
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
File: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft (raw, json)
Hash identifier: VqJXqvRa/AOMEJxE48gMrOpW29tVoCEldYxiEuBZsbc=
Subject key identifier: 80:49:0D:62:C4:28:18:78:07:24:7D:C5:7C:A8:B0:AB:FD:89:2B:C7
Authority key identifier: A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15
Certificate issuer: /CN=A91AB26A/serialNumber=A22F176C763B4DDED92655F1763C11763C62C215
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
Manifest number: 0C
Signing time: Sun 05 Apr 2026 08:26:54 +0000
Manifest this update: Sun 05 Apr 2026 08:26:54 +0000
Manifest next update: Sun 12 Apr 2026 08:26:54 +0000
Files and hashes: 1: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl (hash: 9HeySgmP+IzmqaPZ9F+rb1VLm1zghuTobyezylf8i+w=)
2: 138DFCCA233B11F1B97BCD11A8833773.roa (hash: m0UKXn0kIhDGQtzGm8h525ANZur9fKF0yfVFZjn0f38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl
rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB26A, serialNumber=A22F176C763B4DDED92655F1763C11763C62C215
Validity
Not Before: Apr 5 08:26:54 2026 GMT
Not After : Apr 12 08:26:54 2026 GMT
Subject: CN=69d21cce-14aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:bf:87:5f:2a:af:22:06:b8:92:84:96:f7:
37:c8:10:8e:0c:02:5b:a0:d3:47:67:aa:c6:8b:66:
eb:a4:5f:ad:f3:11:09:1c:99:42:01:40:55:80:07:
04:4d:ac:18:b4:ff:db:24:19:41:f8:7e:1d:f6:46:
b7:3e:73:d9:e4:f6:69:a2:1f:c9:c9:9b:71:46:28:
31:fe:2c:88:f1:8a:2c:3f:35:b1:73:14:37:f4:36:
b0:c5:47:be:fa:2e:2f:f5:6b:1c:5a:a0:27:6f:5c:
2b:56:89:7b:a2:e0:b4:4c:58:1e:2e:9d:36:11:20:
ab:90:67:4c:9a:0c:66:8b:db:e1:07:4f:b2:fc:e9:
82:ae:06:dd:57:47:dc:5f:66:97:1f:ba:51:7d:cd:
1e:21:0c:ec:35:e7:c2:9b:77:e1:3f:4d:1e:e6:65:
8b:2d:58:76:5d:fe:36:2d:fc:41:07:8b:fa:d9:7f:
45:32:a9:fb:ef:fb:8d:e0:4b:1d:bd:0f:05:18:89:
a2:cc:f9:b5:17:49:21:bc:f3:7f:33:39:7a:77:59:
b7:dd:a5:2b:71:72:32:8c:6f:d0:c7:c3:ba:5f:8d:
e9:cc:6d:84:21:ee:5d:35:54:d9:2f:88:08:7d:71:
9a:89:37:69:52:8e:a7:75:e6:14:75:1d:6d:a5:d0:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:0D:62:C4:28:18:78:07:24:7D:C5:7C:A8:B0:AB:FD:89:2B:C7
X509v3 Authority Key Identifier:
keyid:A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a1:d2:44:92:aa:37:05:0c:aa:a6:fd:6b:91:34:bd:cc:3c:
1d:61:f2:93:d4:ec:ef:10:af:db:95:53:91:33:c2:96:cf:e8:
70:d2:9d:8d:2a:e0:57:ed:6f:b7:ed:7b:70:e1:8e:c9:15:d9:
ee:0f:ae:00:5b:13:1f:c8:8c:4d:d7:53:40:ae:be:82:e6:58:
ef:38:8b:25:a7:3a:e4:bb:ba:19:fa:99:d7:ae:14:71:87:ac:
26:b5:7c:25:03:2f:cc:ca:46:23:46:a6:da:84:3b:95:29:5c:
85:79:b0:29:81:db:6f:5b:35:e3:bf:1e:fb:bd:9d:71:da:b9:
5a:df:03:39:79:e0:c3:38:04:71:b8:a0:49:1b:79:dd:4c:66:
05:1a:d5:74:73:cc:ef:1a:ab:97:36:8f:6f:74:cd:09:7d:c8:
e3:7f:1a:a6:7d:c3:e3:81:eb:40:86:03:f8:ff:25:2d:35:04:
85:45:aa:8d:6b:cf:ec:43:76:db:62:ec:07:48:2a:ec:1b:31:
b2:05:de:38:ff:fc:9b:85:58:63:f3:c9:11:1e:d8:38:58:4c:
33:af:bf:e4:75:33:94:eb:6a:54:f0:44:b2:ca:e8:b4:3f:a1:
e6:3d:16:22:e8:7c:cf:38:74:c9:66:e2:8e:76:7e:62:8c:63:
30:23:a8:3a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QjI2QTExMC8GA1UEBRMoQTIyRjE3NkM3NjNCNERERUQ5MjY1NUYxNzYzQzExNzYz
QzYyQzIxNTAeFw0yNjA0MDUwODI2NTRaFw0yNjA0MTIwODI2NTRaMBgxFjAUBgNV
BAMTDTY5ZDIxY2NlLTE0YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjb7+HXyqvIga4koSW9zfIEI4MAlug00dnqsaLZuukX63zEQkcmUIBQFWABwRN
rBi0/9skGUH4fh32Rrc+c9nk9mmiH8nJm3FGKDH+LIjxiiw/NbFzFDf0NrDFR776
Li/1axxaoCdvXCtWiXui4LRMWB4unTYRIKuQZ0yaDGaL2+EHT7L86YKuBt1XR9xf
ZpcfulF9zR4hDOw158Kbd+E/TR7mZYstWHZd/jYt/EEHi/rZf0Uyqfvv+43gSx29
DwUYiaLM+bUXSSG8838zOXp3WbfdpStxcjKMb9DHw7pfjenMbYQh7l01VNkviAh9
cZqJN2lSjqd15hR1HW2l0ClJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgEkNYsQo
GHgHJH3FfKiwq/2JK8cwHwYDVR0jBBgwFoAUoi8XbHY7Td7ZJlXxdjwRdjxiwhUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMjZBLzY0MTczRERBMjMy
RTExRjE4NTM3QTc4MEEzODMzNzczL29pOFhiSFk3VGQ3WkpsWHhkandSZGp4aXdo
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb2k4WGJIWTdUZDdaSmxYeGRqd1Jkanhpd2hVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC
MjZBLzY0MTczRERBMjMyRTExRjE4NTM3QTc4MEEzODMzNzczL29pOFhiSFk3VGQ3
WkpsWHhkandSZGp4aXdoVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCModJEkqo3BQyqpv1rkTS9zDwdYfKT1OzvEK/blVORM8KWz+hw0p2NKuBX7W+3
7Xtw4Y7JFdnuD64AWxMfyIxN11NArr6C5ljvOIslpzrku7oZ+pnXrhRxh6wmtXwl
Ay/MykYjRqbahDuVKVyFebApgdtvWzXjvx77vZ1x2rla3wM5eeDDOARxuKBJG3nd
TGYFGtV0c8zvGquXNo9vdM0JfcjjfxqmfcPjgetAhgP4/yUtNQSFRaqNa8/sQ3bb
YuwHSCrsGzGyBd44//ybhVhj88kRHtg4WEwzr7/kdTOU62pU8ESyyui0P6HmPRYi
6HzPOHTJZuKOdn5ijGMwI6g6
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:22 2026 by rpki-client