
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json)
Hash identifier: BhTFBo+/361cyP5c1J8POkpKSdC53h28xSFumrRE5dM=
Subject key identifier: 43:13:F8:20:67:E4:C6:ED:AD:D5:5F:8F:A9:34:F2:E3:FA:09:B9:CD
Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
Manifest number: 0121
Signing time: Sat 13 Jun 2026 05:46:59 +0000
Manifest this update: Sat 13 Jun 2026 05:46:58 +0000
Manifest next update: Sat 20 Jun 2026 05:46:58 +0000
Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: 2scNHej7PtydbNfqfMz7yaq3CSM/+TcWVWibKAT7348=)
2: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=)
3: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Validity
Not Before: Jun 13 05:46:58 2026 GMT
Not After : Jun 20 05:46:58 2026 GMT
Subject: CN=6a2ceed3-66c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:b1:5d:be:2a:bf:fd:1f:1f:b8:9c:af:22:
86:05:7b:2b:2e:38:6f:dd:71:83:01:b2:21:d7:31:
3d:2f:36:08:e8:16:0d:bf:e0:99:e0:19:c9:98:74:
c6:98:e9:8c:a1:02:3a:c6:18:25:41:1d:50:4d:5c:
c5:64:0d:7f:00:b4:2e:ab:d3:b8:f8:17:bf:87:fc:
e6:a4:ea:5b:50:b0:d9:86:88:96:94:d4:9e:3e:d2:
1e:eb:ae:1f:f3:0a:da:72:db:bb:d9:6d:ea:16:e0:
9f:9d:e6:cd:17:39:5f:d7:78:a8:5e:7f:88:64:49:
0a:0b:51:ef:52:19:d8:54:49:a8:6b:39:ce:17:bc:
98:c6:06:85:58:aa:4b:6c:f5:9e:c7:a3:f0:c4:9b:
3b:ae:fa:b9:21:2a:b2:60:e8:cd:1b:0f:64:87:ed:
8c:05:68:27:07:19:37:51:40:5f:1c:e1:09:a7:59:
d7:0a:60:11:60:06:42:65:ad:67:46:fb:22:3d:10:
a5:81:f0:29:9d:3e:10:4d:2c:e7:1c:bf:de:42:05:
23:8c:0b:fc:83:96:3f:52:87:d0:97:97:50:c7:59:
b1:45:86:36:4f:f1:92:04:7a:c9:00:45:6c:38:d8:
97:e6:b4:f1:c4:8e:54:e5:97:3f:a6:03:c6:56:dd:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:F8:20:67:E4:C6:ED:AD:D5:5F:8F:A9:34:F2:E3:FA:09:B9:CD
X509v3 Authority Key Identifier:
keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c8:b2:be:8a:4e:49:40:d6:65:9b:37:c9:a7:cb:9a:36:fa:
1b:e7:88:63:d0:22:63:e7:8c:0a:5f:91:49:fb:a6:1c:59:b9:
d6:b4:d7:0c:de:a4:cf:1b:ff:c9:cf:98:12:0e:4c:38:4e:fb:
b9:2f:b4:c9:0e:57:28:20:92:d3:0a:86:1c:71:a1:72:2b:43:
fe:38:12:f3:10:bd:8c:69:65:c3:ce:dd:d7:5b:d0:c4:c5:aa:
7b:ee:67:b1:eb:d4:d7:6d:a9:b0:aa:77:0a:f1:89:a9:b0:50:
03:fc:ca:71:16:39:37:c5:d9:53:37:d8:4e:15:73:b7:23:6d:
77:a6:24:60:4a:54:fb:a7:5e:d2:34:dd:a5:72:b4:30:24:ce:
16:80:6e:f9:d9:e6:89:08:98:8b:59:10:f9:83:50:05:14:da:
67:50:d4:11:d7:3b:81:c8:fb:51:c4:fb:38:20:cf:dd:b8:30:
d7:66:54:a7:8c:f2:3e:3f:f4:37:6f:b6:1e:96:8b:7d:6c:19:
22:48:69:31:2e:10:cf:90:bf:56:34:cd:eb:90:fb:ae:bf:7a:
36:8e:ab:1b:03:64:7a:34:63:1c:91:7d:55:90:0c:06:b7:f6:
f3:ec:e0:ca:48:e0:06:43:4a:f2:9f:4a:30:97:01:4b:0b:ae:
9e:c9:ef:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF
QzQ3RDM0MzgwHhcNMjYwNjEzMDU0NjU4WhcNMjYwNjIwMDU0NjU4WjAYMRYwFAYD
VQQDEw02YTJjZWVkMy02NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5F6xXb4qv/0fH7icryKGBXsrLjhv3XGDAbIh1zE9LzYI6BYNv+CZ4BnJmHTG
mOmMoQI6xhglQR1QTVzFZA1/ALQuq9O4+Be/h/zmpOpbULDZhoiWlNSePtIe664f
8wractu72W3qFuCfnebNFzlf13ioXn+IZEkKC1HvUhnYVEmoaznOF7yYxgaFWKpL
bPWex6PwxJs7rvq5ISqyYOjNGw9kh+2MBWgnBxk3UUBfHOEJp1nXCmARYAZCZa1n
RvsiPRClgfApnT4QTSznHL/eQgUjjAv8g5Y/UofQl5dQx1mxRYY2T/GSBHrJAEVs
ONiX5rTxxI5U5Zc/pgPGVt1w8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMT+CBn
5MbtrdVfj6k08uP6CbnNMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG
QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ
UUNIZmxQZFlZbVRzUjlORGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbMiyvopOSUDWZZs3yafLmjb6G+eIY9AiY+eMCl+RSfumHFm51rTXDN6kzxv/
yc+YEg5MOE77uS+0yQ5XKCCS0wqGHHGhcitD/jgS8xC9jGllw87d11vQxMWqe+5n
sevU122psKp3CvGJqbBQA/zKcRY5N8XZUzfYThVztyNtd6YkYEpU+6de0jTdpXK0
MCTOFoBu+dnmiQiYi1kQ+YNQBRTaZ1DUEdc7gcj7UcT7OCDP3bgw12ZUp4zyPj/0
N2+2HpaLfWwZIkhpMS4Qz5C/VjTN65D7rr96No6rGwNkejRjHJF9VZAMBrf28+zg
ykjgBkNK8p9KMJcBSwuunsnvlA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:25:37 2026 by rpki-client