
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json)
Hash identifier: zjUg/VAl84/kc2w3oZrFwtz3hA24hvHOGWkfk5oTvUE=
Subject key identifier: 0F:68:5B:54:71:49:53:34:DA:88:9B:E6:E7:30:B8:6C:79:8A:02:E7
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial: 22D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
Manifest number: 2279
Signing time: Wed 22 Jul 2026 15:56:05 +0000
Manifest this update: Wed 22 Jul 2026 15:56:05 +0000
Manifest next update: Wed 29 Jul 2026 15:56:05 +0000
Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: EJHQOiW9aHhyowPLjStIr2/nRtzo0RMfJkQo6NGslBU=)
2: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=)
3: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=)
4: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=)
5: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=)
6: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=)
7: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=)
8: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8915 (0x22d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Validity
Not Before: Jul 22 15:56:05 2026 GMT
Not After : Jul 29 15:56:05 2026 GMT
Subject: CN=6a60e815-33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:f3:cc:85:3a:5c:ee:43:92:2d:86:0c:18:
57:c5:8d:57:a2:9e:ad:e4:8f:71:18:8f:ff:9a:87:
ab:e2:50:5a:a4:92:45:89:fe:6f:df:bc:88:a8:c0:
17:9a:dc:ca:bd:10:a4:ac:1d:20:99:54:bb:81:d7:
8f:18:82:d2:de:88:2a:52:23:53:e6:08:07:3d:3a:
bc:0c:72:34:16:57:00:bb:99:90:b3:85:d2:8f:1a:
04:df:13:e9:23:8f:54:bb:19:07:d5:c3:9b:7a:77:
dc:fe:ed:ac:ec:13:aa:c8:56:5e:b6:3c:a9:b4:e3:
44:6a:02:ba:38:17:83:b7:30:4e:b7:63:34:79:2b:
6b:60:6e:1d:ad:fc:30:73:0f:82:8b:9d:90:2d:e9:
43:48:3e:08:d6:51:53:c5:2d:83:e1:41:03:77:58:
c6:bf:68:3e:fc:02:b9:1c:e5:33:1c:ea:dc:ac:96:
02:0d:26:de:f2:19:4a:f4:eb:7f:84:2f:d5:59:7f:
e3:f0:c7:e6:01:a8:4c:ae:20:95:f5:bc:ec:23:e6:
f8:d8:2c:70:ee:1d:87:e2:05:60:29:04:27:2e:ea:
cd:d3:87:f7:06:81:c3:98:f8:37:5d:3b:5a:77:44:
c8:70:a5:c6:92:71:d3:1e:18:4d:ee:61:49:54:41:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:5B:54:71:49:53:34:DA:88:9B:E6:E7:30:B8:6C:79:8A:02:E7
X509v3 Authority Key Identifier:
keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:96:cc:1e:77:28:c4:d6:d2:50:a1:31:eb:e5:7a:0b:01:4a:
a5:73:05:73:cd:96:18:a6:86:3e:af:4c:f4:de:c3:ad:48:3b:
55:12:91:5f:01:8f:e9:4a:e7:ba:21:dd:5c:04:29:83:de:94:
3d:7e:c0:47:ca:14:da:1b:c9:02:21:3c:59:7b:31:fa:4c:b2:
0a:71:83:70:e2:da:26:2c:8e:7b:b7:66:36:11:ba:d2:da:ec:
0e:0f:dc:66:d5:d5:61:36:c6:06:f1:69:ec:66:69:91:43:d3:
a1:9f:48:3a:cd:ed:4e:be:db:f4:b1:22:1f:85:ff:c1:20:10:
12:5c:6d:d4:45:a0:7f:e6:16:fd:fd:8f:ed:55:f7:db:b1:89:
04:b3:66:86:b3:c8:e3:16:07:69:60:d3:51:e7:2b:6d:90:3c:
44:7a:e6:94:a6:df:46:f4:9b:35:20:16:52:65:aa:43:2e:ba:
13:59:0b:6e:19:50:f2:08:5f:b5:7e:4f:ae:ad:58:05:6f:95:
1c:20:16:b6:cf:dc:33:41:8f:16:84:54:0f:37:73:e8:ee:44:
0c:0f:1a:31:8c:50:3d:2f:99:60:a9:f3:80:60:cc:ca:54:25:
b3:07:ef:20:c9:b7:49:40:cf:6d:22:22:dc:f3:64:09:2c:1f:
74:13:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:10 2026 by rpki-client