
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
File: okltnZFYW2aRdHCbDN4x_OMbL1o.mft (raw, json)
Hash identifier: 3dHtoIoz4yEGRp2hTbPlb64d3fTzVEjlsQCV4ZzNmrM=
Subject key identifier: 82:A2:89:FD:11:A3:C9:67:26:A5:70:B2:88:9B:B0:98:11:62:58:1C
Authority key identifier: A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A
Certificate issuer: /CN=A91B67D6/serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
Manifest number: 06
Signing time: Mon 27 Jul 2026 11:36:36 +0000
Manifest this update: Mon 27 Jul 2026 11:36:35 +0000
Manifest next update: Mon 03 Aug 2026 11:36:35 +0000
Files and hashes: 1: okltnZFYW2aRdHCbDN4x_OMbL1o.crl (hash: ub1jU5mvZ/MLAU1xxnItjHKuWb5yKUteXkY1Zs6HhqM=)
2: 0385DA1883C711F189BAF24284A30FBC.roa (hash: SWSLd1xBawCW6ENPqMycNBRpduG6/fZvzOANRn5i3gk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl
rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D6, serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A
Validity
Not Before: Jul 27 11:36:35 2026 GMT
Not After : Aug 3 11:36:35 2026 GMT
Subject: CN=6a6742c4-d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:54:ff:44:d9:4f:69:e5:f0:5a:6f:8b:78:
6d:df:5d:69:8a:f7:5d:27:e1:d3:09:d9:7b:f6:5b:
ad:24:53:c4:25:9e:ae:ec:18:fb:e9:4d:92:b5:fa:
ce:c6:64:f8:64:83:5c:90:f7:9c:af:9c:e9:50:e9:
e6:3b:c2:a3:83:80:74:6d:31:fb:f6:3d:6a:7b:d6:
96:34:9b:bb:63:1c:31:2d:ef:2b:65:5f:b9:73:6b:
5a:a7:a7:94:20:42:de:32:d3:91:6f:8f:d0:9d:e2:
d8:79:b2:b8:cd:9a:49:20:39:5a:74:2a:a7:aa:84:
83:40:50:ce:20:35:41:47:19:32:4b:fb:f4:cf:6e:
3c:ac:ed:f2:7d:6b:b7:5e:2a:1a:32:88:92:8d:f7:
c4:20:48:c8:b4:17:bc:a1:93:3e:c3:ed:96:d9:b9:
9c:31:29:49:9b:3f:ff:9a:dc:01:3d:df:90:ed:71:
4b:42:19:3b:3c:fb:5d:33:8e:9f:9a:52:f7:79:c1:
7d:af:52:87:6f:1b:07:6f:10:da:c1:43:a0:ba:97:
54:ff:31:8c:4a:8b:7b:ae:67:5f:0b:c1:1b:6e:7d:
fb:8c:bd:00:31:7e:44:dc:93:38:8f:da:4c:2c:1c:
1e:48:02:2a:9e:e3:69:1b:0e:4f:70:1e:ff:89:73:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:89:FD:11:A3:C9:67:26:A5:70:B2:88:9B:B0:98:11:62:58:1C
X509v3 Authority Key Identifier:
keyid:A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:89:5d:32:60:c5:ce:f2:f1:bd:31:8e:95:88:e3:97:b3:
f2:26:6b:68:3b:3a:43:e6:1d:10:9a:89:60:b7:66:a6:4a:dc:
f7:dc:9f:54:26:90:9a:2e:b3:fc:7b:8d:f5:f9:07:be:78:b5:
a9:49:40:d5:0f:2e:e0:e3:fa:a0:14:6a:7d:01:ab:fa:e9:fa:
55:48:8b:c9:64:d9:da:3e:f0:8e:0a:fe:1c:eb:27:16:5b:e0:
14:dd:a4:7f:09:c4:4d:12:87:78:37:a4:ce:fb:c5:85:1f:27:
80:91:44:73:3a:6b:6d:79:00:80:26:42:bb:4b:f9:2c:f1:60:
82:7a:5e:21:19:13:c6:63:9a:9d:41:8c:7e:ab:b5:77:17:e7:
57:8d:be:fb:11:34:5b:d1:a6:22:cc:f1:8b:d6:88:bb:1a:95:
f4:54:12:f8:17:bf:65:74:1e:64:3e:5e:f6:47:7b:ba:43:42:
34:0b:ad:4e:8a:3c:d1:58:58:5d:e0:e2:16:94:aa:ce:a8:73:
86:e7:d3:e9:78:2a:18:c9:2c:f4:95:05:49:f0:ee:03:3a:77:
88:7f:4e:fa:29:47:a1:30:ae:6d:cc:2a:c4:e7:5a:00:2c:80:
05:0d:90:95:f7:77:04:f2:ac:14:89:8a:a0:2d:8c:a2:ff:05:
4b:4c:3d:3c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjdENjExMC8GA1UEBRMoQTI0OTZEOUQ5MTU4NUI2NjkxNzQ3MDlCMENERTMxRkNF
MzFCMkY1QTAeFw0yNjA3MjcxMTM2MzVaFw0yNjA4MDMxMTM2MzVaMBgxFjAUBgNV
BAMTDTZhNjc0MmM0LWQ5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9B1T/RNlPaeXwWm+LeG3fXWmK910n4dMJ2Xv2W60kU8Qlnq7sGPvpTZK1+s7G
ZPhkg1yQ95yvnOlQ6eY7wqODgHRtMfv2PWp71pY0m7tjHDEt7ytlX7lza1qnp5Qg
Qt4y05Fvj9Cd4th5srjNmkkgOVp0KqeqhINAUM4gNUFHGTJL+/TPbjys7fJ9a7de
KhoyiJKN98QgSMi0F7yhkz7D7ZbZuZwxKUmbP/+a3AE935DtcUtCGTs8+10zjp+a
Uvd5wX2vUodvGwdvENrBQ6C6l1T/MYxKi3uuZ18LwRtuffuMvQAxfkTckziP2kws
HB5IAiqe42kbDk9wHv+Jc7E/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgqKJ/RGj
yWcmpXCyiJuwmBFiWBwwHwYDVR0jBBgwFoAUokltnZFYW2aRdHCbDN4x/OMbL1ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2N0Q2LzgyNkQ1OTkwODND
MzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJhUmRIQ2JETjR4X09NYkwx
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb2tsdG5aRllXMmFSZEhDYkRONHhfT01iTDFvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
N0Q2LzgyNkQ1OTkwODNDMzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJh
UmRIQ2JETjR4X09NYkwxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFFYldMmDFzvLxvTGOlYjjl7PyJmtoOzpD5h0Qmolgt2amStz33J9UJpCaLrP8
e431+Qe+eLWpSUDVDy7g4/qgFGp9Aav66fpVSIvJZNnaPvCOCv4c6ycWW+AU3aR/
CcRNEod4N6TO+8WFHyeAkURzOmtteQCAJkK7S/ks8WCCel4hGRPGY5qdQYx+q7V3
F+dXjb77ETRb0aYizPGL1oi7GpX0VBL4F79ldB5kPl72R3u6Q0I0C61OijzRWFhd
4OIWlKrOqHOG59PpeCoYySz0lQVJ8O4DOneIf076KUehMK5tzCrE51oALIAFDZCV
93cE8qwUiYqgLYyi/wVLTD08
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:07 2026 by rpki-client