
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json)
Hash identifier: 4ESpKEcMSmKyoVbN+SVIRBzo39ZrNq5Xj1AN2iC5iQ0=
Subject key identifier: FD:1C:F1:7A:B2:92:75:CE:44:36:CD:17:46:7E:3A:12:C7:5E:5B:72
Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
Manifest number: 0105
Signing time: Fri 17 Apr 2026 05:49:39 +0000
Manifest this update: Fri 17 Apr 2026 05:49:39 +0000
Manifest next update: Fri 24 Apr 2026 05:49:39 +0000
Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: T9LDP8Q12SCKHKgurCUvU1tK31uAC27XJKF9QJLd/Zg=)
2: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=)
3: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438
Validity
Not Before: Apr 17 05:49:39 2026 GMT
Not After : Apr 24 05:49:39 2026 GMT
Subject: CN=69e1c9f3-b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:cc:59:6e:6e:95:c2:cb:0d:b3:5d:18:8b:
98:27:16:d6:77:9f:0f:8d:d8:89:73:3e:42:f0:04:
4a:32:39:92:08:48:bc:65:ca:8d:9e:8a:4c:ea:82:
50:71:ae:5e:64:31:ff:46:97:31:0d:a5:b0:5a:c8:
dd:4d:49:4b:8c:7a:b9:42:ab:70:47:6c:05:3d:f7:
7a:2e:d2:26:14:a2:33:2c:7e:65:20:30:d5:c3:48:
b9:e6:4d:49:51:9b:41:8f:9a:d7:39:69:bd:f3:3b:
fb:75:44:86:f9:61:05:3a:3a:06:e1:c7:a6:7c:6e:
f7:7d:da:10:0e:9f:f5:6c:bd:02:d5:69:1d:0e:9b:
35:e6:e6:01:10:21:24:97:a1:a5:e9:22:8a:ab:22:
75:e7:06:17:c1:e9:e7:c3:ff:5b:95:6b:45:94:d6:
65:85:63:94:fa:33:02:49:06:0e:ce:09:fe:1c:3e:
0b:b7:92:49:8f:c1:9e:74:e9:66:16:1c:1e:e0:dc:
dd:7f:52:de:42:69:d7:99:75:be:ec:5f:80:12:14:
0b:f6:a3:eb:7b:ba:c3:ed:a9:d4:6e:f4:b9:c9:18:
75:3c:5e:7c:ac:5b:94:95:77:6e:5d:11:e8:40:70:
4a:c9:71:54:18:02:8a:0b:e1:7d:7c:21:76:3d:1c:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:F1:7A:B2:92:75:CE:44:36:CD:17:46:7E:3A:12:C7:5E:5B:72
X509v3 Authority Key Identifier:
keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:58:ec:87:26:07:77:13:44:e0:7a:39:16:dc:e8:79:71:
33:cc:f9:fa:91:a4:ff:e7:b4:6a:b6:2a:93:06:48:d7:95:bd:
a2:f4:17:4f:6a:b4:c4:ac:d4:d0:b5:67:e7:a0:08:6d:44:64:
f5:23:6a:50:dc:3f:5e:e0:14:fd:c8:8f:fd:da:65:ab:b6:08:
e6:e1:d3:1c:f9:8d:fe:5d:92:ad:41:84:fd:4a:37:f2:9c:31:
1e:39:b2:ad:02:4a:4a:16:a8:7c:75:a9:23:e1:65:db:c8:9a:
4a:86:44:f3:f0:18:a1:e1:22:34:fd:a3:7f:09:a5:83:5f:ca:
07:55:da:65:9a:1d:fb:b7:11:cb:86:24:fc:7c:59:f8:0b:2d:
44:ef:3d:64:c3:b3:fd:5a:91:3e:d8:92:04:d8:ed:75:1f:38:
1b:af:33:c7:ee:3c:7a:39:da:20:6f:e9:8f:bc:1e:fd:c0:48:
e1:3f:dd:c9:02:b2:17:d8:0c:64:f9:a0:a7:60:24:27:78:89:
b7:cd:b0:e4:2a:db:9d:00:a0:1d:cd:56:85:5c:c7:2f:52:12:
51:ec:3f:49:20:65:98:fa:ae:b1:bf:5a:1c:ef:d5:e4:c9:3c:
2b:d9:53:0f:53:e8:4b:33:c7:ee:17:d3:77:4d:79:b8:5e:95:
9e:28:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:28 2026 by rpki-client