
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: L1WrguTQ4LvZOvTNpkUZavnaGLUmQJvW0HJ/W1GFSI4=
Subject key identifier: 4C:09:5B:12:AF:D1:CD:F4:CA:D5:35:50:83:88:CE:79:66:6F:72:D1
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 03A5
Signing time: Fri 17 Apr 2026 00:53:14 +0000
Manifest this update: Fri 17 Apr 2026 00:53:13 +0000
Manifest next update: Fri 24 Apr 2026 00:53:13 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: 0dok9LVbwn/z4JMvpthzaCcP3DZIJhQrIuz8K60Z14Q=)
2: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
3: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
4: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
5: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
6: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
7: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
8: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
9: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
10: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
11: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
12: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
13: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
14: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Apr 17 00:53:13 2026 GMT
Not After : Apr 24 00:53:13 2026 GMT
Subject: CN=69e18479-f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:cd:31:ae:bf:d6:d4:03:92:3f:3d:24:56:
ce:04:03:dc:7a:fd:93:5e:a5:d5:b1:33:3f:5e:75:
6f:6c:40:66:0a:10:07:3d:06:bb:7d:39:ce:2d:26:
98:de:a1:7d:c2:c2:e0:3e:81:de:60:d7:c5:d0:d8:
8a:bd:93:d7:3b:99:72:e2:41:31:49:a7:af:12:85:
83:24:ae:58:88:8f:75:f8:24:eb:3c:36:ee:8a:a2:
cd:c6:39:58:2f:3f:ff:d0:3e:18:57:f2:d1:68:fa:
95:3d:e4:6f:d6:32:91:d1:56:96:78:ba:8a:10:54:
e0:03:fd:b3:4c:b5:5b:04:19:9f:f1:dd:86:75:28:
b1:a8:85:6f:3d:32:02:0d:cf:c2:19:9d:a1:64:e8:
b0:5f:8c:9a:c1:d3:95:4f:0a:b4:0a:e4:b9:4d:07:
f8:69:60:53:35:ed:17:84:32:43:69:2b:71:22:d9:
6d:2c:07:36:da:4d:5f:ac:18:70:92:5b:c1:c1:65:
26:22:fb:4c:63:e0:ba:57:8d:53:b5:89:c7:93:30:
a5:5f:7e:48:f9:09:cd:e3:75:d0:2c:8d:be:4e:fb:
7f:31:73:38:61:c0:99:f7:45:6f:41:8e:e6:bd:f0:
13:4b:bb:8c:97:1d:49:b5:91:63:41:af:0d:21:a1:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:5B:12:AF:D1:CD:F4:CA:D5:35:50:83:88:CE:79:66:6F:72:D1
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:9a:f2:6d:6b:f6:81:97:60:4d:ac:4e:60:f4:6d:dc:9d:
5c:9b:7a:a1:87:4c:2a:6a:ab:26:0a:5d:12:99:b9:20:d2:af:
47:d2:36:ed:27:3b:41:6a:3b:2a:3a:82:39:35:f0:99:8b:6a:
d0:87:ae:b0:ae:4d:be:c3:5a:80:ea:2c:dc:d1:ac:82:f5:c1:
ce:1f:b4:06:21:62:79:85:bf:bc:bc:ac:97:08:31:3d:a9:c5:
b8:5e:85:91:6b:f1:62:0d:0c:d7:ef:ea:73:a4:0b:5e:38:8b:
d1:6d:20:7f:88:b1:74:72:a4:9f:28:f2:11:39:8c:d1:ff:09:
70:bf:0e:2a:8a:7a:79:eb:45:a5:8f:10:eb:cd:94:ee:68:6d:
52:5c:8a:b5:cb:f1:63:4d:19:00:86:55:fa:ec:e6:ae:06:8e:
a0:2e:e3:16:3f:a6:30:1a:e8:2d:2e:a7:68:66:17:08:65:ee:
97:c1:90:dd:85:90:04:e4:c0:09:e5:a0:d1:87:41:7c:64:74:
5d:01:43:59:6e:2f:9a:2b:f7:ab:16:c0:69:3b:b6:c1:da:78:
a0:10:f3:70:e5:5a:72:83:b6:e4:c4:ea:f5:71:33:1e:77:f2:
f6:26:f1:a6:97:61:59:9b:98:fa:e5:86:20:b9:e9:1b:51:4f:
a7:3f:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:10 2026 by rpki-client