
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: 1VkCCg52J4dolCxavb5TtBPJxz/k3NVl/NsFOen2jtA=
Subject key identifier: E2:78:45:27:7A:61:1B:BC:60:D2:80:0F:B6:AD:C6:9C:55:ED:6D:AE
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 10B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 1093
Signing time: Tue 28 Jul 2026 17:28:37 +0000
Manifest this update: Tue 28 Jul 2026 17:28:36 +0000
Manifest next update: Tue 04 Aug 2026 17:28:36 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: S+qsLDOu4Iqrt5hTMQLIx5fvZKRWsK8viyXC1VVZ3/Y=)
2: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=)
3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=)
4: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=)
5: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=)
6: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=)
7: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4276 (0x10b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Jul 28 17:28:36 2026 GMT
Not After : Aug 4 17:28:36 2026 GMT
Subject: CN=6a68e6c5-a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:f2:50:c0:cf:65:18:3b:0d:cd:20:a2:ab:
9b:aa:fc:72:8c:67:bc:f1:cb:4c:bb:2d:48:f8:c8:
ed:1d:8f:76:9c:e1:2f:7a:6d:d5:42:c4:5c:70:c0:
2b:81:f5:55:ef:1c:79:2f:f0:92:92:1a:f2:79:1e:
aa:85:f4:16:03:6a:f7:f3:06:bd:d1:38:25:a3:3b:
a7:b5:17:69:12:2b:1d:f3:e1:bd:98:c2:af:06:a5:
56:2a:e5:b9:4e:24:fb:4e:e3:aa:da:d3:f1:67:11:
d8:3b:87:95:bf:06:61:d7:80:7b:7d:81:35:e2:92:
aa:5b:70:1d:f5:f5:e1:78:59:d9:d9:ec:e6:e4:aa:
bb:5f:16:a7:e3:6d:27:26:0a:de:15:fa:f1:65:fb:
4e:e7:b0:52:26:09:e7:5b:b5:10:24:eb:01:b5:0b:
aa:f3:b3:d0:fa:21:a2:a8:51:17:32:c3:40:b2:14:
9d:dc:24:a8:b6:4a:dc:40:77:50:0e:bf:8d:97:20:
f3:27:db:5b:ad:37:08:c7:0f:06:a1:0d:8f:45:24:
c3:8f:3f:20:98:ae:1e:92:1b:f6:e0:df:42:06:14:
8a:88:cc:95:f7:d6:43:92:19:3e:99:0d:f3:f7:a4:
27:57:7a:d0:fe:b1:de:e2:24:4c:c3:71:c9:00:f8:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:45:27:7A:61:1B:BC:60:D2:80:0F:B6:AD:C6:9C:55:ED:6D:AE
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:95:90:a3:63:5b:4a:bc:fa:79:ee:8a:bb:6b:c3:1f:09:
6c:b5:cf:ba:8b:27:58:4f:4d:cf:43:f3:da:78:d5:5e:6b:2f:
7e:d0:bb:06:be:77:f0:32:1a:1f:e8:4b:f6:ce:b9:38:0b:9c:
54:27:fb:02:f7:5b:51:98:f0:6b:df:29:e8:42:87:21:12:df:
f7:1f:70:15:c9:6f:20:d3:74:eb:b8:5d:72:8d:94:3f:d4:57:
06:9a:e1:27:25:99:1c:a2:ca:71:86:c3:e9:cc:9d:79:55:54:
43:2b:90:ae:27:ac:9c:8b:fb:df:9a:aa:5a:50:87:b1:15:76:
50:61:da:70:a2:b8:f2:09:16:c8:89:af:de:e5:8d:90:e8:72:
b8:f6:f8:48:a5:59:66:1a:5b:1b:2a:63:8d:e5:92:8f:c6:20:
23:12:ca:7b:e4:00:29:d9:6a:4c:29:7f:d6:67:65:35:05:47:
5f:63:37:7a:21:62:6d:4d:e7:54:aa:99:d7:19:50:bc:91:41:
5e:05:35:39:b7:d1:33:ff:54:16:9c:ce:1e:bd:06:e8:b0:37:
ca:e8:b6:1d:b2:b7:75:c4:81:f7:0f:d2:fc:9a:94:98:0a:14:
ab:3a:64:88:9d:e6:dd:4d:eb:eb:4b:a8:c5:59:64:f4:81:73:
65:22:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:34 2026 by rpki-client