
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json)
Hash identifier: 5IQNVn3OHiQVLWJoEShgJEO/9uX4Iyk48qGEIrAZOe4=
Subject key identifier: 23:99:C4:A9:69:AD:B6:8D:A8:A6:EF:B5:E2:60:21:F3:CE:C9:10:EA
Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
Manifest number: 0135
Signing time: Thu 23 Jul 2026 07:12:23 +0000
Manifest this update: Thu 23 Jul 2026 07:12:22 +0000
Manifest next update: Thu 30 Jul 2026 07:12:22 +0000
Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: b2lSHnJbPvaGV/AesQwfoHSi1uWNEQmcF8pdpzaZQ0M=)
2: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=)
3: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Validity
Not Before: Jul 23 07:12:22 2026 GMT
Not After : Jul 30 07:12:22 2026 GMT
Subject: CN=6a61bed7-bafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:13:d0:e6:c0:be:1f:10:48:49:92:6a:04:
db:54:34:2d:ba:65:64:8d:60:3f:da:41:5f:79:e3:
20:58:61:12:91:87:93:70:19:84:ef:59:e1:ed:cb:
1e:d8:08:89:a8:9a:8f:41:fb:00:02:d7:c7:5d:cb:
6a:3a:48:82:92:a0:69:09:ae:36:6f:7a:ac:2a:c2:
01:18:00:da:56:31:96:d3:46:77:d7:98:10:08:04:
de:99:3b:8b:ea:01:30:15:b5:f6:be:1a:b5:97:b1:
eb:24:f9:63:40:b2:bb:4b:a5:6d:95:bf:88:c0:46:
c4:06:d0:8d:82:75:d6:53:65:1e:16:c7:a1:d6:24:
f3:71:af:24:0a:d8:ae:48:0e:bc:c9:63:bb:90:4b:
e1:a1:fa:cc:d8:7a:fc:8e:aa:b2:5c:c6:5f:e6:e4:
2c:ac:b4:e4:3f:14:9d:0c:6f:93:eb:5f:ee:fe:b1:
d5:e9:a9:32:2a:ec:27:1b:84:ae:54:a7:1a:1c:81:
b1:f1:6c:00:db:65:20:8a:03:b9:05:26:df:27:6f:
04:d9:6a:98:16:33:42:8b:d6:ee:d7:49:13:15:6b:
28:40:3b:85:d6:f1:57:9f:8a:f6:44:c8:71:c7:83:
5a:04:ab:43:38:19:65:46:f5:f0:2f:39:de:42:e6:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:C4:A9:69:AD:B6:8D:A8:A6:EF:B5:E2:60:21:F3:CE:C9:10:EA
X509v3 Authority Key Identifier:
keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:ec:a9:3a:00:67:0c:35:d9:62:df:94:fa:31:ca:1a:0f:
d7:cb:6d:52:33:43:39:ce:58:9c:14:c5:e7:22:7a:09:e0:02:
68:1a:1d:f8:b2:73:74:ce:45:22:41:bd:22:dd:e2:69:07:25:
8e:4d:58:54:0c:df:e2:10:3a:7f:ba:45:17:a2:a4:20:fa:53:
02:3e:3f:57:53:cf:23:3d:71:1f:d7:a6:4e:a1:07:4c:f8:8d:
c6:03:39:06:06:06:4c:fc:19:40:36:79:74:6a:39:74:c9:e3:
96:2a:91:66:3d:95:94:b5:9a:7a:31:2a:5c:1c:f2:0e:aa:6c:
2a:97:a0:7e:2c:d6:da:06:a6:45:0d:aa:c8:fe:d4:a1:ff:43:
5d:0f:98:14:7b:98:9c:4c:61:1e:05:73:90:83:4c:ca:58:a3:
c5:a3:de:a3:f9:4f:ec:87:e7:d7:d2:71:6a:b0:f1:49:8f:8e:
96:9e:f6:e7:54:10:88:c1:f0:9f:b2:59:ee:29:b2:19:11:32:
cc:b5:bb:28:0c:d6:80:ab:b2:1e:69:74:70:d7:db:d2:f0:77:
cc:ab:24:85:3b:aa:64:77:71:85:97:6f:4d:66:6d:20:c9:6c:
f6:64:83:38:ce:6a:6b:58:b9:48:f8:1a:04:33:b1:b7:d4:35:
00:8b:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:48 2026 by rpki-client