
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: A3TieHM1GCsJj85no3VQK/cx+CTbned10YwHUWL4zWU=
Subject key identifier: 6F:BF:23:74:B0:7D:4B:26:95:43:30:EC:61:54:DC:30:EA:4B:D0:AE
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 108E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 1083
Signing time: Tue 28 Jul 2026 17:28:40 +0000
Manifest this update: Tue 28 Jul 2026 17:28:39 +0000
Manifest next update: Tue 04 Aug 2026 17:28:39 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: 66vEROlB64U8w9s37tsjaGnkM7KoB+QYAa3N/cwDe24=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: cNOGWjX3tS0QYF3+Hr85nxbmOcjy7rNxMm+ayP/uy9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Validity
Not Before: Jul 28 17:28:39 2026 GMT
Not After : Aug 4 17:28:39 2026 GMT
Subject: CN=6a68e6c8-4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:1f:dd:36:47:04:aa:4e:6a:8c:07:66:0d:
5f:e6:db:42:b5:fd:97:09:d5:aa:db:b3:a6:ef:5a:
f4:7e:f9:37:35:e6:eb:b0:d4:f8:0c:4f:f6:8c:70:
6a:6d:5c:3b:50:b2:90:c7:1a:63:9e:d2:83:df:b1:
f4:fb:f7:80:36:e6:8a:e0:b5:03:a3:78:55:dc:d7:
a1:1e:a7:ef:64:38:1e:7d:94:ad:17:bd:53:1e:cd:
9f:49:3f:bd:5f:be:0b:76:01:5a:e7:38:14:1a:5c:
aa:5c:e5:de:6f:7b:ad:9b:33:20:a6:78:3d:d7:7d:
43:ae:2c:3c:cc:59:85:c7:bf:d4:7b:f2:2c:e9:55:
fb:f3:d4:ca:d4:88:6b:50:51:10:9c:ec:22:0a:7f:
7b:5d:92:ba:6f:57:74:d8:60:2f:60:13:7c:d4:07:
b0:bf:a5:92:a9:59:44:02:3e:a7:4f:e6:5d:73:98:
e5:b1:bd:03:76:ea:dd:10:0f:31:84:d5:d2:e2:bb:
2c:2a:4e:b0:bc:ba:0d:4a:4c:cd:52:e2:cc:21:0e:
2b:f2:69:8a:49:3b:f9:46:1a:b2:96:86:73:9b:f6:
1e:1a:21:6e:4d:69:b5:f3:21:6a:04:c0:98:82:d2:
4a:92:4c:f4:03:a1:d8:f6:13:70:26:37:44:8b:5d:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:23:74:B0:7D:4B:26:95:43:30:EC:61:54:DC:30:EA:4B:D0:AE
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b3:01:09:0f:38:60:4b:c0:b6:0a:7f:85:6f:69:78:69:99:
2a:e7:a0:78:04:a4:78:69:dd:53:29:e0:55:ce:b3:35:9e:eb:
2a:44:79:51:b8:9a:8e:41:59:8e:1d:04:01:15:1b:1f:4b:cb:
a7:d5:3d:5c:e0:05:23:92:9b:04:41:28:60:99:34:6a:2c:e6:
e1:84:3e:14:ee:4c:8f:9c:48:cc:cb:a5:ae:5e:8c:94:44:41:
01:cf:ca:06:5a:0c:b8:d2:88:68:4f:0f:20:47:db:73:76:1d:
d7:87:00:db:1f:5a:42:30:4b:d6:12:2e:ef:84:78:ae:76:f1:
61:f1:73:30:33:d2:9f:16:fa:d4:28:5e:7a:78:7d:40:52:04:
4c:82:58:a0:3c:15:99:87:f3:d1:2a:33:90:cb:ff:39:b6:37:
c0:83:3f:a9:0e:4f:f4:11:fe:fa:31:45:f4:64:b7:66:9f:a9:
7e:8b:7d:61:c8:00:ce:5f:28:99:8d:be:b3:a2:6a:00:46:56:
17:a0:72:64:e9:29:bf:20:2c:19:09:06:a3:5e:30:0a:35:99:
59:97:11:ac:f5:0f:f7:25:8f:a0:fc:97:c4:4d:20:0a:c4:02:
85:51:49:6a:1e:ef:a5:fa:2d:42:0a:56:a7:d6:37:98:13:d5:
b3:77:2b:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1
NkQzNDQyNTQwHhcNMjYwNzI4MTcyODM5WhcNMjYwODA0MTcyODM5WjAYMRYwFAYD
VQQDEw02YTY4ZTZjOC00MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhof3TZHBKpOaowHZg1f5ttCtf2XCdWq27Om71r0fvk3NebrsNT4DE/2jHBq
bVw7ULKQxxpjntKD37H0+/eANuaK4LUDo3hV3NehHqfvZDgefZStF71THs2fST+9
X74LdgFa5zgUGlyqXOXeb3utmzMgpng9131Driw8zFmFx7/Ue/Is6VX789TK1Ihr
UFEQnOwiCn97XZK6b1d02GAvYBN81Aewv6WSqVlEAj6nT+Zdc5jlsb0DdurdEA8x
hNXS4rssKk6wvLoNSkzNUuLMIQ4r8mmKSTv5RhqyloZzm/YeGiFuTWm18yFqBMCY
gtJKkkz0A6HY9hNwJjdEi13dcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+/I3Sw
fUsmlUMw7GFU3DDqS9CuMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC
QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W
c1NXbUFzZEdhNXBXMDBRbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUrMBCQ84YEvAtgp/hW9peGmZKuegeASkeGndUyngVc6zNZ7rKkR5UbiajkFZ
jh0EARUbH0vLp9U9XOAFI5KbBEEoYJk0aizm4YQ+FO5Mj5xIzMulrl6MlERBAc/K
BloMuNKIaE8PIEfbc3Yd14cA2x9aQjBL1hIu74R4rnbxYfFzMDPSnxb61Cheenh9
QFIETIJYoDwVmYfz0SozkMv/ObY3wIM/qQ5P9BH++jFF9GS3Zp+pfot9YcgAzl8o
mY2+s6JqAEZWF6ByZOkpvyAsGQkGo14wCjWZWZcRrPUP9yWPoPyXxE0gCsQChVFJ
ah7vpfotQgpWp9Y3mBPVs3crzw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:23 2026 by rpki-client