
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: iOepTnugokVzE7ZtH/inI6c3xp80OTWqHvOBRcBAjB4=
Subject key identifier: D7:1E:7A:A6:DC:E6:04:86:48:A5:EC:70:B0:CD:DA:74:60:CA:6A:E0
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 109D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 107C
Signing time: Fri 12 Jun 2026 17:21:38 +0000
Manifest this update: Fri 12 Jun 2026 17:21:37 +0000
Manifest next update: Fri 19 Jun 2026 17:21:37 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: yHUx1g4PK2uYTubRK0UIfx+P4zZWCtmEwPPDcoxTR7s=)
2: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=)
3: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=)
4: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=)
5: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=)
6: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=)
7: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4253 (0x109d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Jun 12 17:21:37 2026 GMT
Not After : Jun 19 17:21:37 2026 GMT
Subject: CN=6a2c4021-bbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:52:4d:5b:3b:3d:9d:c1:56:a2:98:64:1a:
b5:1e:22:e0:b0:cb:3e:5e:8d:70:8f:ce:78:90:66:
ea:e8:f3:e3:b0:c0:80:a6:f2:41:03:da:8f:a6:95:
b8:31:b4:2b:e0:6c:fa:36:bc:23:04:c8:b1:3d:17:
b9:4f:75:28:97:6e:3a:d5:fb:06:8b:b1:b4:cc:be:
d3:c6:a9:7b:d0:fd:c5:c5:0b:d2:3f:36:9d:2f:44:
2f:30:ae:62:95:94:7f:0f:b4:25:0d:4d:56:5e:16:
2b:99:0e:a7:67:5e:f0:56:b5:e3:8b:ad:90:88:c1:
66:70:c8:4b:bb:fa:ba:20:8d:e4:13:93:c1:4d:80:
20:a4:f8:34:30:51:71:96:52:a8:4e:8e:c2:22:70:
e7:c7:8e:5a:a6:28:ce:40:a1:5d:52:5f:49:ce:06:
82:1d:8e:a9:47:2e:e6:b2:29:5d:7c:38:07:e5:99:
85:ae:c6:51:72:72:05:aa:e0:0f:f6:5e:2a:c6:83:
28:80:c3:53:7f:b3:14:e9:17:17:8c:bb:49:4e:5c:
92:08:5a:9d:3e:3f:e3:2c:0f:ed:1e:d2:c3:eb:25:
ba:de:f0:9b:2d:29:59:92:7a:28:68:f1:b9:ff:10:
60:79:1a:d7:35:03:61:a5:b6:80:9f:52:4d:a0:e1:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:7A:A6:DC:E6:04:86:48:A5:EC:70:B0:CD:DA:74:60:CA:6A:E0
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:4e:dc:f7:8d:d4:37:9c:38:01:58:9d:61:2d:60:30:42:
e1:65:65:e6:89:2c:c5:b2:f9:7f:6d:9c:0a:2f:16:71:19:29:
86:09:77:9d:30:9f:b4:f8:7a:f5:5e:3a:b6:11:33:81:c9:a6:
c4:60:98:93:62:33:21:83:cf:f4:b3:b6:05:8b:56:ac:a0:5e:
cd:19:1d:da:4f:7e:d0:78:f8:3e:b7:a0:cc:9d:bc:18:9b:36:
e6:0f:8f:95:56:c1:8e:46:22:02:b6:c5:a9:4f:03:2c:e6:c2:
93:75:bb:4a:a3:af:47:57:b7:c0:b2:ec:d2:0f:14:9f:6a:80:
d0:77:13:e3:67:62:f4:84:21:72:c1:3c:e5:f4:b4:d9:13:d9:
ad:63:bd:91:c7:c4:98:5e:d9:ef:0d:97:6c:31:1c:96:32:e5:
b9:76:90:bb:ef:52:9c:49:a3:92:4a:1c:0e:26:34:10:48:60:
05:cd:4c:f9:7a:e4:86:94:88:79:32:d3:3d:26:43:23:e8:69:
d9:4c:c4:98:12:99:ca:6a:d3:60:b7:bb:43:52:d9:6d:52:ed:
da:89:70:4a:ce:be:16:d1:38:6d:d9:a7:8f:5b:28:42:f5:19:
ea:dd:7c:eb:88:b4:98:2e:ce:ed:1d:4f:cd:1f:e6:3b:37:37:
b4:a6:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:46 2026 by rpki-client