
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json)
Hash identifier: NGQ1NlIY44BAs2LasnC8rKzq0JNvp8zT5NxkPD4K3S4=
Subject key identifier: 4D:39:3B:92:CA:D0:95:03:8D:FA:C4:8D:1C:9C:E2:BA:65:6B:4A:D4
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
Manifest number: 0162
Signing time: Thu 15 Oct 2026 06:13:36 +0000
Manifest this update: Thu 15 Oct 2026 06:13:36 +0000
Manifest next update: Thu 22 Oct 2026 06:13:36 +0000
Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: k1tBVMXbzt0eyYsSbJlEzJ9Kdn7ppasUYb4UrQ+WOx4=)
2: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=)
3: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 06:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Oct 15 06:13:36 2026 GMT
Not After : Oct 22 06:13:36 2026 GMT
Subject: CN=6ad06f10-d7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:81:bf:21:ee:76:01:59:6a:b6:f2:11:40:
1f:87:c9:9a:ae:49:99:28:c4:39:5d:08:31:94:8d:
27:96:b0:48:57:57:e5:35:80:b6:fb:c3:0a:c2:b0:
80:fc:e1:1e:4c:06:d6:2c:7d:4d:b7:c7:59:56:7c:
23:31:e0:03:58:e1:79:90:4c:9f:43:74:31:2f:fa:
a2:21:b0:b6:e1:7f:c7:e6:55:fe:f3:13:4a:49:2d:
e8:79:26:7c:5d:26:0b:22:59:d5:6e:8a:39:32:71:
be:73:61:8c:c5:74:bc:b8:fa:db:69:76:db:93:d6:
9d:2f:7d:ad:60:69:4e:4c:c4:c1:bc:26:5a:b7:d9:
2a:7f:a2:a3:0c:f3:e7:93:28:04:db:dd:2f:a9:41:
85:89:f2:f1:ee:96:52:98:b4:0d:e1:b4:b4:29:8e:
71:85:c2:5d:27:08:ff:b7:12:cc:b4:6b:8e:6a:2d:
46:39:c5:89:5d:a8:ea:99:fa:05:a1:7f:51:04:28:
36:32:ed:d0:f1:6f:b2:37:f3:01:78:19:45:1e:4e:
f0:98:97:66:ec:e9:3c:36:2d:94:37:d7:70:a6:09:
b9:2e:51:87:93:1d:a1:8b:93:d3:e5:df:ea:79:b1:
ac:55:e2:aa:50:45:3c:2c:ff:a9:8b:aa:a9:5d:61:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:3B:92:CA:D0:95:03:8D:FA:C4:8D:1C:9C:E2:BA:65:6B:4A:D4
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:00:b6:1d:f2:ba:98:51:46:4d:69:29:44:27:df:a0:71:76:
04:4c:16:4e:30:7f:f6:6a:9e:58:c2:76:79:4d:c2:54:88:96:
96:86:d6:d6:48:08:12:7f:fe:ea:b8:48:93:c1:b1:b4:7f:c1:
7c:59:9c:6e:88:98:8d:66:d9:cd:fb:3c:f4:6a:f7:8b:00:20:
73:03:61:1a:a9:6f:d3:f5:2f:74:16:84:3a:27:fe:ed:5c:5f:
1d:fa:06:ff:a5:ef:76:6f:f9:af:83:75:88:94:21:53:3d:41:
18:77:fa:90:12:ec:24:28:77:5d:54:fa:04:77:4f:58:ee:26:
f0:24:99:31:3b:76:d4:fb:51:60:1f:02:ae:43:e4:d6:5b:ca:
91:09:64:f3:80:18:03:ef:8a:ac:66:fd:d7:09:3e:26:a8:5d:
24:08:97:a9:26:5f:a2:0d:f1:e1:85:77:aa:a8:9e:2a:b8:95:
66:bd:b1:e3:76:66:9f:ed:30:72:6c:82:01:e0:99:3e:9f:e7:
fd:c9:32:d8:01:0d:20:34:7c:6a:0f:7c:74:25:a5:1b:a6:53:
10:d6:f7:9b:ae:8f:3e:ba:4a:42:a0:07:e9:0d:ac:84:16:b4:
82:50:35:67:1c:cc:f8:6f:cf:21:d5:83:f5:0d:05:ef:9b:fe:
c3:76:62:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyQjYxMTAvBgNVBAUTKDM5MEEzODM3QUJBNjkxMkEyQ0YyOUU2MTBEQTQ5NTU1
REYyQzZGQTUwHhcNMjYxMDE1MDYxMzM2WhcNMjYxMDIyMDYxMzM2WjAYMRYwFAYD
VQQDEw02YWQwNmYxMC1kN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0aeBvyHudgFZarbyEUAfh8markmZKMQ5XQgxlI0nlrBIV1flNYC2+8MKwrCA
/OEeTAbWLH1Nt8dZVnwjMeADWOF5kEyfQ3QxL/qiIbC24X/H5lX+8xNKSS3oeSZ8
XSYLIlnVboo5MnG+c2GMxXS8uPrbaXbbk9adL32tYGlOTMTBvCZat9kqf6KjDPPn
kygE290vqUGFifLx7pZSmLQN4bS0KY5xhcJdJwj/txLMtGuOai1GOcWJXajqmfoF
oX9RBCg2Mu3Q8W+yN/MBeBlFHk7wmJdm7Ok8Ni2UN9dwpgm5LlGHkx2hi5PT5d/q
ebGsVeKqUEU8LP+pi6qpXWEylQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE05O5LK
0JUDjfrEjRyc4rpla0rUMB8GA1UdIwQYMBaAFDkKODerppEqLPKeYQ2klVXfLG+l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9ERTdFMzIxRUNC
NTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtTb3M4cDVoRGFTVlZkOHNi
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09RbzRONnVta1NvczhwNWhEYVNWVmQ4c2I2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODJCNi9ERTdFMzIxRUNCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtT
b3M4cDVoRGFTVlZkOHNiNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAC2HfK6mFFGTWkpRCffoHF2BEwWTjB/9mqeWMJ2eU3CVIiWlobW1kgIEn/+
6rhIk8GxtH/BfFmcboiYjWbZzfs89Gr3iwAgcwNhGqlv0/UvdBaEOif+7VxfHfoG
/6Xvdm/5r4N1iJQhUz1BGHf6kBLsJCh3XVT6BHdPWO4m8CSZMTt21PtRYB8CrkPk
1lvKkQlk84AYA++KrGb91wk+JqhdJAiXqSZfog3x4YV3qqieKriVZr2x43Zmn+0w
cmyCAeCZPp/n/cky2AENIDR8ag98dCWlG6ZTENb3m66PPrpKQqAH6Q2shBa0glA1
ZxzM+G/PIdWD9Q0F75v+w3ZiIA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 01:19:35 2026 by rpki-client