
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json)
Hash identifier: TfGFVZzoyZGbWvfITrHuhTMet+7lQKweYQODz6jixzg=
Subject key identifier: 04:DD:D0:9B:AC:63:56:23:2F:6B:F5:69:81:42:C0:7B:2C:CB:ED:F5
Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
Manifest number: 01AE
Signing time: Mon 27 Jul 2026 05:50:21 +0000
Manifest this update: Mon 27 Jul 2026 05:50:21 +0000
Manifest next update: Mon 03 Aug 2026 05:50:21 +0000
Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: f4uad1WZ1iVEckEUpbHbOO9B+RaZwgRKP4yUR33KfQQ=)
2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: QRW89YvyXKuiuVqN3av9FpFxRLwsjZ4Fxr5K/DhmUjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Validity
Not Before: Jul 27 05:50:21 2026 GMT
Not After : Aug 3 05:50:21 2026 GMT
Subject: CN=6a66f19d-92c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:7e:80:41:74:6d:db:95:46:fa:f6:4a:e2:
bb:bd:02:4c:cf:27:d2:95:34:6b:91:53:3d:be:9e:
0a:2d:03:ad:b8:cc:3d:f3:f3:25:c8:25:f2:3c:e9:
5c:6a:3f:c9:7b:6e:84:01:e3:1f:5b:36:bf:40:91:
92:51:42:46:68:98:24:09:f7:e4:c0:21:b8:b4:82:
c3:32:45:70:70:c7:77:fc:a0:65:ca:3d:94:34:d5:
aa:39:25:00:42:0c:6f:70:12:7a:e9:83:69:6f:81:
71:51:2f:ae:46:6a:f3:5d:b2:d3:9b:30:c1:33:5c:
29:a7:59:2d:9b:73:8f:8a:43:40:cb:6a:dc:41:6c:
b4:9b:70:c4:d1:44:05:40:c4:09:4f:a3:38:46:d8:
60:ed:54:ec:be:b4:95:44:91:73:d7:00:fb:83:73:
f6:d4:72:76:1b:5d:9d:a2:b5:60:06:f6:c9:82:f9:
5f:85:2c:6d:97:df:1d:c7:63:2c:c9:dc:04:94:40:
e4:64:63:d4:89:95:6b:f4:10:a4:27:fd:39:93:86:
ca:88:19:0a:a8:5e:43:6c:99:d0:ec:6f:aa:80:40:
5f:a4:97:95:fe:f5:8b:f1:e7:29:46:5a:03:69:d8:
11:c0:76:2f:45:ed:80:ea:72:62:86:29:a0:4a:ac:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:D0:9B:AC:63:56:23:2F:6B:F5:69:81:42:C0:7B:2C:CB:ED:F5
X509v3 Authority Key Identifier:
keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:d5:5c:da:67:1a:5c:a0:38:47:cd:9b:d1:a3:f2:b3:c5:
d2:0d:0d:68:00:20:76:3b:f3:01:6f:f3:ab:1c:6a:99:81:29:
bb:6f:80:21:a7:89:9e:e9:8a:eb:f6:d0:75:e1:8e:63:2b:cf:
d0:4b:af:bb:73:76:0c:58:d2:21:85:49:b2:be:4a:49:56:db:
c5:44:8d:a3:91:b9:d9:f1:0e:2f:91:c0:81:3c:f9:1d:b7:87:
44:79:9e:19:88:ce:26:ed:d4:e7:ca:fc:72:41:cc:74:c0:28:
43:d0:09:20:57:06:14:2d:e5:2b:57:c4:36:4a:36:07:66:ef:
03:65:17:37:d4:47:39:cb:03:4a:e4:fd:e5:39:af:66:c4:82:
ae:88:b7:86:e7:bd:79:da:da:0c:48:2c:ed:ba:9c:a8:fb:80:
2e:49:3d:c5:e2:16:c8:51:eb:21:69:d5:4f:0b:c6:de:d9:b6:
21:d8:d1:24:26:85:e6:a7:03:61:45:03:4c:f2:6f:f9:c4:a7:
4a:43:73:8a:d5:8e:22:c5:e2:6a:a4:15:a0:83:36:0d:1e:c5:
93:c1:d1:2b:5a:51:91:25:7f:9c:cf:c4:31:5a:d5:9a:89:b1:
a8:e9:74:1d:84:6c:94:31:6c:6f:d6:4e:cc:5c:60:66:28:ac:
d4:ec:ca:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4
NjY0NjFBRTcwHhcNMjYwNzI3MDU1MDIxWhcNMjYwODAzMDU1MDIxWjAYMRYwFAYD
VQQDEw02YTY2ZjE5ZC05MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn95+gEF0bduVRvr2SuK7vQJMzyfSlTRrkVM9vp4KLQOtuMw98/MlyCXyPOlc
aj/Je26EAeMfWza/QJGSUUJGaJgkCffkwCG4tILDMkVwcMd3/KBlyj2UNNWqOSUA
QgxvcBJ66YNpb4FxUS+uRmrzXbLTmzDBM1wpp1ktm3OPikNAy2rcQWy0m3DE0UQF
QMQJT6M4Rthg7VTsvrSVRJFz1wD7g3P21HJ2G12dorVgBvbJgvlfhSxtl98dx2Ms
ydwElEDkZGPUiZVr9BCkJ/05k4bKiBkKqF5DbJnQ7G+qgEBfpJeV/vWL8ecpRloD
adgRwHYvRe2A6nJihimgSqxerQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATd0Jus
Y1YjL2v1aYFCwHssy+31MB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE
N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj
bE9MZDlmS211STZHWkdHdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAifPVXNpnGlygOEfNm9Gj8rPF0g0NaAAgdjvzAW/zqxxqmYEpu2+AIaeJnumK
6/bQdeGOYyvP0Euvu3N2DFjSIYVJsr5KSVbbxUSNo5G52fEOL5HAgTz5HbeHRHme
GYjOJu3U58r8ckHMdMAoQ9AJIFcGFC3lK1fENko2B2bvA2UXN9RHOcsDSuT95Tmv
ZsSCroi3hue9edraDEgs7bqcqPuALkk9xeIWyFHrIWnVTwvG3tm2IdjRJCaF5qcD
YUUDTPJv+cSnSkNzitWOIsXiaqQVoIM2DR7Fk8HRK1pRkSV/nM/EMVrVmomxqOl0
HYRslDFsb9ZOzFxgZiis1OzKIw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:30 2026 by rpki-client