
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier: r6LBT/Ib0GBbAMfLEQ3KjJarktfutfxU8BKQ8cpq6kY=
Subject key identifier: C6:88:A0:E4:52:51:79:3D:D3:E9:01:CC:B5:DE:27:44:57:2E:F5:B1
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 09D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number: 09C4
Signing time: Tue 28 Jul 2026 20:15:47 +0000
Manifest this update: Tue 28 Jul 2026 20:15:46 +0000
Manifest next update: Tue 04 Aug 2026 20:15:46 +0000
Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: yzJvitRnapZ6MHa3UKFOG7sJYVvHxfKHXFcFP/HCgzI=)
2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=)
3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jul 28 20:15:46 2026 GMT
Not After : Aug 4 20:15:46 2026 GMT
Subject: CN=6a690df3-d4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:7a:b1:b5:2c:36:86:aa:b8:64:3e:7d:d5:
1c:24:73:6e:f7:38:ba:31:bd:a0:13:b3:79:ce:b6:
8c:66:3f:8e:5e:a6:df:06:8b:af:fb:06:db:20:19:
5b:4f:6c:4d:1a:89:49:f7:73:21:cb:dc:ae:96:bb:
21:4d:4d:19:73:75:7c:3d:47:d7:5b:76:ef:7f:18:
2e:59:17:c5:13:f0:38:8b:56:56:11:e3:a6:ba:a1:
d2:9f:78:a5:a6:99:6e:3d:b9:c7:c4:b6:e2:c6:3c:
da:fa:27:3b:22:72:ca:2c:3b:ce:f0:31:53:cc:f6:
1a:b6:55:10:fd:1e:c6:81:7d:96:cd:b9:54:d4:e6:
be:a8:42:93:3e:50:fd:a5:bd:18:6a:ce:66:d9:22:
da:95:6d:56:aa:38:f1:c4:b1:d6:b0:72:0e:cf:c7:
0c:a4:30:14:2b:07:4d:cf:d7:e5:44:5c:0b:1d:d7:
fd:5e:5a:5c:0a:2e:af:64:d0:b2:f1:85:df:44:43:
90:bf:68:3b:83:b1:bb:31:dd:ca:ab:11:c5:88:ee:
a4:91:0b:0a:68:7f:f4:30:58:f9:5d:c7:82:47:2f:
65:8f:ca:c0:62:b5:d3:8b:d1:74:23:93:cd:4a:3c:
0f:10:40:c4:2c:55:ca:be:4a:40:ff:90:9d:a7:1d:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:A0:E4:52:51:79:3D:D3:E9:01:CC:B5:DE:27:44:57:2E:F5:B1
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:94:14:61:07:75:9d:f8:74:7e:2a:dc:98:93:6c:42:6f:
31:57:90:c9:dd:f4:b7:d6:3d:4a:c2:42:a2:6a:62:4e:a7:57:
f0:77:32:d8:56:cd:77:a5:8a:55:da:e1:5d:25:8c:67:15:11:
92:0a:05:27:2b:dc:65:cb:d8:29:e0:a9:be:d0:81:fb:dc:5f:
2a:4b:34:fd:d9:8c:cb:bd:19:bf:67:0b:6e:3e:78:ce:e1:7d:
cc:8d:31:6b:50:7d:3a:64:e3:31:59:02:16:d2:0c:39:c8:39:
48:c1:8b:b8:98:fc:82:40:2e:6a:33:22:1a:ba:03:31:ff:21:
fb:a0:ae:54:18:33:be:60:96:45:d0:ff:e8:e3:bb:74:82:49:
2d:b3:34:11:95:44:64:72:fc:1f:3b:d0:1e:90:8d:df:d8:5a:
f5:69:bc:a5:4d:ee:a3:06:2a:08:8f:00:5b:b1:ef:a0:2b:18:
6c:c4:91:30:2b:b2:06:d9:8e:f9:c4:d5:30:a6:84:76:62:81:
d0:a6:c3:84:aa:8d:55:4d:1a:2d:19:a2:eb:42:ac:10:cd:91:
14:22:44:26:5e:00:4d:a7:de:0c:67:4f:c7:14:fb:31:d5:e6:
ec:87:49:7b:1c:4c:23:78:7e:f2:ca:e8:7c:df:6e:4d:31:88:
d4:e8:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:51 2026 by rpki-client