
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json)
Hash identifier: 1kzjsqKez1C2uzIhZvijd/iqb+c0BEQyay1/7VBSbK4=
Subject key identifier: F5:21:A7:01:80:07:20:46:0A:BC:4B:E2:9F:64:5C:BF:5D:77:87:B2
Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
Manifest number: 0208
Signing time: Thu 23 Jul 2026 04:20:33 +0000
Manifest this update: Thu 23 Jul 2026 04:20:33 +0000
Manifest next update: Thu 30 Jul 2026 04:20:33 +0000
Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: uPqHM6JgThk/yJi42m8X9Xrfv/xXLv/MiTabS2TjGM4=)
2: uBjXwSK2dkrvdHR2yxPpHoA0_4U.asa (hash: YOXKkz0Fmo2/c6LztWniOULV+zi5rkCLcvFXCPhMNVI=)
3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: 5SIEytqj/kUtficVvfQzNkbf84VZDuhF0/ee1j7nlyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Validity
Not Before: Jul 23 04:20:33 2026 GMT
Not After : Jul 30 04:20:33 2026 GMT
Subject: CN=6a619691-574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:cc:51:2d:21:cd:88:11:ba:85:b8:ba:57:
20:ab:19:39:05:be:72:d0:d4:00:cc:57:cb:bc:ca:
6b:58:1e:4d:9b:df:52:b0:b2:6c:26:3c:77:0d:15:
40:38:10:5b:64:f0:18:6a:b0:a2:43:99:99:5e:fb:
19:e0:66:8c:31:52:04:95:89:d7:73:31:b2:56:14:
f2:08:68:6c:f6:7b:1a:73:9f:64:01:eb:63:8c:df:
4f:a7:84:ed:e0:d0:2a:da:fb:94:f5:df:36:eb:bc:
1f:00:82:2f:2f:ac:76:58:57:e6:89:e8:94:7f:6d:
bf:3d:3f:67:39:99:9c:7b:8e:47:a0:be:89:53:24:
58:54:ae:d4:58:f4:cd:fa:a3:80:70:24:70:6b:a5:
1a:11:af:a1:54:ca:09:01:00:36:53:92:a6:9a:d1:
74:bf:ac:38:20:1e:3e:e7:3d:5f:fa:76:5e:6c:9d:
b9:0e:ac:71:50:1a:bc:eb:40:bc:30:a9:cb:e3:b8:
d5:e3:52:32:82:92:a6:ca:2b:e1:9a:25:e5:6a:56:
98:78:0a:27:cc:3e:78:07:b9:07:60:0b:27:59:87:
40:d0:2e:d6:9a:d0:38:a3:f7:5c:c6:3c:c5:84:2b:
6d:d7:fc:47:88:50:3e:11:34:5e:98:91:34:2a:27:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:A7:01:80:07:20:46:0A:BC:4B:E2:9F:64:5C:BF:5D:77:87:B2
X509v3 Authority Key Identifier:
keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:33:c9:e2:01:56:ca:15:e1:a4:0c:d2:23:c4:72:01:e7:7e:
c2:cd:c7:f6:61:1d:f6:58:ef:09:2b:22:47:e1:4b:3b:87:68:
71:d4:61:4e:4c:b1:88:bb:73:33:e2:a5:3e:c2:58:ab:68:f6:
d4:98:c2:6c:8f:7f:ac:e7:08:da:fe:7b:9f:fc:75:04:86:02:
f9:be:07:59:38:ec:8c:bc:7d:75:13:d0:c0:e3:f4:b3:a4:93:
07:26:fb:28:bd:75:8a:1b:d0:79:b0:e7:eb:0a:6b:d0:81:57:
24:ad:57:18:63:72:e1:7e:1b:ca:01:87:54:4a:b3:7f:48:f5:
34:bf:07:10:1b:84:08:d1:56:3e:0e:57:92:e3:5b:d5:14:2d:
75:4b:09:b0:71:64:41:ad:c0:f4:8b:78:f1:4c:25:2b:52:a3:
3c:d9:cc:d3:57:f0:ae:b7:89:8e:e8:b6:77:5f:2a:c6:43:6d:
41:04:db:f0:0c:1e:9d:16:e8:b7:f0:8f:08:73:65:c9:27:e1:
93:7e:10:c9:b8:8c:23:6b:30:02:a0:15:48:48:9c:08:7c:01:
03:e3:b2:9c:00:40:ca:0d:ad:25:ac:53:50:15:be:e3:f8:bb:
ad:ac:59:e7:30:65:91:77:57:20:f8:e3:88:d6:26:7b:f8:4a:
ba:26:06:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy
QjI0RjY4MEIwHhcNMjYwNzIzMDQyMDMzWhcNMjYwNzMwMDQyMDMzWjAYMRYwFAYD
VQQDEw02YTYxOTY5MS01NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAln3MUS0hzYgRuoW4ulcgqxk5Bb5y0NQAzFfLvMprWB5Nm99SsLJsJjx3DRVA
OBBbZPAYarCiQ5mZXvsZ4GaMMVIElYnXczGyVhTyCGhs9nsac59kAetjjN9Pp4Tt
4NAq2vuU9d8267wfAIIvL6x2WFfmieiUf22/PT9nOZmce45HoL6JUyRYVK7UWPTN
+qOAcCRwa6UaEa+hVMoJAQA2U5KmmtF0v6w4IB4+5z1f+nZebJ25DqxxUBq860C8
MKnL47jV41IygpKmyivhmiXlalaYeAonzD54B7kHYAsnWYdA0C7WmtA4o/dcxjzF
hCtt1/xHiFA+ETRemJE0KidtfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUhpwGA
ByBGCrxL4p9kXL9dd4eyMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD
OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD
WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqzPJ4gFWyhXhpAzSI8RyAed+ws3H9mEd9ljvCSsiR+FLO4docdRhTkyxiLtz
M+KlPsJYq2j21JjCbI9/rOcI2v57n/x1BIYC+b4HWTjsjLx9dRPQwOP0s6STByb7
KL11ihvQebDn6wpr0IFXJK1XGGNy4X4bygGHVEqzf0j1NL8HEBuECNFWPg5XkuNb
1RQtdUsJsHFkQa3A9It48UwlK1KjPNnM01fwrreJjui2d18qxkNtQQTb8AwenRbo
t/CPCHNlySfhk34QybiMI2swAqAVSEicCHwBA+OynABAyg2tJaxTUBW+4/i7raxZ
5zBlkXdXIPjjiNYme/hKuiYGGw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:39 2026 by rpki-client