
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: UjCfSW9AapycPfViG8oUePtrNv4s4t0CcCLk5UztMJ0=
Subject key identifier: 66:00:74:E1:28:F9:E0:FB:D8:AD:30:4A:DA:C3:0D:25:32:CC:97:B7
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 030A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 0305
Signing time: Fri 17 Apr 2026 01:07:32 +0000
Manifest this update: Fri 17 Apr 2026 01:07:32 +0000
Manifest next update: Fri 24 Apr 2026 01:07:32 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: e/M8YKwH5zGn7p6OWUwBcmbtG8aMk7ruZItxJxjvmUo=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: F9Rj/XqATn1zywLlT+11oxByZBWlqSz3GPhD+W7p31Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Apr 17 01:07:32 2026 GMT
Not After : Apr 24 01:07:32 2026 GMT
Subject: CN=69e187d4-f97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:86:63:27:08:33:26:fd:3e:80:e9:2a:e1:
04:4e:29:3a:8d:0b:77:39:8a:fa:a3:55:f1:7b:b8:
73:86:a3:dc:e1:8c:78:ed:a4:a6:03:66:d2:fd:0a:
d6:6b:2a:1c:ea:10:26:1e:66:3b:bc:07:1d:1a:28:
aa:68:3d:11:14:67:90:9a:1b:19:fa:1d:be:96:af:
bc:7a:fc:b4:9f:ea:61:70:45:a4:45:6b:50:b1:6e:
a2:d5:0b:09:a5:e1:46:7b:4b:0c:3d:d2:39:fb:73:
5c:36:d2:63:5c:3b:60:9c:94:54:b3:e4:97:6e:ef:
6d:07:17:f3:32:5f:fd:6d:68:28:d1:99:55:19:1f:
29:2f:b8:6f:2b:85:c0:88:3b:b7:ae:06:69:ed:ad:
28:61:83:54:b3:d4:0b:91:27:8b:c9:92:cb:e3:3f:
82:f2:c8:75:40:cf:71:fc:70:20:3b:ff:27:12:7c:
47:d5:18:30:b5:2e:01:e8:6e:3e:99:f4:42:bd:82:
dc:4f:54:7b:01:a1:f1:fb:ed:65:31:7e:4a:82:b2:
84:98:f7:b1:ee:53:35:97:9f:46:8d:b3:ad:c3:36:
5a:c0:f2:8b:fe:6e:4b:16:34:7b:f5:17:54:70:09:
4d:fd:cb:5d:38:08:44:8e:a5:80:d0:3c:d1:85:51:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:74:E1:28:F9:E0:FB:D8:AD:30:4A:DA:C3:0D:25:32:CC:97:B7
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:7a:bd:06:29:7c:56:ce:53:6d:0b:96:1a:2f:da:73:96:
87:2e:bd:49:66:70:eb:1d:59:1f:dd:cf:59:a9:12:67:b8:cb:
00:24:5b:07:26:ad:3f:e3:52:f7:6a:d1:04:bf:17:25:43:a4:
8b:49:e3:04:06:7a:33:26:f1:cb:5e:52:c3:7b:ad:7d:d0:9e:
60:dc:67:e3:24:f9:35:ba:df:e9:9c:f8:65:1f:e6:31:30:06:
df:ea:f7:08:ec:06:26:e0:f4:b9:ed:d7:9c:8c:3b:c2:6c:df:
f9:28:08:b3:1f:95:6e:d5:da:27:b9:2f:e5:53:7e:f0:82:e1:
6b:b4:e5:19:79:f2:af:4f:4e:0d:23:cd:7c:66:25:9f:d7:7b:
72:fd:25:2a:6f:f0:18:66:29:1c:36:f6:4b:00:16:12:ac:2e:
7b:52:1b:e7:fe:03:31:a2:8d:23:27:75:b7:11:9c:20:24:77:
a4:71:f9:e3:4d:17:b2:2c:ec:26:60:40:e1:b9:e4:bf:78:71:
3f:c6:71:88:39:e5:aa:50:07:35:73:c4:ac:63:30:fb:8f:a6:
84:e4:2f:1f:68:85:1d:d8:2d:05:f3:f0:85:24:2c:ff:eb:6f:
37:6f:8f:04:4a:ea:96:f8:0d:5d:8c:8f:e5:df:20:c8:12:88:
8e:58:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:44 2026 by rpki-client