
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: sicdFJXZ2kMDSffaOdVp5Vg8//DxGCyiqiZAB0vXIGA=
Subject key identifier: 87:1C:03:B8:12:29:43:72:04:EA:5F:28:FF:B0:F3:B9:7D:38:FA:40
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 0338
Signing time: Thu 23 Jul 2026 01:59:08 +0000
Manifest this update: Thu 23 Jul 2026 01:59:08 +0000
Manifest next update: Thu 30 Jul 2026 01:59:08 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: 4F2S9fCpLYTRlyI+MN4EAZYEUNTNEh7pFB6TPwpRXYc=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Jul 23 01:59:08 2026 GMT
Not After : Jul 30 01:59:08 2026 GMT
Subject: CN=6a61756c-2a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:f1:70:31:9d:c7:b3:cf:6c:66:26:94:de:
32:c4:86:f7:82:ad:95:42:d0:62:f4:cf:90:ff:29:
22:ea:79:00:fc:52:18:24:10:33:2c:6f:96:4e:f5:
f1:2a:a0:a3:79:b7:55:15:67:c5:43:54:79:95:d6:
90:11:7d:8d:9c:f8:84:1d:6c:0b:7b:60:81:3f:b2:
36:9c:55:90:48:dc:4a:05:e0:f7:0b:89:75:21:99:
bd:cb:1b:23:1a:a4:f6:e1:e4:8a:6e:28:e1:ea:69:
08:30:3a:05:e2:85:00:8f:56:02:cf:34:3f:e2:bb:
de:c3:0e:77:25:0b:f3:5c:19:58:2a:9b:51:13:b9:
ac:50:a0:e4:ed:e9:78:eb:68:4c:c5:ac:64:81:0a:
4b:7f:bd:c0:a5:a5:59:a0:ce:73:89:72:85:bf:bc:
43:29:15:a8:36:0d:f0:b4:e9:22:f0:cc:14:09:d4:
88:64:09:28:4e:aa:6c:57:59:d4:86:67:f2:70:c4:
d1:8c:dc:c4:cc:cb:5c:74:59:af:c2:0d:fd:4b:ae:
5a:10:bc:2b:e1:4c:ee:19:32:a7:82:0a:2e:53:a1:
9c:19:60:86:88:b6:3d:b9:49:f3:da:6b:e9:f3:d9:
5f:b8:97:4a:bf:df:40:48:5c:b9:45:5a:0c:81:28:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:03:B8:12:29:43:72:04:EA:5F:28:FF:B0:F3:B9:7D:38:FA:40
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:ae:87:a3:34:97:0b:f5:79:0a:8f:93:bb:e4:9a:5e:54:
c6:af:70:a0:34:ad:55:bb:df:a7:a0:4a:49:dc:fb:f7:23:04:
33:78:a6:37:8c:c7:60:37:fb:e4:b6:57:f8:02:1a:13:0c:f7:
59:e8:d5:cb:ee:b4:77:64:f8:0d:e8:5c:3c:24:cd:42:09:c2:
15:a2:e7:cb:00:d8:cd:a7:48:cd:d6:e7:ae:35:bf:08:0b:6a:
63:1b:fd:41:5e:bd:8c:3f:7f:f7:92:6c:59:d0:95:73:a0:63:
46:af:c4:1e:15:a7:d4:3f:03:5f:24:4b:d9:11:9f:49:c6:67:
f5:0b:8a:00:9e:8b:dc:a8:25:e5:b2:38:60:d4:51:61:0b:19:
d0:02:38:c7:44:d9:45:cc:7c:75:3a:5d:b8:b9:8c:57:c4:9e:
22:ac:e5:06:84:70:e0:e2:ab:63:22:2d:2e:b7:a0:77:df:e9:
d8:f6:d1:8f:4b:14:81:34:da:27:1d:69:8a:11:67:ec:b1:b6:
d9:49:0c:54:da:b4:54:c5:c5:fb:77:ce:a0:4c:ff:49:53:82:
fa:64:c0:02:fa:ad:fb:4f:25:b1:c7:3b:b7:ed:6e:41:a6:9f:
5d:0a:be:f0:66:61:42:79:b6:84:c7:ab:1f:04:59:7e:f1:35:
c2:cc:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:33 2026 by rpki-client