
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier: iSesSFAJZ4QSDHTNM4pFC2SMl1YlQVtm71dMSQyAaXE=
Subject key identifier: 69:91:58:DB:01:F5:7D:1C:3B:B1:A4:87:2B:FE:E0:04:6C:D8:7B:9F
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number: 60
Signing time: Fri 17 Apr 2026 07:42:24 +0000
Manifest this update: Fri 17 Apr 2026 07:42:24 +0000
Manifest next update: Fri 24 Apr 2026 07:42:24 +0000
Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: 8paXGr+4OeWzRR0cxEmbvfOV5LHgqR4mbGxaJgxlYCo=)
2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Validity
Not Before: Apr 17 07:42:24 2026 GMT
Not After : Apr 24 07:42:24 2026 GMT
Subject: CN=69e1e460-c45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:4a:57:44:a3:fb:35:30:a1:77:fe:04:86:
42:86:b1:4d:52:f1:0d:4f:07:81:39:7e:e5:4e:5f:
76:b5:4c:1d:07:ad:18:08:15:f9:5f:cd:ab:d3:11:
07:5f:e4:65:64:64:a3:a0:ef:90:68:71:50:eb:00:
31:12:cf:71:67:8c:78:38:b5:22:ce:43:0c:ef:c8:
36:af:36:d6:24:5e:55:80:dd:90:cf:e1:00:7d:87:
77:6a:1b:93:6c:69:11:b9:99:50:04:3d:55:24:e7:
37:26:8b:82:2b:11:97:cb:74:d6:f9:3f:b7:af:ba:
1d:d4:40:64:91:1f:e3:e4:61:da:f9:96:e2:d4:8a:
60:f8:dc:0f:90:d1:10:eb:e8:a2:02:ef:0b:ee:6e:
cd:f0:17:8c:39:58:7b:a4:f9:49:fe:be:cf:03:d5:
e7:43:26:09:92:65:a9:a7:fd:d9:b5:cf:8c:0e:4c:
89:8a:ae:13:72:f7:98:49:fe:d0:fc:86:34:17:d7:
c6:0d:a2:96:e4:d0:84:40:f1:d2:de:b7:7e:96:d0:
7a:6a:00:d3:b6:7c:dc:89:28:15:fd:6b:60:e4:e4:
23:e6:d2:fa:b8:5e:3b:dd:65:1a:75:be:44:d0:57:
76:32:1a:49:47:e6:1a:12:cf:11:15:37:a2:17:55:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:91:58:DB:01:F5:7D:1C:3B:B1:A4:87:2B:FE:E0:04:6C:D8:7B:9F
X509v3 Authority Key Identifier:
keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:7e:b2:c2:a8:fd:e6:05:c8:c0:bc:85:4f:9a:d6:08:ea:01:
68:80:9d:b1:81:b1:66:a9:ab:86:61:0f:70:56:03:09:12:e9:
0c:ad:80:32:79:f8:e3:ff:fb:58:50:a7:0e:2c:20:a1:17:c2:
76:4c:60:11:ff:54:c3:eb:a7:30:fb:b9:9b:40:c0:40:01:56:
cc:93:f9:62:c3:e7:56:5e:90:0f:5e:66:13:61:4d:18:d9:e3:
fe:d3:73:4b:03:66:d9:c9:e2:4c:ee:61:21:44:16:75:11:82:
2e:d7:21:b1:53:e9:20:6a:df:09:a8:4a:84:00:f2:ad:e1:63:
88:ef:7c:b3:8b:c3:73:b1:63:33:8f:16:d4:fb:42:c9:f1:06:
c2:60:e7:19:ae:a6:4f:cf:fe:bd:fe:4b:e6:f4:19:ee:4e:e5:
ad:61:27:b9:f3:6e:42:fb:5c:91:57:ab:a5:eb:da:5a:9d:a3:
cc:d3:1c:bd:c1:28:fc:cf:83:9b:db:9b:35:b2:83:57:94:af:
0c:f9:d7:79:f2:a6:ca:6a:5c:62:34:a2:46:6e:5b:51:f8:d2:
71:19:30:b7:d8:c8:7e:fc:8c:2b:a2:29:af:48:63:ba:d9:8e:
14:28:15:e9:30:c9:4f:b9:22:52:1c:4b:1a:ef:70:fc:f7:53:
35:93:57:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDQwMTExMC8GA1UEBRMoQTM5OUExMkM0OEMwMEU0MjYxRDI4RTBDNTdGRDRFM0U0
NzBEMkVCNzAeFw0yNjA0MTcwNzQyMjRaFw0yNjA0MjQwNzQyMjRaMBgxFjAUBgNV
BAMTDTY5ZTFlNDYwLWM0NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCl+UpXRKP7NTChd/4EhkKGsU1S8Q1PB4E5fuVOX3a1TB0HrRgIFflfzavTEQdf
5GVkZKOg75BocVDrADESz3FnjHg4tSLOQwzvyDavNtYkXlWA3ZDP4QB9h3dqG5Ns
aRG5mVAEPVUk5zcmi4IrEZfLdNb5P7evuh3UQGSRH+PkYdr5luLUimD43A+Q0RDr
6KIC7wvubs3wF4w5WHuk+Un+vs8D1edDJgmSZamn/dm1z4wOTImKrhNy95hJ/tD8
hjQX18YNopbk0IRA8dLet36W0HpqANO2fNyJKBX9a2Dk5CPm0vq4XjvdZRp1vkTQ
V3YyGklH5hoSzxEVN6IXVQoNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaZFY2wH1
fRw7saSHK/7gBGzYe58wHwYDVR0jBBgwFoAUo5mhLEjADkJh0o4MV/1OPkcNLrcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0NDAxLzFCODgyMTYwQUE3
MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxy
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbzVtaExFakFEa0poMG80TVZfMU9Qa2NOTHJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
NDAxLzFCODgyMTYwQUE3MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtK
aDBvNE1WXzFPUGtjTkxyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDfrLCqP3mBcjAvIVPmtYI6gFogJ2xgbFmqauGYQ9wVgMJEukMrYAyefjj//tY
UKcOLCChF8J2TGAR/1TD66cw+7mbQMBAAVbMk/liw+dWXpAPXmYTYU0Y2eP+03NL
A2bZyeJM7mEhRBZ1EYIu1yGxU+kgat8JqEqEAPKt4WOI73yzi8NzsWMzjxbU+0LJ
8QbCYOcZrqZPz/69/kvm9BnuTuWtYSe5825C+1yRV6ul69panaPM0xy9wSj8z4Ob
25s1soNXlK8M+dd58qbKalxiNKJGbltR+NJxGTC32Mh+/IwroimvSGO62Y4UKBXp
MMlPuSJSHEsa73D891M1k1fm
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:01 2026 by rpki-client