
f6:d4:07:ec:06:18:90:32:eb:9c:f7:5c:d1:85:86:
2c:ab:df:55:ae:1f:ec:63:84:04:38:f7:63:98:2e:
6a:b3:3b:a1:59:4a:21:75:f0:c3:2d:db:1f:6f:86:
3d:25:64:6c:d3:e7:a4:18:b9:d2:a2:1f:79:81:7e:
83:cb:77:bb:0d:60:3c:b4:d2:8a:cd:7d:2e:cc:3b:
e0:5c:bd:c3:c8:ed:77:d8:11:70:ee:e3:68:1d:45:
f0:0e:53:92:60:2d:79:fb:15:ab:6c:9f:6a:62:9c:
84:07:19:93:d9:33:89:9d:79:be:15:76:33:e5:13:
d4:ed:68:c8:1e:7c:c1:49:c7:a6:3c:f2:16:64:93:
66:e0:5a:3f:e0:53:a2:b3:e6:5a:85:c9:6b:84:0d:
72:43:d4:50:ec:01:9f:9f:2d:70:d8:b5:b1:3a:40:
cf:7f:a8:3b:6b:da:94:8f:bf:67:9f:0a:ae:77:d8:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BB:FD:F7:51:48:F5:58:83:DE:4C:46:9E:CF:B8:88:2E:17:EF:A4
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:dc:a5:62:dc:88:32:af:4e:23:6e:e7:27:02:26:3a:16:
ad:b8:2f:45:03:18:26:e7:07:23:f0:08:a5:3a:3e:4a:84:4c:
79:df:85:d7:da:c4:f4:1f:18:f3:70:2a:1f:72:23:96:ac:8a:
4e:1c:58:95:c2:45:78:f9:25:5a:98:12:08:29:76:73:a6:58:
f3:d6:a7:98:68:3e:fb:09:4f:c1:25:c6:f7:6a:d3:4b:7b:76:
6f:0f:dc:b0:27:e2:28:a8:a8:3f:be:96:b3:a7:10:39:d1:ef:
a2:44:b1:d3:ad:dd:5a:e1:3c:ec:93:2b:f1:f0:85:75:01:e8:
ae:37:f9:43:d4:00:ca:00:b7:0b:44:8c:61:a4:19:23:de:9f:
19:7c:22:9e:57:c4:b5:74:25:33:66:58:12:55:ed:81:7b:6e:
04:63:67:a5:84:08:dc:28:6f:0a:4f:04:cd:d6:b5:a9:40:83:
f2:fb:0d:2d:a9:aa:fb:56:7c:b5:29:96:06:cd:e9:2d:2b:a9:
6a:4e:d0:93:ba:53:a8:c9:fc:cd:61:ab:57:a2:8e:97:78:cc:
5d:01:01:c7:0a:95:98:31:cd:18:a6:af:1e:af:5b:14:97:1d:
30:d9:ec:26:f0:f9:a5:96:92:52:98:14:71:a7:b0:2e:47:a2:
17:52:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:29 2026 by rpki-client