
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: P7iWB0ra4WT36KMymiXd/FAf/O2pd2+zoezf8BUfTAY=
Subject key identifier: 2B:44:6A:A3:94:CC:8A:26:76:16:C6:71:E1:2A:E9:3A:F1:36:30:44
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 02FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 02F9
Signing time: Wed 25 Mar 2026 00:54:22 +0000
Manifest this update: Wed 25 Mar 2026 00:54:21 +0000
Manifest next update: Wed 01 Apr 2026 00:54:21 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: 6Yfk6SzIVYjJ5OW1dDp8eEMLFVC14Gry9F8l44tdKm8=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: F9Rj/XqATn1zywLlT+11oxByZBWlqSz3GPhD+W7p31Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Mar 25 00:54:21 2026 GMT
Not After : Apr 1 00:54:21 2026 GMT
Subject: CN=69c3323e-7be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:f6:fd:32:b2:e7:14:0a:dc:53:34:c1:94:
31:5c:c3:33:1b:82:99:44:af:74:1b:c0:64:50:12:
4a:d2:e7:e9:00:c8:36:e9:c2:54:e5:f3:3b:b3:36:
5b:b6:20:99:0b:e3:c4:3a:1e:7f:c5:e0:03:60:9f:
68:14:35:98:19:fd:64:c0:ed:9c:67:6e:53:09:94:
71:08:8e:ac:0c:8a:c7:a1:3e:0f:0d:ca:8e:10:f1:
7b:98:7b:02:db:30:76:d5:ef:86:8a:54:d9:93:13:
1a:48:16:bf:7d:17:8a:c6:51:68:95:d7:d5:70:f1:
47:da:83:1e:4e:2b:9e:60:7a:54:20:2d:48:a5:7a:
d2:53:98:f0:61:d0:af:e9:69:ae:2a:6a:69:3b:97:
d9:a2:ea:69:a7:c2:f5:41:9e:8e:4d:17:dd:aa:a7:
9f:be:c8:27:62:b3:1a:75:91:9e:b2:e8:09:c7:35:
51:f4:2b:a7:7a:1b:80:f5:e8:e2:20:92:66:f6:ec:
27:51:d0:a2:e1:78:7f:77:1b:c1:c0:18:d9:13:69:
15:4e:bb:bd:5e:21:14:65:f0:a2:a4:ec:ae:e6:5b:
a5:f4:a6:e4:63:f4:2e:5e:92:7e:24:9f:fb:4a:f2:
b6:57:b3:e8:69:81:3e:66:fb:1e:c5:44:7f:00:1c:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:6A:A3:94:CC:8A:26:76:16:C6:71:E1:2A:E9:3A:F1:36:30:44
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:36:28:f5:4f:2d:dd:d6:b6:43:36:e6:2c:eb:0a:82:96:
ba:7b:78:ee:20:94:84:c1:49:26:e5:a0:0c:a6:c6:5f:70:25:
ca:ea:af:6e:c6:6a:f6:1d:40:c8:f7:f7:6f:98:9e:1d:ba:db:
10:a9:ed:22:b3:c7:f1:03:d5:3e:0e:d6:6e:b4:04:31:29:b7:
17:82:80:ae:5f:b1:51:97:7b:ba:16:57:c7:35:1b:dc:73:74:
27:86:c5:97:72:dc:fe:ae:39:af:12:80:82:f9:de:8d:34:63:
01:94:01:c1:1a:17:46:a5:d3:85:af:8c:5f:f1:20:56:b0:7f:
1a:e1:1e:6c:55:0b:7b:70:3e:6c:a0:99:3c:50:57:03:ea:d6:
8c:49:15:75:c7:ea:2d:90:84:fb:4e:59:9f:bc:dc:3e:a3:52:
b3:5b:1d:9a:93:6a:56:e2:66:41:b2:10:03:4e:b8:f2:b5:df:
87:35:9f:df:a0:28:68:fd:e3:14:05:1a:34:bc:8a:71:4b:82:
cc:04:e1:b7:46:13:95:eb:8a:1a:95:f9:e3:b7:3e:36:65:97:
8e:f4:d2:bf:3d:5f:7d:e5:ec:34:9d:86:2b:56:9e:a6:d4:0d:
44:a0:27:46:26:cc:39:b3:f5:4b:89:67:46:0b:fe:d4:c7:3c:
59:c1:dc:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx
QzM1NDkzNEIwHhcNMjYwMzI1MDA1NDIxWhcNMjYwNDAxMDA1NDIxWjAYMRYwFAYD
VQQDEw02OWMzMzIzZS03YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomX2/TKy5xQK3FM0wZQxXMMzG4KZRK90G8BkUBJK0ufpAMg26cJU5fM7szZb
tiCZC+PEOh5/xeADYJ9oFDWYGf1kwO2cZ25TCZRxCI6sDIrHoT4PDcqOEPF7mHsC
2zB21e+GilTZkxMaSBa/fReKxlFoldfVcPFH2oMeTiueYHpUIC1IpXrSU5jwYdCv
6WmuKmppO5fZouppp8L1QZ6OTRfdqqefvsgnYrMadZGesugJxzVR9CunehuA9eji
IJJm9uwnUdCi4Xh/dxvBwBjZE2kVTru9XiEUZfCipOyu5lul9KbkY/QuXpJ+JJ/7
SvK2V7PoaYE+ZvsexUR/ABxiDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtEaqOU
zIomdhbGceEq6TrxNjBEMB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2
QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ
QThId3NUTGEyRDBjTlVrMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvJU2KPVPLd3WtkM25izrCoKWunt47iCUhMFJJuWgDKbGX3AlyuqvbsZq9h1A
yPf3b5ieHbrbEKntIrPH8QPVPg7WbrQEMSm3F4KArl+xUZd7uhZXxzUb3HN0J4bF
l3Lc/q45rxKAgvnejTRjAZQBwRoXRqXTha+MX/EgVrB/GuEebFULe3A+bKCZPFBX
A+rWjEkVdcfqLZCE+05Zn7zcPqNSs1sdmpNqVuJmQbIQA0648rXfhzWf36AoaP3j
FAUaNLyKcUuCzATht0YTleuKGpX547c+NmWXjvTSvz1ffeXsNJ2GK1aeptQNRKAn
RibMObP1S4lnRgv+1Mc8WcHcGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:48 2026 by rpki-client