
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier: FQF6e/0QDrzraq0oYRofTt3k5MrDuImKUSd2MSnWy2Y=
Subject key identifier: 5C:47:9B:39:6F:96:AB:46:B5:F0:7C:3C:CA:49:39:F3:61:5B:FD:5F
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number: 01AB
Signing time: Sat 13 Jun 2026 04:08:43 +0000
Manifest this update: Sat 13 Jun 2026 04:08:42 +0000
Manifest next update: Sat 20 Jun 2026 04:08:42 +0000
Files and hashes: 1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: AblUQ9eNFo9gggMK6ODmh1thjnxMvFs/2ulDPCy5hGE=)
2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Validity
Not Before: Jun 13 04:08:42 2026 GMT
Not After : Jun 20 04:08:42 2026 GMT
Subject: CN=6a2cd7ca-eff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:2a:ff:e5:42:71:c2:67:78:79:d2:78:8f:
9a:19:7e:f4:8d:bf:8a:01:3c:5d:ef:b9:73:28:64:
11:cb:98:2f:b4:74:be:61:c0:79:f6:91:f5:b8:f7:
e3:70:34:c8:31:ca:b6:99:7e:76:c2:a5:c0:5d:fa:
c8:08:af:ff:a8:18:1c:bb:36:75:0d:16:38:13:7a:
30:db:13:9a:a7:3b:0d:66:7e:64:7b:eb:13:5e:06:
6f:fd:48:fc:55:1c:66:a3:99:ea:a6:44:59:61:2e:
d3:97:3b:28:a9:54:f9:90:cf:68:81:ec:9c:c5:b2:
1c:ef:44:ab:37:2c:22:02:80:48:63:03:1e:35:44:
ca:e1:a1:64:d3:f6:c4:83:ec:b1:4c:55:fe:75:00:
f1:0b:b6:b2:42:06:48:95:33:0d:5d:61:de:f1:1e:
1b:c4:bb:42:23:9c:63:32:87:5b:9b:31:b2:c5:c0:
2e:3c:c3:ea:1a:f9:e7:a8:98:d8:96:a8:33:61:c4:
b4:95:31:3b:4c:df:0b:41:c7:45:6e:41:e6:b4:9a:
1f:07:47:d1:1e:3b:ed:9a:2f:b9:38:05:4f:db:66:
90:54:c2:40:18:03:22:52:3b:e7:13:2f:22:3b:b9:
7b:98:03:8d:ba:c1:83:9a:af:f0:cd:52:8a:c1:af:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:9B:39:6F:96:AB:46:B5:F0:7C:3C:CA:49:39:F3:61:5B:FD:5F
X509v3 Authority Key Identifier:
keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:6a:b3:e6:ce:8a:6c:29:20:e9:c3:4d:0c:b7:db:c5:0a:
53:25:bf:d7:0c:5f:5b:74:41:a3:6f:57:88:af:45:96:2a:03:
2d:2c:4d:23:30:8a:f3:49:59:15:5f:b4:8d:f6:5f:03:24:86:
72:40:53:23:c3:15:1f:5a:1b:f7:45:78:5b:c1:cd:87:2e:46:
40:5b:f1:b0:99:56:d0:0a:29:34:00:3e:d4:cc:78:db:b7:f3:
8a:f6:e5:cb:0e:f8:0b:a2:87:eb:74:37:fa:f6:18:48:66:a0:
39:b4:44:0f:12:14:a3:90:5b:36:16:0d:a6:d4:7b:d2:f0:c3:
b2:ff:5e:55:3e:bb:54:cf:7b:f9:d4:4d:e9:32:47:3c:22:ed:
e8:fd:98:b2:8c:39:38:c8:56:52:4e:f2:5c:d1:70:12:84:1c:
cc:3a:57:c1:2e:9b:45:4c:2c:69:4f:a4:64:22:23:e8:0f:5a:
45:89:ab:71:3f:85:50:6e:1e:07:84:25:02:94:fb:c1:58:b9:
f7:25:c1:5b:0f:94:4c:da:46:a3:f3:a1:67:d8:76:af:5b:27:
79:ef:d8:22:d8:cc:32:9f:8e:56:75:9a:f9:1b:7a:ad:b7:84:
b8:2a:d5:fc:90:5e:b4:89:2d:cb:05:c8:17:2b:8f:58:44:d7:
01:84:7b:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1QUMxMTAvBgNVBAUTKEExMEY1NzgzQzhGOUE2RDk0RDI5QjRBQTkwQzU2RTAx
NkJCNTE0NTYwHhcNMjYwNjEzMDQwODQyWhcNMjYwNjIwMDQwODQyWjAYMRYwFAYD
VQQDEw02YTJjZDdjYS1lZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCkq/+VCccJneHnSeI+aGX70jb+KATxd77lzKGQRy5gvtHS+YcB59pH1uPfj
cDTIMcq2mX52wqXAXfrICK//qBgcuzZ1DRY4E3ow2xOapzsNZn5ke+sTXgZv/Uj8
VRxmo5nqpkRZYS7TlzsoqVT5kM9ogeycxbIc70SrNywiAoBIYwMeNUTK4aFk0/bE
g+yxTFX+dQDxC7ayQgZIlTMNXWHe8R4bxLtCI5xjModbmzGyxcAuPMPqGvnnqJjY
lqgzYcS0lTE7TN8LQcdFbkHmtJofB0fRHjvtmi+5OAVP22aQVMJAGAMiUjvnEy8i
O7l7mAONusGDmq/wzVKKwa/5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxHmzlv
lqtGtfB8PMpJOfNhW/1fMB8GA1UdIwQYMBaAFKEPV4PI+abZTSm0qpDFbgFrtRRW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9DQjc0RjhCRUUx
RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0bE5LYlNxa01WdUFXdTFG
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29ROVhnOGo1cHRsTktiU3FrTVZ1QVd1MUZGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjVBQy9DQjc0RjhCRUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0
bE5LYlNxa01WdUFXdTFGRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpBqs+bOimwpIOnDTQy328UKUyW/1wxfW3RBo29XiK9FlioDLSxNIzCK80lZ
FV+0jfZfAySGckBTI8MVH1ob90V4W8HNhy5GQFvxsJlW0AopNAA+1Mx427fzivbl
yw74C6KH63Q3+vYYSGagObREDxIUo5BbNhYNptR70vDDsv9eVT67VM97+dRN6TJH
PCLt6P2Ysow5OMhWUk7yXNFwEoQczDpXwS6bRUwsaU+kZCIj6A9aRYmrcT+FUG4e
B4QlApT7wVi59yXBWw+UTNpGo/OhZ9h2r1snee/YItjMMp+OVnWa+Rt6rbeEuCrV
/JBetIktywXIFyuPWETXAYR7ew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:10 2026 by rpki-client