
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: YkUcVQuNpoWiB295FP2I75lmKaXj9WA3yE7Lgz4pcWg=
Subject key identifier: 93:D2:B1:48:DB:0A:77:72:72:75:9E:23:7D:07:D9:AB:90:F3:C6:00
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 105B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 1042
Signing time: Mon 02 Mar 2026 01:42:42 +0000
Manifest this update: Mon 02 Mar 2026 01:42:40 +0000
Manifest next update: Mon 09 Mar 2026 01:42:40 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: 7PU6HGR4K2hAipQOENWj2aiuYMfvck0ODSItHA56gao=)
2: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: aubLihlPiRMZcAing3eyikSdQeQcGYLWa8aEgV6rMbw=)
3: 23D70458076811F1A996F976023D8C67.roa (hash: P/jKVKxpnPS5oM0vxp1cgktFei7qJGJt+hIa7BJlhbs=)
4: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: 7k/0PH5nSqAO2g0oYdL/sS5gQW9gOR4413PNtJehi7c=)
5: 24528B3C076811F1A996F976023D8C67.roa (hash: xScZjBZZvVOj75CzK0I4g7RaS0lDSWrcyuO5cQw8+S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4187 (0x105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Mar 2 01:42:40 2026 GMT
Not After : Mar 9 01:42:40 2026 GMT
Subject: CN=69a4eb12-0d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:af:f7:a5:f2:8e:34:73:dc:75:35:91:fd:
d7:0f:b5:b8:a7:cb:49:26:7c:32:55:04:76:06:81:
65:70:07:52:1f:8b:1b:ed:0f:de:72:95:c7:10:ee:
2b:88:51:4c:5d:4d:08:06:64:0b:8a:e8:7c:d4:a8:
7f:5c:52:6b:11:03:ef:81:2b:dc:82:c4:cb:ac:9a:
86:4f:b8:27:cc:00:ca:38:47:d3:ad:02:47:76:cd:
39:de:58:16:80:28:37:ba:e7:06:06:0a:59:fe:b1:
fa:de:39:9d:a3:2c:a5:3d:8f:d7:14:31:4d:ba:4f:
31:c1:03:7d:a8:98:b6:ca:01:61:4e:7c:d7:9b:7f:
94:27:f6:49:a4:c8:4d:84:31:a4:3d:b8:93:98:9f:
26:17:86:f7:a3:84:dc:89:eb:9a:3c:ca:7f:bc:9b:
a8:5b:45:35:f0:93:8b:9d:64:5c:69:86:52:73:9f:
47:68:ec:99:33:95:03:0d:03:3e:67:cb:95:df:42:
14:cb:2a:3b:92:e5:37:69:02:5c:05:89:31:2c:06:
05:92:37:4f:e1:d0:82:04:af:82:27:07:b4:66:be:
a2:97:53:38:29:fc:f5:82:ee:ab:94:73:f6:bb:fd:
e1:4b:e0:b2:43:6b:b9:76:75:3c:65:b3:44:76:34:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:B1:48:DB:0A:77:72:72:75:9E:23:7D:07:D9:AB:90:F3:C6:00
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:70:a7:48:5a:c1:17:d5:4d:58:2c:1a:7e:a1:9e:4b:e1:
94:b2:09:50:3f:f2:2d:b0:52:1d:29:7d:ab:e6:66:bd:9f:71:
01:51:21:22:5a:63:b1:f5:4e:e5:80:6e:e8:d4:96:ec:3c:16:
60:68:18:6a:03:b7:be:6f:9c:00:19:b9:d3:24:bf:38:6b:2d:
a5:6e:a3:8d:59:be:33:a0:8b:91:44:34:ca:c6:fc:35:ad:e7:
05:80:23:15:56:23:bd:0e:c1:09:dc:11:9d:d1:17:2f:d4:47:
a9:c3:99:76:97:c7:3b:50:ba:a0:5f:ec:99:70:d9:45:54:75:
62:b6:9e:0f:92:13:6e:8a:95:52:5a:84:37:a3:b6:2b:f5:ec:
9f:ad:21:c9:a7:ee:71:89:34:bc:eb:29:97:b7:02:be:2d:fa:
5a:b3:aa:0f:58:8e:e2:04:d4:73:30:aa:3f:75:5a:7c:97:8d:
45:8a:7c:73:1b:e9:33:3c:ed:c5:c7:ea:4f:c6:4e:24:0c:ab:
58:55:1d:27:4c:f8:58:b2:c8:c6:87:e3:5f:ab:61:5f:f0:a9:
8b:d7:b8:b7:06:2f:e1:84:03:5e:64:02:e7:b7:f9:53:d7:a0:
ad:d8:d3:d4:bf:5d:42:8d:e4:04:c5:44:d9:dd:78:3c:48:e2:
cc:d4:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:08 2026 by rpki-client