
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json)
Hash identifier: qVH1tv3lHd+YTiKU4Z2TL8EAdNFBBGtd8lL4G/E0Wco=
Subject key identifier: 3D:94:92:23:F8:E7:4A:48:CE:58:27:E7:7D:A7:6E:AC:32:C4:6E:3C
Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
Manifest number: 07E3
Signing time: Thu 16 Apr 2026 21:11:03 +0000
Manifest this update: Thu 16 Apr 2026 21:11:02 +0000
Manifest next update: Thu 23 Apr 2026 21:11:02 +0000
Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: KH+KpJpGmU77y5s1lrO/Vn/qcD4fLWh27Q3t+ceODKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Validity
Not Before: Apr 16 21:11:02 2026 GMT
Not After : Apr 23 21:11:02 2026 GMT
Subject: CN=69e15066-8021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:19:6a:7c:cd:0e:e8:d7:9a:ae:07:94:1b:
4a:86:8e:1e:c6:44:47:e3:6a:be:95:2c:70:cc:3e:
2c:42:3f:7c:9f:6e:c7:e1:39:96:62:25:1d:ee:fa:
05:e3:c3:02:60:f0:26:2b:6a:c7:a5:13:6e:24:cd:
16:2f:54:fb:3a:6c:d3:f5:92:cc:5b:1c:ba:40:d9:
13:e5:cb:f5:74:17:6b:0b:1a:ef:33:06:64:7a:79:
4d:c9:51:4d:99:f2:5a:15:92:37:0f:74:37:0d:db:
6a:1c:69:3c:7d:36:6b:8e:ef:fa:bf:31:1c:5c:04:
96:97:89:05:4a:db:69:d3:48:3d:33:46:92:95:e6:
58:2a:c4:b6:6e:89:b2:32:d0:b6:10:55:28:b5:e9:
16:7e:68:08:07:6c:ab:58:80:8a:92:9b:61:3c:d7:
1d:c2:ab:c2:c8:6e:bc:04:73:60:a6:39:36:fb:3f:
ed:70:95:8d:8a:91:1d:9c:4e:f9:66:9c:5c:33:d4:
b6:69:45:52:13:47:59:46:f5:6a:e3:51:5d:f3:f9:
dc:16:f6:38:df:eb:18:66:1e:a4:06:e3:41:63:fa:
a1:7b:32:42:ad:5b:69:03:d8:f4:b9:16:6b:f1:79:
e8:d8:ef:05:f8:26:69:b8:a0:32:7a:d7:26:e2:48:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:92:23:F8:E7:4A:48:CE:58:27:E7:7D:A7:6E:AC:32:C4:6E:3C
X509v3 Authority Key Identifier:
keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:50:d2:d4:20:d7:00:55:ea:9d:b1:f8:8f:eb:9d:a4:3c:
c9:e9:24:e6:fb:97:f6:26:dd:27:8c:c9:ef:37:3a:89:63:c8:
1f:13:ca:53:d7:ed:6b:ec:98:8e:80:18:5b:a1:32:d9:24:ab:
1b:6c:d7:d7:11:cf:f8:64:7a:d5:b9:44:e0:b2:c5:11:dd:af:
cb:9b:60:3c:f4:24:a3:98:9f:f9:b1:b5:e8:43:3e:7f:d6:aa:
80:b5:9b:2b:e7:0f:43:ef:85:da:68:a0:ff:65:9a:9e:56:64:
35:93:67:21:70:09:19:9f:23:7d:7c:bc:02:e0:29:0d:09:a2:
da:4d:50:36:e7:b4:f9:e9:74:6d:9c:3f:7a:96:e8:d3:29:50:
7d:a7:cb:7b:1d:77:0a:13:b4:69:c5:d3:9b:03:60:07:e8:17:
a2:90:6d:c5:89:6a:e7:b0:1c:52:7c:11:6e:7d:e4:f0:e6:6f:
48:e4:e6:5d:6f:4f:db:39:79:b8:35:89:bc:a6:32:98:40:9d:
6f:0c:8e:f0:a2:5d:1e:5e:49:bd:7f:ca:3a:72:88:57:2e:17:
ec:d8:d8:27:33:ef:14:ff:9d:67:17:74:6f:aa:ac:88:ec:59:
d0:9d:e4:1f:f1:8e:bc:1f:6b:50:ae:92:1e:aa:e1:61:85:bf:
df:4b:13:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG
NTRCOTAzOTYwHhcNMjYwNDE2MjExMTAyWhcNMjYwNDIzMjExMTAyWjAYMRYwFAYD
VQQDEw02OWUxNTA2Ni04MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBcZanzNDujXmq4HlBtKho4exkRH42q+lSxwzD4sQj98n27H4TmWYiUd7voF
48MCYPAmK2rHpRNuJM0WL1T7OmzT9ZLMWxy6QNkT5cv1dBdrCxrvMwZkenlNyVFN
mfJaFZI3D3Q3DdtqHGk8fTZrju/6vzEcXASWl4kFSttp00g9M0aSleZYKsS2bomy
MtC2EFUotekWfmgIB2yrWICKkpthPNcdwqvCyG68BHNgpjk2+z/tcJWNipEdnE75
ZpxcM9S2aUVSE0dZRvVq41Fd8/ncFvY43+sYZh6kBuNBY/qhezJCrVtpA9j0uRZr
8Xno2O8F+CZpuKAyetcm4kgPxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2UkiP4
50pIzlgn532nbqwyxG48MB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB
NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq
U1R3NTVzeXNremIxUzVBNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiuxQ0tQg1wBV6p2x+I/rnaQ8yekk5vuX9ibdJ4zJ7zc6iWPIHxPKU9fta+yY
joAYW6Ey2SSrG2zX1xHP+GR61blE4LLFEd2vy5tgPPQko5if+bG16EM+f9aqgLWb
K+cPQ++F2mig/2WanlZkNZNnIXAJGZ8jfXy8AuApDQmi2k1QNue0+el0bZw/epbo
0ylQfafLex13ChO0acXTmwNgB+gXopBtxYlq57AcUnwRbn3k8OZvSOTmXW9P2zl5
uDWJvKYymECdbwyO8KJdHl5JvX/KOnKIVy4X7NjYJzPvFP+dZxd0b6qsiOxZ0J3k
H/GOvB9rUK6SHqrhYYW/30sTBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:34 2026 by rpki-client