
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier: S14Uwnu5ObFpLhRbMEwDzMQxCi5P3NdpXo0wYS7HZqg=
Subject key identifier: 3B:93:05:01:66:4A:3E:2D:74:34:42:5D:60:42:05:73:38:1E:24:BE
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 0B3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number: 0B14
Signing time: Tue 22 Sep 2026 19:10:20 +0000
Manifest this update: Tue 22 Sep 2026 19:10:19 +0000
Manifest next update: Tue 29 Sep 2026 19:10:19 +0000
Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: zOnC82zbeHCQYw4h9cVX0BQJiqpsMHaJWctuhCk5yx0=)
2: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: bm6AgPrr+ba3g4ON4TXkW8wGD2H/2xk2tqyflYqK8Mo=)
3: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: EahjIzDunS5kJ7uh0KLSIyNDojbGXwaI7ZaquLDLzIA=)
4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: lWmthGeBZ7LDMGrGEonzo/wuOeW50Fv4yH59yX/aHdg=)
5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: tjBgUERDNlX0vVwthkUmYdv4wGMbSaZtWaLqVCL5g+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Validity
Not Before: Sep 22 19:10:19 2026 GMT
Not After : Sep 29 19:10:19 2026 GMT
Subject: CN=6ab2d29c-0d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:d3:65:4f:e8:27:9b:16:ee:2d:fc:e2:74:
8f:a1:2a:71:90:06:34:cc:9a:d3:f8:2e:73:ce:36:
23:da:c8:7b:de:3f:d3:28:2d:c0:28:9c:e8:b4:dc:
8d:7e:89:a8:18:7e:17:25:21:7e:bb:6a:e4:87:7f:
16:4b:d5:93:7f:44:5a:24:5a:d7:45:06:5b:15:65:
e3:19:85:3a:83:fe:7e:9a:94:53:4f:68:53:f0:6a:
9a:3d:fe:10:de:98:a9:6d:23:35:00:f1:81:19:b0:
ca:1e:70:9a:e5:46:33:ff:94:07:c0:05:cd:e7:32:
e0:f7:41:a3:0c:55:f5:f6:0d:6c:ea:ed:58:04:a3:
a2:3b:c2:e2:da:44:5c:56:ca:98:c5:2b:36:fb:4e:
02:61:5a:e0:26:c8:f7:13:27:3e:79:a6:8b:67:13:
09:a6:20:99:9f:9c:a5:ab:88:64:da:35:e8:04:2f:
54:08:cc:93:d5:33:76:0a:bb:5c:8e:7c:66:5b:04:
81:18:76:10:29:6d:24:05:1f:df:bc:d1:84:4e:62:
c5:42:53:3c:c2:32:74:85:14:16:ba:2f:37:44:f6:
00:6e:e3:32:69:15:83:2f:bb:47:a8:f6:56:a0:bd:
85:e2:d3:3c:36:2d:ec:8a:97:42:3f:01:d3:0e:c8:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:05:01:66:4A:3E:2D:74:34:42:5D:60:42:05:73:38:1E:24:BE
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:a5:5a:31:21:9d:37:c5:c3:cf:19:69:9d:ef:52:82:fd:
49:ec:4b:8a:fd:f6:94:21:dc:48:c8:9e:7d:34:77:16:62:7f:
d1:26:54:07:63:dc:2b:a8:72:a4:95:13:ef:85:c3:9b:75:45:
50:aa:ec:db:2e:46:75:73:b5:0d:6b:c8:1a:bf:b4:40:9f:c0:
5f:f7:ad:dd:b2:bb:9b:39:1a:50:a8:71:80:e5:95:ca:36:12:
e6:69:60:62:8f:d3:cd:72:be:7c:b1:f7:83:b7:d0:a7:11:16:
ba:70:4a:b0:ed:80:8e:51:fc:ed:07:72:a0:34:db:c1:2c:5d:
39:d7:a4:8b:b7:d0:a4:3f:f4:62:21:8e:e5:95:3a:9d:32:aa:
21:27:bd:c2:ff:a8:31:b1:6a:05:50:37:2c:25:a7:29:7c:56:
9d:b8:71:6f:e3:fb:d5:f0:5f:3c:c5:2e:ab:22:7a:77:37:a1:
c0:b7:8a:ca:1f:ad:ad:d0:45:0d:9a:c5:40:4a:b9:30:ce:fe:
4a:a4:16:9a:62:b3:6a:be:ca:ff:b3:7d:fb:02:0b:56:70:30:
2b:a9:da:e7:57:32:61:e2:98:3d:90:a6:38:90:22:52:b4:4e:
e1:84:c0:98:d5:b7:f2:e4:ce:68:81:36:bb:c7:8b:ba:75:74:
ce:32:84:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1
M0EwM0FCODYwHhcNMjYwOTIyMTkxMDE5WhcNMjYwOTI5MTkxMDE5WjAYMRYwFAYD
VQQDEw02YWIyZDI5Yy0wZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubXTZU/oJ5sW7i384nSPoSpxkAY0zJrT+C5zzjYj2sh73j/TKC3AKJzotNyN
fomoGH4XJSF+u2rkh38WS9WTf0RaJFrXRQZbFWXjGYU6g/5+mpRTT2hT8GqaPf4Q
3pipbSM1APGBGbDKHnCa5UYz/5QHwAXN5zLg90GjDFX19g1s6u1YBKOiO8Li2kRc
VsqYxSs2+04CYVrgJsj3Eyc+eaaLZxMJpiCZn5ylq4hk2jXoBC9UCMyT1TN2Crtc
jnxmWwSBGHYQKW0kBR/fvNGETmLFQlM8wjJ0hRQWui83RPYAbuMyaRWDL7tHqPZW
oL2F4tM8Ni3sipdCPwHTDsj6YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuTBQFm
Sj4tdDRCXWBCBXM4HiS+MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz
RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht
cG5teHRnbHR0blJUb0RxNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWaalWjEhnTfFw88ZaZ3vUoL9SexLiv32lCHcSMiefTR3FmJ/0SZUB2PcK6hy
pJUT74XDm3VFUKrs2y5GdXO1DWvIGr+0QJ/AX/et3bK7mzkaUKhxgOWVyjYS5mlg
Yo/TzXK+fLH3g7fQpxEWunBKsO2AjlH87QdyoDTbwSxdOdeki7fQpD/0YiGO5ZU6
nTKqISe9wv+oMbFqBVA3LCWnKXxWnbhxb+P71fBfPMUuqyJ6dzehwLeKyh+trdBF
DZrFQEq5MM7+SqQWmmKzar7K/7N9+wILVnAwK6na51cyYeKYPZCmOJAiUrRO4YTA
mNW38uTOaIE2u8eLunV0zjKEYA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:09 2026 by rpki-client