
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json)
Hash identifier: j0vb3aTDTr1iMKz1yFp0n7xw6mDO5StYltbz5BrTyps=
Subject key identifier: EF:E2:2D:D2:91:E4:53:CF:B9:C1:16:F9:5C:DD:B5:13:0E:A1:D2:E9
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial: 22BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
Manifest number: 2265
Signing time: Fri 12 Jun 2026 15:50:19 +0000
Manifest this update: Fri 12 Jun 2026 15:50:19 +0000
Manifest next update: Fri 19 Jun 2026 15:50:19 +0000
Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: 0/au7XRWnW+O4NhLzMhYdkFSDANQI/Qcy//JM+7eolk=)
2: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=)
3: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=)
4: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=)
5: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=)
6: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=)
7: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=)
8: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8895 (0x22bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Validity
Not Before: Jun 12 15:50:19 2026 GMT
Not After : Jun 19 15:50:19 2026 GMT
Subject: CN=6a2c2abb-6bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:78:2b:c0:e7:46:1a:f5:09:ae:fd:04:b0:
ff:1c:38:79:99:28:e5:25:1d:c1:81:36:cd:ec:74:
7c:51:68:a9:78:dc:1c:e1:b0:95:7d:32:aa:b9:05:
66:f1:20:11:da:34:a6:c0:6d:91:06:5f:a5:42:b7:
4c:c2:07:73:2a:d0:6a:73:51:12:93:23:3f:16:8c:
81:c1:02:e7:ab:69:23:99:3b:9c:2b:53:f2:1a:a7:
98:7e:7b:bb:2e:87:ab:b2:38:ce:df:4a:d6:4f:de:
da:2d:22:e6:2b:5f:85:42:b1:92:89:67:eb:14:d8:
03:2e:b8:85:f9:d5:10:b7:bf:7e:7e:49:bf:6e:ec:
52:b7:be:aa:06:e0:f2:98:89:2a:0d:15:2c:a5:1d:
af:13:34:4a:5e:38:bd:ad:c5:34:9e:3e:c3:c5:53:
36:17:a9:4f:d1:54:ce:93:40:1c:29:e0:68:ba:92:
12:57:52:9c:22:4c:19:1d:1b:80:e4:6f:9f:eb:69:
29:52:13:49:8a:52:c8:91:0b:38:c9:72:34:c8:6a:
ef:6f:f1:ad:f9:34:c5:5d:22:1b:ca:06:08:77:32:
44:ee:86:37:dc:34:70:73:02:b6:1d:5e:c8:83:0f:
df:39:34:4c:fa:4b:35:e6:60:92:89:19:c1:ac:f6:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:2D:D2:91:E4:53:CF:B9:C1:16:F9:5C:DD:B5:13:0E:A1:D2:E9
X509v3 Authority Key Identifier:
keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f1:44:0f:04:24:34:47:08:e3:50:25:6a:a3:fb:e5:2d:f7:
94:8a:8d:05:3f:9e:3a:45:da:80:34:3c:d2:79:d0:e7:fa:40:
ed:af:9c:32:52:53:d1:f1:e2:ef:57:2c:c8:54:dc:64:96:24:
60:4d:be:f0:94:ab:ce:8e:ae:2c:15:b0:90:60:0f:30:8c:17:
02:f8:52:a2:34:f2:d6:c2:60:9c:05:2a:04:b3:1c:39:20:61:
e6:50:31:20:ff:67:89:79:b0:1f:93:ad:24:c3:2a:b3:e2:a8:
64:0a:2a:51:46:72:5a:fa:57:d5:9e:12:1f:f1:28:98:b5:57:
82:99:b3:53:80:bb:c9:14:92:b2:a7:49:f1:82:9a:34:e1:f9:
65:30:99:b1:96:c1:31:45:ab:fa:3b:6e:7c:70:78:f2:f9:ec:
52:92:d5:ce:ab:40:20:9c:a3:71:d9:18:a9:31:a4:32:49:b5:
ea:52:bd:f0:a2:2d:61:d7:5a:7e:59:6f:00:9d:b3:90:1d:ca:
13:35:15:ef:2e:06:74:63:31:d0:fa:ef:c3:bc:85:06:2b:19:
85:71:1b:cd:a9:e5:af:ae:46:66:d1:fb:8b:44:86:8c:46:27:
14:94:08:20:5f:06:63:14:40:5a:f8:78:f3:8a:00:b1:90:d0:
62:e4:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:34:00 2026 by rpki-client