
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json)
Hash identifier: wwAmle0hl1LERv+9W0Ei/lJylcuGkMEJpwG9SqyKiMQ=
Subject key identifier: 11:6E:14:EC:67:34:4E:F6:7A:73:EA:39:83:E8:29:57:59:BF:A9:89
Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
Manifest number: 022B
Signing time: Wed 23 Sep 2026 02:37:19 +0000
Manifest this update: Wed 23 Sep 2026 02:37:18 +0000
Manifest next update: Wed 30 Sep 2026 02:37:18 +0000
Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: bD675zvKHpfIpbktBukIwB7f5y0aVIVzt+5xXFazZN4=)
2: NqbP4HOf_Jyjeg4GFVPMlc9Aumk.asa (hash: QSUd3sZtQESOmMmY99Q78BF0wQT6wi4H0X2SGisgJkA=)
3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: LW+WmGu6YlC9wjX0P0Tmes41deKyVjQFb3wGnRpYkOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Validity
Not Before: Sep 23 02:37:18 2026 GMT
Not After : Sep 30 02:37:18 2026 GMT
Subject: CN=6ab33b5f-729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:04:57:55:82:95:50:f4:4d:3b:c6:78:44:
ec:9b:93:0d:ea:10:b0:e1:dc:72:93:6a:0c:10:8c:
c2:7b:b2:b9:4d:be:43:f9:dd:e8:43:48:d5:ce:0f:
fe:a4:75:da:66:e3:00:bc:df:1a:36:cb:45:8a:09:
2e:9c:a1:33:0a:be:b4:40:c8:e8:65:b7:b2:d7:43:
d6:d6:2f:fa:11:11:25:e7:bb:a1:d1:a2:b0:7a:93:
16:27:f2:a0:9b:c7:70:7d:80:86:cb:72:bc:8b:01:
55:03:10:0a:12:85:6f:d6:37:d6:38:02:c0:9d:65:
3b:df:e6:a8:ea:9d:e3:dc:7b:b3:90:6f:c3:8a:ca:
45:17:42:f8:07:df:65:68:0d:1d:0b:a3:cc:16:08:
5f:09:80:2e:88:6d:f3:20:41:cc:29:9e:8e:99:73:
28:ed:0d:fb:7c:a2:62:d3:17:ca:7f:f7:0c:79:27:
7a:fb:13:60:49:c8:70:05:e9:96:36:79:90:f4:39:
d3:6c:64:e2:25:9a:f7:81:7a:63:e2:c1:89:b4:c8:
1c:92:7d:32:1f:b6:99:92:e2:bc:36:15:e6:92:a5:
0b:27:3d:20:0e:bd:44:e2:ce:07:fa:26:8a:54:f1:
57:e0:fa:71:a6:62:4a:0e:7d:f5:9d:a5:18:d3:54:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:14:EC:67:34:4E:F6:7A:73:EA:39:83:E8:29:57:59:BF:A9:89
X509v3 Authority Key Identifier:
keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:02:9f:fa:a5:18:62:59:38:ee:60:c4:a5:bc:c6:35:5e:
1d:6a:b1:f0:62:31:44:78:09:c6:23:cb:66:58:8f:b3:29:d0:
16:07:65:62:2c:31:fa:c8:06:50:d5:df:bf:11:3e:04:08:85:
1b:42:bb:01:63:9b:cb:6d:7f:38:1b:da:a4:97:5a:36:2f:1a:
a8:29:a9:89:63:d2:ea:f5:d1:ed:2e:b8:c8:41:9e:74:04:85:
b1:8f:b5:74:92:80:8a:65:e6:61:ee:1e:f1:20:77:09:a1:2a:
b7:d2:d4:7d:df:8c:b1:d9:30:19:35:ba:d3:1b:0b:56:71:af:
4c:8e:3b:f5:d9:ef:15:96:45:2f:a9:74:28:3a:23:c3:7f:da:
9e:7e:d6:36:ac:fd:a2:f0:e8:40:fe:e1:3d:4a:69:64:86:01:
14:1d:ae:af:e0:4c:9a:ee:aa:ef:7f:60:e3:e0:ed:12:11:2d:
86:e6:09:64:1a:d4:33:0b:d3:74:a4:b3:2a:bb:b5:fd:9f:ca:
a0:4b:5b:45:98:af:bd:f2:84:14:c4:0e:9b:c7:9b:8d:b0:27:
90:71:6a:4e:16:34:bb:49:09:3a:ba:4d:ff:45:75:c6:88:32:
b2:fe:57:d9:16:92:ff:f8:b2:6b:be:48:b9:40:07:af:4c:4f:
47:51:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:16:17 2026 by rpki-client