
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: IyldqMWo6ULbbD62xfSWhUHaGlsrr9PsWsRrqnV9Uss=
Subject key identifier: 88:99:23:0F:ED:C3:C8:CC:3B:C3:6F:CB:89:DA:E4:5F:91:D5:F5:D4
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 032A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 0324
Signing time: Sat 13 Jun 2026 01:29:46 +0000
Manifest this update: Sat 13 Jun 2026 01:29:45 +0000
Manifest next update: Sat 20 Jun 2026 01:29:45 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: shMCrQgsoqzAENFdxWUhkvemU5LlI6huAavVosG3AYc=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Jun 13 01:29:45 2026 GMT
Not After : Jun 20 01:29:45 2026 GMT
Subject: CN=6a2cb28a-48e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:cc:27:42:22:89:2a:b0:0d:51:8d:71:ea:
4e:5f:a4:d4:1f:ff:0c:fd:d5:af:60:26:41:ef:45:
b4:59:0c:44:02:79:fc:dc:17:c7:bc:bc:04:5b:ef:
b2:7a:e8:d5:c7:5f:bb:a3:09:2a:8a:b1:51:d8:9d:
a3:de:22:8e:e2:6d:56:fa:45:45:a0:e2:43:cd:a5:
42:7d:90:36:76:d6:88:2d:c5:75:bd:f4:63:3f:d9:
2e:39:2e:32:6e:2f:98:e6:f7:84:78:90:80:08:e1:
39:ce:91:ed:a7:46:47:82:20:29:51:32:1b:19:68:
f2:a6:2b:53:78:31:1f:0a:a9:8f:b6:c7:73:9a:b2:
dc:92:3a:6f:40:10:a7:13:3c:3d:75:8b:fa:cd:ab:
ed:5f:72:97:00:43:63:74:af:c3:6d:2c:49:74:18:
c6:6c:6f:c3:4c:bd:44:3f:fd:07:9b:d4:6a:7a:4f:
eb:75:f0:5f:d1:98:c0:98:b3:c0:e1:df:cb:b9:c4:
b9:5d:78:a3:a8:e5:a0:f2:c6:b0:34:53:2e:2c:bd:
92:cf:07:03:b1:cf:47:22:de:36:a7:59:b2:7c:a3:
34:f7:3d:d3:b6:3e:a9:60:c3:ca:09:22:1a:87:78:
b3:52:39:0d:b3:d4:fe:2c:62:e7:95:80:1b:fe:39:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:23:0F:ED:C3:C8:CC:3B:C3:6F:CB:89:DA:E4:5F:91:D5:F5:D4
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:83:06:d6:12:3c:f4:86:e1:8c:c8:b3:5a:85:56:d7:9a:c0:
70:4e:a3:02:ae:be:16:9e:0d:d6:35:5e:03:ce:8e:c2:22:bb:
10:ac:dd:3b:21:69:be:8a:c7:db:2d:49:59:87:2d:69:32:fe:
da:92:50:e2:cd:96:c1:a5:bf:68:e0:db:44:b0:d0:13:39:58:
89:79:f7:33:f8:00:44:f8:18:9a:a6:93:73:7b:34:15:88:47:
c6:6d:a7:d3:cb:5d:92:52:80:2c:bb:fc:97:d8:e7:45:06:0d:
d9:f4:fe:7b:be:fb:00:ec:71:96:81:8e:20:53:00:f9:36:81:
0e:05:7d:6b:f7:d0:2a:b8:61:46:ff:26:00:de:12:56:04:b0:
bb:ca:37:18:77:2a:6b:ca:01:13:d2:ab:5d:81:4d:3d:15:63:
69:e8:3f:a1:eb:97:54:48:a6:e6:90:cc:4e:d1:80:2a:e5:61:
d1:3f:e9:70:b5:e4:84:4c:16:ef:b9:72:ba:b7:eb:f8:18:2a:
e9:43:7d:1e:0d:af:6b:a7:b9:54:d9:ce:4f:a9:f0:ad:c0:7d:
cf:25:24:50:4b:5b:ce:c5:fe:32:1c:67:03:12:9c:e5:f1:0a:
bc:81:34:13:e1:db:06:73:62:d3:fc:9d:5f:72:5f:aa:75:a8:
32:bc:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:52 2026 by rpki-client