
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: m4HdXr9SZ9uKOfIkeeGddGSSCDzXsYxnZx7ZaV6W/7A=
Subject key identifier: A0:5F:FC:BC:05:30:4B:D3:2D:26:6F:59:63:94:E2:17:3F:9A:9E:4C
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 0359
Signing time: Fri 25 Sep 2026 00:43:59 +0000
Manifest this update: Fri 25 Sep 2026 00:43:59 +0000
Manifest next update: Fri 02 Oct 2026 00:43:59 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: tM+kIAsX7IYJaN84T8CEij7idLTVHh/Lkiv2ZbJwcHw=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Sep 25 00:43:59 2026 GMT
Not After : Oct 2 00:43:59 2026 GMT
Subject: CN=6ab5c3cf-dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:f8:fd:ab:9e:18:d1:54:d3:62:76:e5:24:
76:53:24:eb:f3:6a:dc:97:a9:1d:3b:69:3b:9b:71:
6c:28:8b:b0:e3:2a:93:74:84:61:9e:8b:fd:e0:64:
04:4c:11:17:a8:69:fe:6c:85:67:7c:a2:12:0d:83:
be:23:a7:0e:7c:eb:41:c6:89:73:29:21:83:2a:7c:
82:8b:e0:4a:84:41:fa:d1:69:28:04:02:3d:47:fc:
6e:36:ae:ef:a7:60:ae:3e:81:bf:96:60:06:4a:79:
a7:ff:0f:5d:a3:cf:47:01:ea:9f:cf:94:72:b2:43:
a1:a4:70:4e:83:3f:2e:40:cc:3c:43:6c:35:25:00:
8d:6c:a5:0b:54:67:fc:ae:5b:1c:e4:6b:1c:03:a6:
6f:5f:2e:c4:6e:a8:5c:73:32:96:e8:b1:62:21:3b:
4e:bc:c9:a7:1d:10:5f:20:c2:b6:5c:d8:8b:81:bb:
3f:3c:a7:8c:f7:f9:64:4d:01:46:b0:c8:d9:5a:db:
06:dd:26:4a:a7:ba:f3:58:ac:e6:a7:a3:9b:c0:7d:
aa:fc:a7:f0:4b:fb:89:b9:30:b4:03:c6:38:4f:b0:
93:6c:8c:b5:62:d8:78:cc:29:c7:69:78:33:52:9b:
d6:d1:7b:9f:a5:ee:23:e7:9b:4c:59:1a:af:b3:b6:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:FC:BC:05:30:4B:D3:2D:26:6F:59:63:94:E2:17:3F:9A:9E:4C
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:84:61:d9:91:81:d6:fb:3b:04:0e:39:1f:90:3d:11:cc:a1:
da:0e:d0:bc:67:a6:92:4d:d4:04:da:4e:cb:3a:f1:c4:31:29:
3b:a0:4c:62:9d:a8:75:cb:d0:b7:04:50:56:56:97:40:25:17:
f1:c1:69:bb:67:5e:c9:b0:b6:f0:ce:b8:4a:24:f6:ce:54:d0:
37:75:0e:f2:99:d1:68:3c:aa:d0:f5:2e:8a:db:84:45:ed:e2:
f7:09:ef:0d:00:46:83:ed:76:48:c8:65:76:90:6b:aa:f0:31:
54:31:30:64:ed:23:e0:bb:1f:a8:70:fa:ea:cf:ba:07:36:c5:
24:c7:2f:07:fb:f5:b2:86:35:ef:f3:ac:27:b5:92:74:ae:fa:
3e:1a:55:10:cf:6a:55:46:13:94:0c:a3:01:a6:18:cf:25:61:
4e:a1:1b:5f:3f:ac:e3:bf:a3:75:6f:cf:ea:0e:fc:f1:c9:c5:
dc:50:50:ed:4b:8d:3f:1a:85:6a:81:d8:e4:35:ee:df:f8:07:
fe:42:43:49:80:4d:99:7c:b9:45:cb:a4:13:19:1f:fb:ec:7e:
32:7b:4b:5d:a8:2f:ed:cf:2c:1f:2c:a2:b8:ad:fe:65:de:21:
d2:2f:fe:04:3d:8a:bc:a6:96:52:41:14:20:2c:10:ac:79:09:
b2:97:84:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx
QzM1NDkzNEIwHhcNMjYwOTI1MDA0MzU5WhcNMjYxMDAyMDA0MzU5WjAYMRYwFAYD
VQQDEw02YWI1YzNjZi1kZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkX4/aueGNFU02J25SR2UyTr82rcl6kdO2k7m3FsKIuw4yqTdIRhnov94GQE
TBEXqGn+bIVnfKISDYO+I6cOfOtBxolzKSGDKnyCi+BKhEH60WkoBAI9R/xuNq7v
p2CuPoG/lmAGSnmn/w9do89HAeqfz5RyskOhpHBOgz8uQMw8Q2w1JQCNbKULVGf8
rlsc5GscA6ZvXy7EbqhcczKW6LFiITtOvMmnHRBfIMK2XNiLgbs/PKeM9/lkTQFG
sMjZWtsG3SZKp7rzWKzmp6ObwH2q/KfwS/uJuTC0A8Y4T7CTbIy1Yth4zCnHaXgz
UpvW0Xufpe4j55tMWRqvs7bNuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBf/LwF
MEvTLSZvWWOU4hc/mp5MMB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2
QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ
QThId3NUTGEyRDBjTlVrMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXIRh2ZGB1vs7BA45H5A9Ecyh2g7QvGemkk3UBNpOyzrxxDEpO6BMYp2odcvQ
twRQVlaXQCUX8cFpu2deybC28M64SiT2zlTQN3UO8pnRaDyq0PUuituERe3i9wnv
DQBGg+12SMhldpBrqvAxVDEwZO0j4LsfqHD66s+6BzbFJMcvB/v1soY17/OsJ7WS
dK76PhpVEM9qVUYTlAyjAaYYzyVhTqEbXz+s47+jdW/P6g788cnF3FBQ7UuNPxqF
aoHY5DXu3/gH/kJDSYBNmXy5RcukExkf++x+MntLXagv7c8sHyyiuK3+Zd4h0i/+
BD2KvKaWUkEUICwQrHkJspeE7A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:31:33 2026 by rpki-client