
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: xeOqec2VQIRDjkUY+bto2nY+ZJYhh5y0ZYphclzVL60=
Subject key identifier: 2F:DA:B2:B9:03:3B:4E:82:05:71:C9:27:8F:01:50:91:6B:96:95:62
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 036C
Signing time: Sat 13 Jun 2026 00:53:33 +0000
Manifest this update: Sat 13 Jun 2026 00:53:32 +0000
Manifest next update: Sat 20 Jun 2026 00:53:32 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: 7FXPdxYy5GZfk0xHVv/JiFYvVvLMlcUpzY1x+Ow9prk=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Jun 13 00:53:32 2026 GMT
Not After : Jun 20 00:53:32 2026 GMT
Subject: CN=6a2caa0c-103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:8f:53:07:00:1c:99:8e:32:75:12:27:ec:
5a:22:55:b6:cd:c8:f9:d1:25:9c:58:58:ce:82:74:
03:47:c7:c3:da:a6:b6:d9:4d:84:7f:e6:fa:d5:bd:
d4:ca:19:33:c8:0c:08:4d:90:da:94:f4:53:09:71:
01:8a:cd:ca:37:ee:ad:43:11:c0:df:dd:be:b2:4f:
4a:4e:c1:f7:66:57:f4:b7:12:cb:0a:e5:2e:22:9c:
8e:81:23:77:56:05:6a:da:14:eb:23:e6:99:ca:16:
e9:4e:8f:01:76:3e:91:cb:d5:e4:2c:f1:86:68:b5:
85:78:a7:5b:48:ed:e6:d1:6f:8e:c8:1c:94:14:45:
93:fe:80:8f:c6:e9:c2:26:10:e1:41:ea:9a:05:8f:
37:15:f3:ea:40:2d:02:03:e2:89:0e:10:e9:79:5c:
ac:e2:ae:2f:0e:9f:86:8c:74:a1:ae:18:fd:8c:23:
30:05:67:d4:d6:c8:11:c4:12:5e:54:be:a8:98:03:
94:87:fa:5c:98:ae:a6:68:9e:93:72:7c:12:6c:d9:
c9:2f:46:c4:ec:0e:7b:18:ba:a4:84:70:e3:a7:70:
3e:09:e5:ba:75:69:16:e1:32:b4:60:f6:eb:49:27:
16:a9:7d:57:5d:a5:dd:67:c1:a7:cf:3c:99:e6:5d:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:B2:B9:03:3B:4E:82:05:71:C9:27:8F:01:50:91:6B:96:95:62
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:b8:67:0f:c5:7a:b0:99:fc:91:f8:89:b4:8e:2b:be:ec:
ac:77:29:61:77:16:c8:e9:cd:7b:a4:3e:f3:3a:d9:d6:5b:d8:
20:0f:c7:e9:49:16:83:15:57:1b:4a:79:5b:b7:04:63:96:98:
18:a5:b2:85:a5:c9:c4:d7:5f:20:4f:07:fa:c5:02:d6:89:2d:
cf:53:87:7d:6b:66:1a:1a:28:7b:75:d7:80:bd:43:d0:bf:76:
cb:95:79:31:e7:3f:0a:0d:42:e1:12:ae:aa:a3:82:e5:cf:d3:
e3:27:8d:e4:ab:06:6e:01:83:c0:6e:8e:ee:6c:cd:f6:fb:78:
bb:16:1f:8a:fd:a7:4a:85:ce:32:13:89:45:71:d7:78:a8:40:
93:19:b8:84:70:02:d5:ed:02:e0:b6:a7:c0:bf:82:b1:f1:56:
e0:1a:95:87:15:f8:8a:c8:c3:c8:d6:00:ca:a0:11:b0:04:e8:
81:14:07:3b:97:54:f6:4b:da:f5:68:74:a2:3e:c5:b3:94:82:
df:4d:96:5b:07:94:f1:73:a5:43:a9:a8:72:78:e5:96:1c:5f:
48:67:c7:fd:d2:80:a5:bf:56:7a:b8:7c:52:4b:07:24:2d:9c:
93:87:f3:26:47:71:94:d6:ca:ef:c5:94:d3:a0:88:f9:90:2d:
27:5e:ad:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4NzMxMTAvBgNVBAUTKDNCNDdBQTBEMDMyMDkxOTVGMDU1NUM2MEFERTMyOTRG
MkQzN0EyQTEwHhcNMjYwNjEzMDA1MzMyWhcNMjYwNjIwMDA1MzMyWjAYMRYwFAYD
VQQDEw02YTJjYWEwYy0xMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5+PUwcAHJmOMnUSJ+xaIlW2zcj50SWcWFjOgnQDR8fD2qa22U2Ef+b61b3U
yhkzyAwITZDalPRTCXEBis3KN+6tQxHA392+sk9KTsH3Zlf0txLLCuUuIpyOgSN3
VgVq2hTrI+aZyhbpTo8Bdj6Ry9XkLPGGaLWFeKdbSO3m0W+OyByUFEWT/oCPxunC
JhDhQeqaBY83FfPqQC0CA+KJDhDpeVys4q4vDp+GjHShrhj9jCMwBWfU1sgRxBJe
VL6omAOUh/pcmK6maJ6TcnwSbNnJL0bE7A57GLqkhHDjp3A+CeW6dWkW4TK0YPbr
SScWqX1XXaXdZ8GnzzyZ5l3XIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/asrkD
O06CBXHJJ48BUJFrlpViMB8GA1UdIwQYMBaAFDtHqg0DIJGV8FVcYK3jKU8tN6Kh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg3My8xMTJFQzE5NkZE
QjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2taWHdWVnhncmVNcFR5MDNv
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08wZXFEUU1na1pYd1ZWeGdyZU1wVHkwM29xRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mzg3My8xMTJFQzE5NkZEQjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2ta
WHdWVnhncmVNcFR5MDNvcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKe24Zw/FerCZ/JH4ibSOK77srHcpYXcWyOnNe6Q+8zrZ1lvYIA/H6UkWgxVX
G0p5W7cEY5aYGKWyhaXJxNdfIE8H+sUC1oktz1OHfWtmGhooe3XXgL1D0L92y5V5
Mec/Cg1C4RKuqqOC5c/T4yeN5KsGbgGDwG6O7mzN9vt4uxYfiv2nSoXOMhOJRXHX
eKhAkxm4hHAC1e0C4LanwL+CsfFW4BqVhxX4isjDyNYAyqARsATogRQHO5dU9kva
9Wh0oj7Fs5SC302WWweU8XOlQ6mocnjllhxfSGfH/dKApb9Werh8UksHJC2ck4fz
JkdxlNbK78WU06CI+ZAtJ16t0A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:52:11 2026 by rpki-client