
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json)
Hash identifier: boGs7lqa5MSF9zHEWGK6+b+lPCFu/v1/rcbn5OAzo5U=
Subject key identifier: 7A:CA:B1:0F:0B:06:29:0D:74:F8:F2:95:55:EE:BA:B2:EC:4F:BD:12
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial: 0AB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
Manifest number: 0AAD
Signing time: Sat 28 Feb 2026 19:44:34 +0000
Manifest this update: Sat 28 Feb 2026 19:44:34 +0000
Manifest next update: Sat 07 Mar 2026 19:44:34 +0000
Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: RMF2ZKdZbLWr7ZOP+Z07qEodZ7OO3izyoYmS76ezPHI=)
2: 62B22A709D2511F092B08685C4F9AE02.roa (hash: 3Ui4cpTHHeKfz+ZmJHpf6SoxkqjlYYO57sXCMQDXSvQ=)
3: 631E45669D2511F092B08685C4F9AE02.roa (hash: 7FJFv2Mx+1Xt7OR8AiHSTaeUg0YXybdvrKVZMy3KEE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Validity
Not Before: Feb 28 19:44:34 2026 GMT
Not After : Mar 7 19:44:34 2026 GMT
Subject: CN=69a345a2-c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:76:e3:38:72:ca:4e:fa:32:98:8a:22:c6:
c2:98:3b:c2:35:0a:c5:a0:81:9d:db:0c:8b:27:9b:
57:9f:0f:dd:fc:16:4b:8b:28:a2:af:7c:14:f1:4c:
8e:bd:fc:17:c5:6f:5b:1e:3a:6f:d1:da:b1:3f:fd:
e0:ba:0d:d8:05:ac:0e:08:04:69:50:90:6f:49:e7:
9a:24:71:48:98:cc:30:ab:9b:36:ba:8e:fd:de:c3:
80:50:a9:e3:7d:52:f5:d3:32:b1:1d:23:8c:6c:1f:
c6:d2:7e:cc:74:90:bf:ce:d1:33:5a:09:17:c9:e6:
92:8f:c6:a6:3b:fe:dd:28:22:20:47:83:59:17:72:
e3:b5:77:3b:c2:0b:56:ed:31:cd:eb:9e:5b:8e:60:
d4:36:f6:51:7f:e6:33:05:9d:dd:0b:9b:33:c7:b5:
48:1d:ae:e3:31:81:32:33:2b:e0:ff:ac:90:33:75:
1d:f9:26:cc:07:98:ed:22:75:9a:09:3e:f3:1b:a0:
7a:77:d3:27:a5:5e:16:c0:c2:3b:66:7f:55:11:6b:
98:3b:b0:b0:f2:cd:f4:29:f8:7c:09:cb:fe:69:94:
9d:50:06:ba:b2:92:03:b2:19:41:b0:c9:17:fb:02:
83:58:8e:21:fe:73:e8:37:c2:a0:6f:39:7a:9e:7c:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:B1:0F:0B:06:29:0D:74:F8:F2:95:55:EE:BA:B2:EC:4F:BD:12
X509v3 Authority Key Identifier:
keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:4d:32:45:9a:c3:16:58:ab:b2:5e:7b:1c:36:79:6a:97:
94:25:7d:d2:f0:af:21:ab:bc:1a:56:dd:09:96:ce:3b:30:ca:
b6:c0:ab:28:53:16:7f:00:b0:61:e9:b4:50:1d:9e:e0:f6:6d:
af:cd:a6:62:cd:01:5d:bf:e9:ed:6a:25:0e:93:97:c5:a3:80:
ab:4c:6a:6c:36:2c:91:4e:9c:24:9f:39:90:53:de:89:99:e5:
df:74:20:38:36:a2:10:c1:5e:24:6d:c8:d8:d8:8c:af:71:4e:
b1:33:a9:b9:7d:2b:68:b1:e4:ab:26:5d:46:5d:2a:f1:a7:5c:
7b:a6:89:8b:93:27:28:a8:0f:59:aa:ee:cb:6d:74:7b:8d:8d:
1f:a0:46:6a:f8:e4:68:a4:c0:7e:cf:9e:be:ea:fa:c4:ca:8c:
dc:2d:b6:37:a8:4f:7c:f3:53:28:73:d4:8e:a3:82:b3:e4:f8:
78:3e:55:87:2c:76:c2:75:7e:ef:0d:6f:91:09:e7:dd:93:06:
58:76:25:b1:0e:2c:40:2c:f7:0f:bd:4b:fe:23:2e:87:d1:47:
0d:4c:be:1f:1b:5a:f3:3d:8b:1d:b2:c2:45:20:dd:43:cf:97:
dd:9b:1d:a1:e6:b4:3f:dd:9a:a3:5b:9a:c6:db:76:01:4b:16:
98:81:07:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz
QzI5NTUyODMwHhcNMjYwMjI4MTk0NDM0WhcNMjYwMzA3MTk0NDM0WjAYMRYwFAYD
VQQDDA02OWEzNDVhMi1jMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlyp24zhyyk76MpiKIsbCmDvCNQrFoIGd2wyLJ5tXnw/d/BZLiyiir3wU8UyO
vfwXxW9bHjpv0dqxP/3gug3YBawOCARpUJBvSeeaJHFImMwwq5s2uo793sOAUKnj
fVL10zKxHSOMbB/G0n7MdJC/ztEzWgkXyeaSj8amO/7dKCIgR4NZF3LjtXc7wgtW
7THN655bjmDUNvZRf+YzBZ3dC5szx7VIHa7jMYEyMyvg/6yQM3Ud+SbMB5jtInWa
CT7zG6B6d9MnpV4WwMI7Zn9VEWuYO7Cw8s30Kfh8Ccv+aZSdUAa6spIDshlBsMkX
+wKDWI4h/nPoN8Kgbzl6nnyhiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrKsQ8L
BikNdPjylVXuurLsT70SMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw
NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy
dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOvlNMkWawxZYq7Jeexw2eWqXlCV90vCvIau8GlbdCZbOOzDKtsCrKFMWfwCw
Yem0UB2e4PZtr82mYs0BXb/p7WolDpOXxaOAq0xqbDYskU6cJJ85kFPeiZnl33Qg
ODaiEMFeJG3I2NiMr3FOsTOpuX0raLHkqyZdRl0q8adce6aJi5MnKKgPWaruy210
e42NH6BGavjkaKTAfs+evur6xMqM3C22N6hPfPNTKHPUjqOCs+T4eD5Vhyx2wnV+
7w1vkQnn3ZMGWHYlsQ4sQCz3D71L/iMuh9FHDUy+Hxta8z2LHbLCRSDdQ8+X3Zsd
oea0P92ao1uaxtt2AUsWmIEHBA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:52 2026 by rpki-client