
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json)
Hash identifier: Gbkjj37VYgnuwoCG7O4yYLE5p0S5CDrak+Mo83TcwQI=
Subject key identifier: D6:80:E5:1E:32:B8:51:6C:50:35:5D:E8:64:51:D2:52:43:85:89:1C
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial: 0D60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
Manifest number: 0D54
Signing time: Tue 12 May 2026 18:02:19 +0000
Manifest this update: Tue 12 May 2026 18:02:18 +0000
Manifest next update: Tue 19 May 2026 18:02:18 +0000
Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: i5iqXHjN0vkehgtXD/SPcMgbFxqN54sQMfTs2QNlMvg=)
2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Validity
Not Before: May 12 18:02:18 2026 GMT
Not After : May 19 18:02:18 2026 GMT
Subject: CN=6a036b2b-7b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:27:f5:f6:2c:0f:75:92:c6:7e:35:d2:8d:
8f:4d:d6:7d:90:6d:e2:68:d2:7e:cd:b6:76:2f:55:
a8:2c:bb:3b:0c:82:7a:44:f8:e8:30:a8:41:81:15:
cb:32:f3:ba:2a:f6:f3:f0:45:a0:fd:a8:95:e5:29:
bc:a6:a7:c5:40:ee:56:78:11:db:b2:c8:a5:48:9c:
64:16:82:6f:ef:01:dc:36:03:ba:80:58:a2:35:49:
5d:50:70:e3:38:ec:f5:c0:ca:33:8a:79:04:a9:e0:
cb:02:9a:7d:a8:df:a8:31:ab:9a:b6:b1:3b:da:57:
db:ef:e1:11:06:fa:f0:ff:37:d1:1f:b9:f3:9a:b2:
eb:3f:d1:6c:fa:74:1e:10:a5:7c:6f:e5:b4:de:c9:
1f:43:94:a2:50:05:ad:21:7e:87:37:2d:bb:a4:84:
e3:ea:1a:bc:55:b9:46:e8:68:15:01:27:54:03:1c:
ad:15:88:21:c0:32:16:85:79:7a:23:e4:85:c0:62:
87:d1:33:71:a1:42:61:2f:f6:c4:f3:60:3e:00:dd:
ca:42:e7:9c:34:ac:94:4d:e0:35:27:81:94:c5:97:
fc:ff:09:0a:9c:76:6b:77:4e:66:73:e8:ff:3d:df:
3d:12:84:5b:72:be:fd:c9:85:48:dc:c1:ae:b7:bd:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:E5:1E:32:B8:51:6C:50:35:5D:E8:64:51:D2:52:43:85:89:1C
X509v3 Authority Key Identifier:
keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e7:06:fd:92:a8:5e:d5:cb:1d:17:a6:f3:b5:27:06:96:ea:
bc:35:6b:35:3f:af:37:a7:a6:00:04:d9:e2:d2:7e:6f:ec:ca:
08:61:67:1b:bf:d8:85:65:17:36:39:86:56:f6:fe:b9:dd:31:
93:16:20:2a:02:62:ff:6f:28:e4:68:1a:9a:23:ca:85:1a:6b:
f1:85:97:f8:42:ed:4f:d6:ea:78:9e:74:8a:a0:9f:0a:5a:06:
03:2e:7a:2f:94:04:c1:b0:c6:7b:a7:55:e5:ee:7c:d4:6e:52:
44:e8:57:e2:24:4e:d6:23:86:86:ce:f6:b5:6a:ed:2a:c1:89:
d3:1c:55:ba:fc:e2:51:76:14:92:27:46:1c:a1:f0:04:9f:33:
14:1d:cb:f2:3f:c3:31:31:9e:b5:9b:fb:d2:8d:97:47:78:e4:
b6:24:92:22:bd:18:4d:bf:06:fb:36:60:a6:63:80:74:5e:16:
07:d5:5c:4e:82:91:38:82:61:88:db:3a:6a:d3:31:ba:a3:35:
6b:96:39:10:ec:43:f9:fa:19:da:00:2d:19:5f:d1:9d:95:84:
42:7d:3a:65:42:70:42:85:3c:56:43:aa:1b:83:9e:2f:0d:b4:
0e:31:aa:c2:15:7c:80:b4:b2:c8:1e:0d:14:f0:0e:06:25:11:
5f:ec:33:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy
OTI1OUJERUIwHhcNMjYwNTEyMTgwMjE4WhcNMjYwNTE5MTgwMjE4WjAYMRYwFAYD
VQQDEw02YTAzNmIyYi03YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArO4n9fYsD3WSxn410o2PTdZ9kG3iaNJ+zbZ2L1WoLLs7DIJ6RPjoMKhBgRXL
MvO6Kvbz8EWg/aiV5Sm8pqfFQO5WeBHbssilSJxkFoJv7wHcNgO6gFiiNUldUHDj
OOz1wMozinkEqeDLApp9qN+oMauatrE72lfb7+ERBvrw/zfRH7nzmrLrP9Fs+nQe
EKV8b+W03skfQ5SiUAWtIX6HNy27pITj6hq8VblG6GgVASdUAxytFYghwDIWhXl6
I+SFwGKH0TNxoUJhL/bE82A+AN3KQuecNKyUTeA1J4GUxZf8/wkKnHZrd05mc+j/
Pd89EoRbcr79yYVI3MGut73jjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaA5R4y
uFFsUDVd6GRR0lJDhYkcMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0
MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn
LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdecG/ZKoXtXLHRem87UnBpbqvDVrNT+vN6emAATZ4tJ+b+zKCGFnG7/YhWUX
NjmGVvb+ud0xkxYgKgJi/28o5GgamiPKhRpr8YWX+ELtT9bqeJ50iqCfCloGAy56
L5QEwbDGe6dV5e581G5SROhX4iRO1iOGhs72tWrtKsGJ0xxVuvziUXYUkidGHKHw
BJ8zFB3L8j/DMTGetZv70o2XR3jktiSSIr0YTb8G+zZgpmOAdF4WB9VcToKROIJh
iNs6atMxuqM1a5Y5EOxD+foZ2gAtGV/RnZWEQn06ZUJwQoU8VkOqG4OeLw20DjGq
whV8gLSyyB4NFPAOBiURX+wzNw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:11:27 2026 by rpki-client