
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json)
Hash identifier: WmF/bCuFc+gIviglWMiibZ0G5DJld6pLWoGtqzC/K6A=
Subject key identifier: 02:C2:3E:35:5E:D6:A9:BC:02:4C:01:01:0A:8F:F3:87:B2:EA:42:4A
Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Certificate serial: 0815
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
Manifest number: 0815
Signing time: Wed 22 Jul 2026 21:43:05 +0000
Manifest this update: Wed 22 Jul 2026 21:43:05 +0000
Manifest next update: Wed 29 Jul 2026 21:43:05 +0000
Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: O078yyx0bH29KgliH/spzF611xuEupaNlnsaacUsOxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Validity
Not Before: Jul 22 21:43:05 2026 GMT
Not After : Jul 29 21:43:05 2026 GMT
Subject: CN=6a613969-69c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:16:b7:42:d9:03:27:ad:a5:53:4d:8f:54:
c8:0e:52:09:ae:74:b3:f1:35:a6:bb:aa:70:19:6d:
65:bd:cf:92:5f:f1:37:73:b5:d7:4c:c8:bc:8c:eb:
ff:52:3f:2c:a8:b3:26:a9:a3:39:b5:d4:8a:3c:6f:
9b:6b:a5:ff:c4:d4:76:93:8b:55:6b:c1:8a:e8:58:
c6:36:96:00:6b:63:17:09:7b:f3:bc:9b:1b:8d:7d:
64:5b:36:02:a6:7c:a1:a7:4f:86:96:8f:d1:12:b9:
e9:03:34:fa:9e:80:61:15:c0:46:5c:33:e9:d3:f0:
fc:c8:de:4d:54:6b:be:a0:32:81:9c:00:22:2e:71:
63:c6:0d:b5:e2:1a:91:9d:c1:30:7e:48:c4:cd:6b:
c5:27:76:f5:6e:47:3d:f0:5d:4d:3c:c4:9f:67:1d:
a7:27:12:8f:fc:cb:a2:17:f7:48:9f:3f:56:bf:f3:
28:db:b5:50:a5:15:3a:2d:42:1f:f8:87:bc:50:59:
8b:dd:57:c2:b9:20:95:3e:7d:f5:f5:d2:39:7a:e2:
5d:10:0e:c1:e4:0f:8e:07:84:0b:3e:46:f2:11:48:
33:e0:01:c1:1d:b8:c2:7c:43:eb:e3:71:01:06:fc:
65:51:db:6a:23:69:b4:13:6c:1a:2c:a3:93:35:79:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:3E:35:5E:D6:A9:BC:02:4C:01:01:0A:8F:F3:87:B2:EA:42:4A
X509v3 Authority Key Identifier:
keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a8:08:87:92:cb:c0:4e:24:d7:13:4e:f2:08:ab:04:3a:a0:
cc:4a:11:82:70:9e:af:48:c2:c6:a9:7d:ad:c8:2a:56:08:a6:
73:39:ab:a8:93:42:1f:3d:23:e6:24:34:4e:cc:e0:dd:69:17:
6f:12:17:d9:f8:52:ac:a6:86:cf:90:4b:b1:65:c5:60:1b:0b:
31:ff:c7:38:16:2f:08:57:36:41:ea:f5:d7:56:e3:f4:5f:36:
14:7d:cc:88:f1:3d:a6:dc:b2:4a:23:fc:ea:2a:42:0d:a0:24:
b4:89:6b:e9:b1:1e:64:77:32:f9:58:4f:0a:89:dc:4f:6d:dc:
b0:32:0b:b4:f8:d3:9e:3b:76:bb:0a:ae:db:7b:79:d7:bd:4f:
4d:b4:a7:79:66:01:04:fa:42:25:31:23:54:fe:0f:e6:ea:ea:
b8:f1:44:13:18:d7:4a:1a:58:e0:44:b3:f8:a1:69:3c:89:9f:
1a:73:eb:24:c5:cb:82:a8:ff:0e:2a:e6:91:2f:6c:28:eb:03:
15:c8:55:b9:d3:b8:34:13:86:fe:62:49:d3:6e:61:e2:f4:f9:
e6:8e:35:34:98:a9:89:b8:63:69:05:65:34:9a:62:0c:b0:63:
00:ad:1e:f3:c5:e5:09:eb:d0:44:2c:d4:da:7a:0b:f0:f0:a8:
5c:ad:7e:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG
NTRCOTAzOTYwHhcNMjYwNzIyMjE0MzA1WhcNMjYwNzI5MjE0MzA1WjAYMRYwFAYD
VQQDEw02YTYxMzk2OS02OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ikWt0LZAyetpVNNj1TIDlIJrnSz8TWmu6pwGW1lvc+SX/E3c7XXTMi8jOv/
Uj8sqLMmqaM5tdSKPG+ba6X/xNR2k4tVa8GK6FjGNpYAa2MXCXvzvJsbjX1kWzYC
pnyhp0+Glo/RErnpAzT6noBhFcBGXDPp0/D8yN5NVGu+oDKBnAAiLnFjxg214hqR
ncEwfkjEzWvFJ3b1bkc98F1NPMSfZx2nJxKP/MuiF/dInz9Wv/Mo27VQpRU6LUIf
+Ie8UFmL3VfCuSCVPn319dI5euJdEA7B5A+OB4QLPkbyEUgz4AHBHbjCfEPr43EB
BvxlUdtqI2m0E2waLKOTNXkgWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALCPjVe
1qm8AkwBAQqP84ey6kJKMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB
NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq
U1R3NTVzeXNremIxUzVBNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALKgIh5LLwE4k1xNO8girBDqgzEoRgnCer0jCxql9rcgqVgimczmrqJNCHz0j
5iQ0Tszg3WkXbxIX2fhSrKaGz5BLsWXFYBsLMf/HOBYvCFc2Qer111bj9F82FH3M
iPE9ptyySiP86ipCDaAktIlr6bEeZHcy+VhPConcT23csDILtPjTnjt2uwqu23t5
171PTbSneWYBBPpCJTEjVP4P5urquPFEExjXShpY4ESz+KFpPImfGnPrJMXLgqj/
DirmkS9sKOsDFchVudO4NBOG/mJJ025h4vT55o41NJipibhjaQVlNJpiDLBjAK0e
88XlCevQRCzU2noL8PCoXK1+oQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:25 2026 by rpki-client