
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: /xZGKY+9oS8A3FFO3ZT+hoJdsTMJngaAzcFPoeYK5aU=
Subject key identifier: 6C:9C:B3:5C:BC:B5:B0:F0:16:ED:FD:1D:5E:A0:A3:51:4A:06:CA:41
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0BA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B9B
Signing time: Thu 08 Oct 2026 19:14:02 +0000
Manifest this update: Thu 08 Oct 2026 19:14:01 +0000
Manifest next update: Thu 15 Oct 2026 19:14:01 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: uhetC2Cea4GJktetv+lO7SEl9cPF7NVfvSy2YqgYMCs=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Oct 8 19:14:01 2026 GMT
Not After : Oct 15 19:14:01 2026 GMT
Subject: CN=6ac7eb7a-0bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:2d:3c:a6:f8:72:d9:3c:8d:89:bb:43:c1:
59:f2:1d:28:69:50:ad:36:c6:54:45:f0:6d:50:d2:
24:00:1d:aa:e5:cd:18:b9:75:3e:6e:4e:a7:6d:11:
5a:9a:70:6d:6a:10:02:26:4f:58:4a:74:52:03:78:
35:93:32:e5:a5:a0:b3:31:5a:fa:65:29:2f:90:12:
57:d7:45:ca:b6:b9:9b:47:79:4b:64:8b:d0:e1:af:
b4:23:cd:f7:ad:da:8a:40:1d:f1:31:40:da:b4:8b:
7f:0d:19:b8:ea:f8:5b:d5:e4:68:00:21:92:de:66:
fe:b6:c1:d5:2a:34:f7:82:51:73:44:bb:4b:dc:4a:
fb:5c:99:6d:7a:e6:83:a0:e8:1e:fb:34:85:fd:d4:
ee:54:a6:7f:70:1b:84:82:1a:9e:08:72:d6:a0:8b:
31:24:1f:27:2e:5d:c4:26:02:e3:19:67:3e:40:ed:
23:8b:3f:a9:8b:86:7b:ab:4f:30:cc:e0:31:b8:aa:
4e:de:03:8f:f7:2a:de:2f:25:63:70:fe:70:94:01:
0d:2b:0c:9d:17:4c:29:89:a1:80:3b:16:9f:76:04:
6d:77:19:0f:f5:22:b4:83:af:7c:7f:e3:32:b3:e8:
ab:8f:18:7f:3d:44:49:4d:a7:31:d6:ef:3b:fc:6d:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:B3:5C:BC:B5:B0:F0:16:ED:FD:1D:5E:A0:A3:51:4A:06:CA:41
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:78:55:5a:02:70:27:6a:f4:13:fe:49:f0:89:e6:c8:3c:
66:40:d8:94:2f:32:00:f1:5f:47:57:11:c4:3a:1c:44:3a:c7:
8a:19:1b:c0:3b:f6:9c:42:06:aa:10:d7:a5:91:cd:07:dd:c6:
40:8f:97:c4:24:9c:69:95:1e:9e:7e:d0:a0:00:92:e7:d4:8c:
d0:18:aa:1a:a7:36:a3:fd:e3:6a:dd:86:20:42:cf:3e:8a:7c:
47:9a:b5:4b:26:62:fe:2f:89:c5:6d:bc:cb:73:b3:90:54:f2:
8d:b5:62:02:69:50:fd:e7:0b:c3:1e:71:0a:24:ec:cb:cf:dc:
c5:19:d1:3f:25:eb:fd:d2:51:fc:d1:fb:b5:47:34:03:e0:00:
41:97:80:9f:3e:11:b8:f5:2b:5a:9b:05:54:46:7f:ca:18:7c:
54:04:00:24:38:fa:0e:61:10:ea:86:2a:47:6f:a7:09:d9:9c:
4c:74:e5:fa:1f:b8:15:6c:8a:40:0c:7e:45:e5:c9:34:7e:14:
a3:d0:a4:a8:bf:6b:b6:bc:86:07:4d:ed:64:c0:fd:1f:0a:50:
b0:cc:d2:8a:c3:d6:52:8a:ac:22:7e:1c:10:b6:8c:df:9f:83:
da:31:48:9a:a4:c8:eb:6c:bc:c1:d7:fd:dc:0f:48:41:f5:2b:
1a:63:1d:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD
RDIxNTFCMDIwHhcNMjYxMDA4MTkxNDAxWhcNMjYxMDE1MTkxNDAxWjAYMRYwFAYD
VQQDEw02YWM3ZWI3YS0wYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUQtPKb4ctk8jYm7Q8FZ8h0oaVCtNsZURfBtUNIkAB2q5c0YuXU+bk6nbRFa
mnBtahACJk9YSnRSA3g1kzLlpaCzMVr6ZSkvkBJX10XKtrmbR3lLZIvQ4a+0I833
rdqKQB3xMUDatIt/DRm46vhb1eRoACGS3mb+tsHVKjT3glFzRLtL3Er7XJlteuaD
oOge+zSF/dTuVKZ/cBuEghqeCHLWoIsxJB8nLl3EJgLjGWc+QO0jiz+pi4Z7q08w
zOAxuKpO3gOP9yreLyVjcP5wlAENKwydF0wpiaGAOxafdgRtdxkP9SK0g698f+My
s+irjxh/PURJTacx1u87/G19ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGycs1y8
tbDwFu39HV6go1FKBspBMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4
Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2
V0VwMWpEcDlVZnJOSVZHd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaPd4VVoCcCdq9BP+SfCJ5sg8ZkDYlC8yAPFfR1cRxDocRDrHihkbwDv2nEIG
qhDXpZHNB93GQI+XxCScaZUenn7QoACS59SM0BiqGqc2o/3jat2GIELPPop8R5q1
SyZi/i+JxW28y3OzkFTyjbViAmlQ/ecLwx5xCiTsy8/cxRnRPyXr/dJR/NH7tUc0
A+AAQZeAnz4RuPUrWpsFVEZ/yhh8VAQAJDj6DmEQ6oYqR2+nCdmcTHTl+h+4FWyK
QAx+ReXJNH4Uo9CkqL9rtryGB03tZMD9HwpQsMzSisPWUoqsIn4cELaM35+D2jFI
mqTI62y8wdf93A9IQfUrGmMdEA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:44:21 2026 by rpki-client