
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: hNKfiKxC4OKkHnzkMFx1CzSYN0bDmBx3aEDxHYnXHkI=
Subject key identifier: A4:0E:28:67:D7:09:42:4C:EC:8E:25:D2:7E:1B:3C:F6:FF:94:B3:7A
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1075
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 105B
Signing time: Thu 16 Apr 2026 17:20:28 +0000
Manifest this update: Thu 16 Apr 2026 17:20:27 +0000
Manifest next update: Thu 23 Apr 2026 17:20:27 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: +L4cd762v9vbWooVyaUlu6BEk1+Q47uZe9tooEUFK7M=)
2: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: aubLihlPiRMZcAing3eyikSdQeQcGYLWa8aEgV6rMbw=)
3: 24528B3C076811F1A996F976023D8C67.roa (hash: xScZjBZZvVOj75CzK0I4g7RaS0lDSWrcyuO5cQw8+S4=)
4: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: 7k/0PH5nSqAO2g0oYdL/sS5gQW9gOR4413PNtJehi7c=)
5: 23D70458076811F1A996F976023D8C67.roa (hash: P/jKVKxpnPS5oM0vxp1cgktFei7qJGJt+hIa7BJlhbs=)
6: B66836E029FD11F1B53E620AA6833773.roa (hash: I9T+NepjsQPv+xzplAWCLToIoKqM32oTOa1Q+Tf8pRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4213 (0x1075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Apr 16 17:20:27 2026 GMT
Not After : Apr 23 17:20:27 2026 GMT
Subject: CN=69e11a5c-3beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:29:5f:e3:46:31:5d:c1:6f:f5:b8:a0:ec:
bb:d4:0a:40:77:c8:f4:6a:15:82:89:b3:8d:95:e9:
b1:4c:80:9c:a9:0a:15:44:7f:a2:0f:b2:21:7d:8c:
b8:bd:a4:50:9f:0f:f5:be:d2:71:01:45:8a:94:ba:
5b:d0:8d:4b:1c:97:49:1b:e8:e7:fe:c1:a3:5e:44:
50:97:dd:26:40:0c:2b:eb:5d:c8:8d:7b:3d:8f:ef:
af:7a:1b:0e:c2:f1:bd:fa:49:6d:4c:c7:da:07:0d:
78:dd:68:b7:bc:a9:10:0f:05:37:0e:0a:d5:58:26:
55:f5:b7:da:f2:88:fa:3d:48:65:fa:90:b6:16:88:
cc:62:1c:94:70:58:7c:e6:71:1d:b9:4b:ca:32:90:
fc:65:b3:04:29:2f:19:7b:a6:e5:d7:41:cb:97:80:
47:92:2d:e1:9c:85:e5:d9:ac:c7:c5:ce:4f:b7:41:
f6:37:ed:d3:1d:4b:e7:41:22:c9:ee:06:e5:a9:a0:
ab:39:58:93:bd:fe:71:c6:0c:57:ea:18:21:ac:3a:
93:4e:31:91:32:e7:81:a9:de:d3:96:4d:12:28:71:
a2:e9:f5:1e:bd:db:b3:ed:c0:76:93:82:6b:4e:1e:
08:5b:3d:40:f7:62:ca:8b:51:bc:61:f9:e7:f3:bc:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:28:67:D7:09:42:4C:EC:8E:25:D2:7E:1B:3C:F6:FF:94:B3:7A
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:94:db:82:f3:33:f3:76:98:b1:0d:0f:40:84:54:2e:a0:38:
c3:8b:b5:17:f1:26:7e:ba:67:34:bd:c0:7a:07:5e:5f:e3:4a:
f2:45:7f:fc:04:3c:e8:60:79:3f:23:a8:d6:7c:3b:c7:6e:b7:
2f:1a:ae:7f:f3:ba:2b:6b:e2:de:aa:ae:24:6d:05:23:93:13:
47:d1:87:5a:e1:b6:a9:60:20:62:3d:43:1c:a9:5f:f2:94:8f:
ba:a7:67:6c:ac:8c:ef:62:60:e6:04:db:0a:a0:77:35:80:59:
72:f6:e7:34:6a:f1:92:ec:80:eb:9b:d6:45:ca:47:6f:c3:f3:
c5:4d:2c:6d:79:c6:25:99:a4:46:7c:9b:07:be:d4:78:48:45:
15:cf:39:a1:6c:95:92:3c:00:01:d8:a3:3c:d3:d0:89:fc:fb:
e3:a2:0b:a8:64:6f:09:c2:40:48:e4:25:5e:c5:13:1b:b8:ae:
c5:9e:2a:4a:e3:b0:fc:bb:d0:79:9b:12:3a:fe:8e:c2:a5:c5:
13:f6:e2:c1:ad:0f:d9:07:00:c8:e1:62:e0:14:b4:90:66:21:
56:c1:05:53:f0:fb:98:22:d6:b3:8e:b5:85:e7:a2:d1:c1:78:
3e:04:a4:62:d7:f6:04:0c:c9:ea:77:9e:7a:33:68:95:0d:7f:
e4:65:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:29 2026 by rpki-client