
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: /yyJXvZZjg2sTosdJGx2WsGT1AsD0Ldirum/C2UYA/Q=
Subject key identifier: 5A:14:89:D3:05:00:19:3D:E3:8A:C5:1C:9B:79:C6:9B:40:D8:7D:2F
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1055
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 1040
Signing time: Sat 28 Feb 2026 17:32:06 +0000
Manifest this update: Sat 28 Feb 2026 17:32:05 +0000
Manifest next update: Sat 07 Mar 2026 17:32:05 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: 7Bm5lTM1kins05MEAqqzZYSRhH0b9WrQ6dBmG5Ugo78=)
2: 24528B3C076811F1A996F976023D8C67.roa (hash: UjOS1en3T8SPwAbW+LwtdwQIar3IxHo8e4V09ztkwfU=)
3: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: Yb9HAA0T86pmkc78hV3HrNDykM6h7jJRiSOFeN9gNN0=)
4: 23D70458076811F1A996F976023D8C67.roa (hash: Fa21WUEilWPOgI3Q3MoWwTvHVPlrGhFHl0dG/P0kkrE=)
5: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Feb 28 17:32:05 2026 GMT
Not After : Mar 7 17:32:05 2026 GMT
Subject: CN=69a32696-d3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:0a:c4:0a:aa:64:a6:32:01:bd:5d:56:e1:
7b:32:82:e6:13:a2:d6:b9:62:31:0b:85:72:e0:e4:
86:3b:38:4c:c2:b3:20:f3:98:f1:9f:85:51:c1:3d:
78:44:95:24:5d:19:2c:73:65:ff:80:47:fd:72:48:
e0:6f:be:e9:60:f7:43:7e:55:f9:c6:32:8f:f7:25:
8a:04:0d:c9:75:88:95:7c:2b:da:f7:90:b3:8d:f9:
16:89:10:92:69:ae:92:26:46:6f:12:93:df:2b:ee:
ee:4e:14:f9:bb:39:0c:2a:34:c1:33:d5:18:89:4e:
7d:1e:5f:ff:fb:1e:53:69:3b:e4:af:b4:89:63:7c:
45:bc:c9:0e:2c:e3:63:d6:c4:e5:3a:b6:c8:d2:01:
f3:5a:d6:60:1d:13:6c:33:78:5d:a3:28:b4:26:9d:
8e:06:e3:2c:d3:ba:dc:d4:ba:89:b9:27:2e:1f:8f:
8c:c5:4e:bb:c5:90:e5:ee:d5:43:19:f1:c1:db:d5:
e9:fa:fd:14:5d:b4:9f:60:47:fb:d1:ad:0c:c3:01:
30:29:b1:42:3b:cf:6c:64:78:e2:9f:0e:85:bb:5f:
0d:c8:9b:31:18:09:51:d3:3a:9b:3b:f8:56:4e:4c:
25:86:db:cd:0c:52:7c:f1:a8:fa:d8:f5:d4:46:1c:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:89:D3:05:00:19:3D:E3:8A:C5:1C:9B:79:C6:9B:40:D8:7D:2F
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:18:55:40:58:f3:7d:31:14:09:67:6c:f0:f0:c2:d9:ea:
5c:04:54:d5:ee:25:1d:a3:53:a4:61:db:68:45:ca:03:94:ea:
53:cd:d9:0b:ae:5f:cd:46:0a:4f:8d:c5:ae:c3:20:7e:8f:2d:
1d:a4:f1:93:90:26:cd:93:34:4b:1d:1a:af:02:88:bb:76:b4:
44:2e:c7:95:cf:a8:6b:b1:5c:ed:f3:6c:2d:3a:1d:41:65:ea:
a2:72:7d:f4:79:e8:a5:59:57:eb:d3:6c:78:d7:1e:3e:e8:ab:
67:f8:e1:8c:f0:16:ab:41:4f:48:85:3c:b0:d8:69:75:29:bf:
d5:32:02:04:34:a0:66:6b:4e:7b:dd:fe:e1:86:e0:60:91:68:
1f:6c:e1:41:33:44:b9:60:ba:6c:94:4d:bc:6b:9d:17:00:a4:
a3:34:6c:64:66:c1:af:cd:e4:8f:c0:f3:fe:90:3c:35:a2:c1:
f5:ad:12:c1:da:39:30:6b:76:e2:65:e8:89:dc:7a:f9:47:eb:
7b:15:56:87:68:5d:4d:43:c1:bd:c5:d9:55:b0:9b:69:fd:2d:
65:6f:b1:79:35:4c:28:1e:8b:fa:ee:d9:db:63:e2:57:96:ad:
5e:6d:e8:28:49:d7:a6:a9:e5:3d:fe:82:5a:cd:a1:ad:d9:dd:
0d:f5:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:24 2026 by rpki-client