
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier: UZybwUeKjSXiNTsyghPdXQ59bZAw/SoDM55hDlwwzZ4=
Subject key identifier: 40:D7:BE:9F:5F:65:06:04:12:6A:E9:1C:B0:21:74:98:97:20:C1:51
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1B57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number: 1B16
Signing time: Fri 12 Jun 2026 16:15:35 +0000
Manifest this update: Fri 12 Jun 2026 16:15:35 +0000
Manifest next update: Fri 19 Jun 2026 16:15:35 +0000
Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: LOwh3k0i8tkhdUhSNUs1YoELSFk1Ip0VeBX5ppsUVos=)
2: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: qvhkzDn6OfQuvCTV8G5Fvq3qQbKfUPKsi0/SYUxzYw8=)
3: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=)
4: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: DZ5DPupzTqqmSWdwYpXblDHHSqI4zxqj2PRZ30A7k3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6999 (0x1b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Jun 12 16:15:35 2026 GMT
Not After : Jun 19 16:15:35 2026 GMT
Subject: CN=6a2c30a7-f4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:6c:7f:a5:6d:ed:98:a7:1b:cd:55:27:e4:
7b:90:d9:3b:b4:24:3f:f2:75:6d:55:f8:c2:ec:ec:
e5:24:cd:d8:bf:84:c8:b4:d4:2e:81:1a:88:15:16:
e7:5f:62:9f:6e:9c:56:a2:78:42:11:b2:3c:a9:f0:
f3:31:64:0a:bd:2a:8f:88:39:17:ce:32:e3:30:17:
f1:e9:49:3e:54:74:0f:e1:eb:f4:7c:0b:86:fe:20:
73:eb:90:ed:87:a5:56:91:12:95:d0:bb:38:e7:1f:
47:40:8e:61:e6:ab:9c:45:86:dc:4d:91:f2:a3:9d:
62:fa:8f:42:86:8a:f1:a2:79:96:3a:db:a6:f0:78:
09:dd:34:d5:0b:8c:91:68:b8:96:66:ab:08:16:5c:
5b:65:5b:3f:df:c2:79:ec:8b:1c:05:f5:23:1e:76:
20:dd:ac:60:d8:a8:9d:37:40:8e:05:c1:6c:d9:0f:
e4:73:f3:c3:47:a6:06:b9:0c:e8:b6:aa:22:74:ed:
79:c4:6c:de:af:8c:3b:68:87:fc:6d:9e:e8:b6:b1:
74:5d:da:5d:9d:59:2f:ef:88:b4:8d:89:53:22:f4:
6d:ac:f4:aa:3f:3c:9b:9e:b7:d5:41:f7:bb:42:59:
1b:b8:e9:df:38:94:48:19:ce:20:6e:97:c4:9a:75:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:BE:9F:5F:65:06:04:12:6A:E9:1C:B0:21:74:98:97:20:C1:51
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:82:ca:05:13:9d:4d:32:50:88:73:d3:20:7a:0e:31:80:
87:f9:50:ea:7f:0c:0a:87:17:66:27:36:b9:3f:36:50:7e:32:
bb:45:47:dc:06:98:32:bb:01:00:4b:e2:a3:7f:70:6a:34:39:
f8:92:61:8c:b4:b2:f0:e1:46:04:2e:b3:e3:8c:66:f2:f5:8d:
60:81:1e:be:d3:06:04:de:7e:aa:f9:10:e4:42:74:4e:e2:17:
f0:f2:a1:2b:67:49:c0:5f:06:c5:21:7a:26:4c:40:02:d4:2f:
f9:59:85:d0:15:9c:c6:c3:2f:6f:4a:07:69:2b:a8:39:e4:76:
64:b3:87:16:37:53:22:c2:f5:f2:e2:b6:be:71:c7:f6:43:ba:
58:01:08:a1:e7:9f:f9:70:77:4e:50:63:ac:f2:03:7e:3a:43:
42:56:63:f1:2e:f6:6d:c2:ea:5c:cb:35:da:82:8e:65:51:91:
41:30:ae:30:c6:f8:6d:e4:73:5b:fe:9f:a5:a3:68:2f:84:ee:
cf:f3:4b:be:17:1a:84:c1:03:4a:0b:64:0b:ee:20:9c:29:65:
31:75:88:7e:a6:ca:d2:92:7a:ca:c4:aa:72:a3:9e:14:6e:2e:
52:e9:f1:1a:be:9b:cc:1f:aa:f3:01:d9:7d:e4:c4:37:9d:b1:
18:48:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:17 2026 by rpki-client