
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier: 71nGtedGJ9WQO+Z9xiqMRfU7WGxZo/nx9kjrB2e2NB0=
Subject key identifier: E0:5E:98:8E:D8:B4:48:D0:D0:F8:46:70:EF:A7:12:C8:E3:51:FD:13
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 04C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number: 04BE
Signing time: Tue 22 Sep 2026 23:30:36 +0000
Manifest this update: Tue 22 Sep 2026 23:30:36 +0000
Manifest next update: Tue 29 Sep 2026 23:30:36 +0000
Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: CfoB8LpfU4huSrk+EfddzT6Oq3fAE0eu6MdfgLMi7TM=)
2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Validity
Not Before: Sep 22 23:30:36 2026 GMT
Not After : Sep 29 23:30:36 2026 GMT
Subject: CN=6ab30f9c-89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:a8:55:10:55:ae:78:87:6a:8f:f4:1d:4a:
8a:4b:9a:ef:99:06:90:e3:cc:66:41:a6:ae:ef:65:
c7:86:77:f1:d4:fc:71:1a:a1:1b:6a:34:29:2d:b7:
b2:ab:fe:91:0e:bb:ac:95:ad:c1:da:62:e7:40:56:
84:c8:c3:fc:c6:53:27:db:15:7f:38:0e:cc:43:23:
67:f0:90:fd:9e:9e:64:db:00:44:0d:53:29:73:78:
f2:26:b7:7c:e5:89:e6:06:b4:9e:98:07:c4:16:82:
dd:4a:f1:96:45:40:6a:1e:6d:6a:73:0f:a7:3a:52:
02:b7:8a:b6:cf:6a:60:73:75:5a:01:f3:82:19:32:
57:61:5d:72:77:9a:70:ee:57:2f:9c:78:f1:ae:5d:
24:62:fb:bf:0e:f2:be:54:2f:18:e6:89:ce:4a:40:
c4:75:94:9c:e1:62:2f:ca:e8:73:51:68:7d:11:30:
0e:d9:13:1a:ec:ec:5e:6e:92:30:05:66:20:84:6c:
16:7d:35:9d:d4:e3:8c:66:d2:a3:89:40:98:34:fc:
f9:7e:87:fd:03:3b:d0:c9:8f:5d:ee:3d:7e:7f:fa:
a4:3c:f0:8e:f2:02:23:44:e1:2f:23:87:a9:8e:19:
5e:cc:7a:c3:a0:6d:4c:8a:52:85:c5:e8:34:66:1a:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:98:8E:D8:B4:48:D0:D0:F8:46:70:EF:A7:12:C8:E3:51:FD:13
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:e6:74:94:4e:1c:bf:6d:51:f6:f3:83:fc:77:bb:2d:f6:
18:8c:34:e3:a6:f1:c8:ac:cc:c8:71:bf:52:d8:74:bf:82:01:
d1:66:b4:da:b1:4e:35:2b:d1:b2:11:1a:16:76:f7:fb:30:72:
3e:82:57:4f:33:17:d0:5f:3e:56:1e:55:b9:1a:04:b8:f0:7b:
eb:0a:60:34:f0:81:81:36:1f:25:42:e4:4c:f6:6c:13:9c:49:
66:b2:04:06:8a:55:5f:78:26:3d:0b:6b:8d:4b:ec:f1:bd:13:
73:75:09:08:c8:00:fc:5a:81:bf:ee:b2:dd:6f:b4:04:b3:43:
0e:47:87:d9:88:5e:6d:b6:23:76:9a:ad:20:c7:d3:74:e9:a1:
e6:7e:a9:68:f8:dd:75:45:59:7f:88:60:89:08:9f:94:9f:00:
11:7c:1a:5b:32:b9:cf:9f:eb:e9:16:29:6f:59:00:05:38:92:
1e:3d:5f:18:de:ec:b8:65:27:b6:72:7e:ee:26:d9:74:14:87:
ae:48:61:39:87:88:92:d1:a3:1b:77:bd:f5:2e:8d:45:77:f2:
99:85:78:de:e0:88:2c:a9:6e:05:68:c7:72:ee:d4:b9:5f:9a:
cf:4d:7b:a1:3d:a4:30:6c:ae:59:c5:06:36:c7:65:b8:86:74:
e1:da:c7:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5
MkRERUJERkMwHhcNMjYwOTIyMjMzMDM2WhcNMjYwOTI5MjMzMDM2WjAYMRYwFAYD
VQQDEw02YWIzMGY5Yy04OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1SoVRBVrniHao/0HUqKS5rvmQaQ48xmQaau72XHhnfx1PxxGqEbajQpLbey
q/6RDrusla3B2mLnQFaEyMP8xlMn2xV/OA7MQyNn8JD9np5k2wBEDVMpc3jyJrd8
5YnmBrSemAfEFoLdSvGWRUBqHm1qcw+nOlICt4q2z2pgc3VaAfOCGTJXYV1yd5pw
7lcvnHjxrl0kYvu/DvK+VC8Y5onOSkDEdZSc4WIvyuhzUWh9ETAO2RMa7OxebpIw
BWYghGwWfTWd1OOMZtKjiUCYNPz5fof9AzvQyY9d7j1+f/qkPPCO8gIjROEvI4ep
jhlezHrDoG1MilKFxeg0ZhodBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBemI7Y
tEjQ0PhGcO+nEsjjUf0TMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC
Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj
LWhNek1MbU5zMkdTM2V2ZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgw/mdJROHL9tUfbzg/x3uy32GIw046bxyKzMyHG/Uth0v4IB0Wa02rFONSvR
shEaFnb3+zByPoJXTzMX0F8+Vh5VuRoEuPB76wpgNPCBgTYfJULkTPZsE5xJZrIE
BopVX3gmPQtrjUvs8b0Tc3UJCMgA/FqBv+6y3W+0BLNDDkeH2YhebbYjdpqtIMfT
dOmh5n6paPjddUVZf4hgiQiflJ8AEXwaWzK5z5/r6RYpb1kABTiSHj1fGN7suGUn
tnJ+7ibZdBSHrkhhOYeIktGjG3e99S6NRXfymYV43uCILKluBWjHcu7UuV+az017
oT2kMGyuWcUGNsdluIZ04drHaQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:38 2026 by rpki-client