
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: QDh34sdQPIYIRadAJ7jB8BDa00RlD5eQyFEou7KjpvI=
Subject key identifier: 2C:3A:88:A9:21:1D:35:E4:E8:64:A8:D4:94:F8:7A:DB:DF:9B:BC:3D
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0430
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 03C2
Signing time: Sat 13 Jun 2026 00:54:26 +0000
Manifest this update: Sat 13 Jun 2026 00:54:26 +0000
Manifest next update: Sat 20 Jun 2026 00:54:26 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: TU6yV3aK8Mzuq+fVm5+naUAt+GCLMK8atEMSRBx0oxE=)
2: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
3: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
4: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
5: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
6: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
7: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
8: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
9: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
10: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
11: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
12: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
13: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
14: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jun 13 00:54:26 2026 GMT
Not After : Jun 20 00:54:26 2026 GMT
Subject: CN=6a2caa42-ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:de:37:58:57:fd:33:a3:86:bb:ec:13:d4:
07:dd:7d:33:33:a7:13:a4:7f:d6:7c:55:de:cc:9a:
d7:49:69:6f:72:f5:a5:dc:d0:37:1e:1a:3c:35:7e:
1e:b3:dd:15:b3:8c:53:e0:7e:e6:a1:33:0e:5e:5d:
8a:ca:b5:37:71:03:d7:fc:6b:2b:f6:96:e3:54:13:
a1:0a:67:59:0d:e1:05:34:c1:e4:aa:9b:f8:d2:21:
5e:4b:d4:6f:5b:8b:67:fc:67:28:c0:71:5d:5e:d2:
49:75:57:04:c5:80:fd:36:c6:f4:1d:dd:e9:e0:91:
eb:00:e1:12:5d:81:c1:59:5b:3a:b6:a0:b5:15:3b:
30:c9:9a:b9:27:ae:b5:9f:5c:b7:47:6d:f5:98:f3:
7c:d2:6b:a3:03:02:4b:18:64:1f:aa:f5:08:b7:21:
2e:c4:1d:aa:79:6d:9a:47:e4:5a:9a:c3:14:81:b0:
00:80:ef:88:85:9d:fd:a4:53:b9:b4:2b:f9:b2:e6:
42:26:f4:fe:83:94:ee:8a:17:0e:ee:9f:e0:25:d3:
53:2d:f6:13:7b:1c:77:a4:ad:2c:db:53:52:57:e8:
36:53:5d:08:dc:e9:c1:3f:b6:ce:99:e5:62:35:71:
1a:99:29:48:3f:4d:4c:cb:f8:fe:a4:a7:8e:50:7d:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:88:A9:21:1D:35:E4:E8:64:A8:D4:94:F8:7A:DB:DF:9B:BC:3D
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:52:0f:70:42:dc:24:10:74:f0:4c:67:b1:e2:7b:d9:8b:34:
65:51:36:c4:dd:fa:4f:da:0a:eb:61:7c:41:dd:06:ca:48:7d:
64:0a:11:67:51:59:71:08:df:27:9f:d2:fa:2d:42:71:6e:83:
55:d3:5c:db:7c:61:68:3d:25:aa:06:f0:26:e8:9a:e5:18:19:
40:02:05:2b:d6:53:95:0b:dd:65:37:48:7b:0b:4a:b7:25:c0:
f5:f9:2d:d9:1e:b4:bf:49:d5:96:9c:83:f3:f6:05:6f:46:e3:
16:7e:96:ff:ac:68:7f:67:55:5d:58:6d:ac:1e:18:6e:d2:a1:
6a:d3:ec:9f:55:57:ea:2d:ee:e6:8b:15:b1:4e:d8:89:65:b6:
ed:fd:3d:6a:0a:f1:49:89:c1:4f:bd:18:a5:46:e7:79:b4:82:
36:68:4d:5f:28:7d:fa:b4:89:a5:3e:37:3e:a5:2d:66:b6:b3:
3f:b1:fb:14:2b:c9:39:48:6c:33:99:55:1b:8c:c6:ff:d4:85:
1c:2f:ab:bc:38:21:a0:04:2c:d0:2c:01:1b:1d:f4:33:43:10:
c7:97:c6:fe:98:c0:49:30:79:df:2b:66:7c:ba:27:d4:4a:a2:
37:0a:2d:ab:b7:89:6d:2d:3b:90:3b:1a:6b:47:55:00:ff:b6:
55:6a:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:13 2026 by rpki-client