
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier: aIMQXiidY7jpLG4xI6dYrZwNa2peWfXUf9QnDWASbnI=
Subject key identifier: 09:06:99:47:F0:AA:FC:14:DA:E3:93:FF:C7:9D:A7:47:92:4B:3E:EF
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number: 01A9
Signing time: Wed 05 Aug 2026 05:18:57 +0000
Manifest this update: Wed 05 Aug 2026 05:18:57 +0000
Manifest next update: Wed 12 Aug 2026 05:18:57 +0000
Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: PymLvVF/2vm0HiMdeeXx9S+MvqhYVLFC10Szc0hElGY=)
2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 05:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Validity
Not Before: Aug 5 05:18:57 2026 GMT
Not After : Aug 12 05:18:57 2026 GMT
Subject: CN=6a72c7c1-db9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:f0:e9:4a:85:fc:5b:6d:82:91:43:e4:f8:
0c:75:a2:ae:c7:fe:37:32:46:35:99:ff:00:fc:54:
94:e2:e2:56:47:a0:a8:ac:5d:82:97:51:a8:a5:a0:
d3:6f:cc:a5:52:e7:36:ea:27:f2:cb:6c:8a:6d:c7:
66:c7:64:59:47:fc:d3:b3:ac:62:a2:73:ea:9d:7a:
ae:75:36:36:77:de:d8:bb:94:ee:af:16:7e:eb:88:
f2:5a:9a:3b:34:c9:3c:d9:d9:3e:0d:56:06:a3:12:
f5:59:67:3d:7c:96:1e:fa:34:3f:3b:d2:27:26:ad:
7e:36:96:0e:8d:97:05:a6:f1:d6:79:4e:c4:38:5b:
aa:07:58:77:cb:12:76:41:5c:03:0b:4d:5a:91:49:
60:dc:46:50:3c:a3:48:1c:05:f8:e8:0d:dc:cf:f6:
52:10:a4:8a:e8:65:af:c3:54:6c:3b:87:cc:94:f3:
e3:55:3f:75:d8:90:fd:56:fe:71:b2:4f:10:89:12:
d7:f7:b1:a8:d2:1a:ca:8b:60:99:9c:e2:8e:87:77:
cf:c9:b6:cc:57:f7:59:dd:6c:5f:8b:0f:63:49:2b:
26:86:42:6f:e4:96:0f:c3:0b:f6:a1:51:63:57:58:
96:e2:d0:1d:f2:8b:39:bd:de:b9:58:3f:c7:25:8f:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:99:47:F0:AA:FC:14:DA:E3:93:FF:C7:9D:A7:47:92:4B:3E:EF
X509v3 Authority Key Identifier:
keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:1d:15:f2:e8:9a:d2:f7:25:b5:40:74:7e:66:86:08:a2:
bf:9a:d4:24:fe:85:e9:fa:2f:03:31:5a:d4:03:07:b5:cb:5c:
ca:10:3d:25:db:fd:f7:66:94:55:78:30:1b:db:68:6e:01:8e:
b4:b1:22:eb:65:8e:97:f8:2e:b6:0a:f3:09:1d:9b:97:e3:98:
6a:b5:3a:a3:f5:91:22:5c:ac:25:43:98:6e:04:09:60:52:24:
02:30:41:ab:13:8f:c0:f2:7e:3d:5c:a5:4f:e8:c4:a0:22:b6:
d4:fd:6b:6c:78:bb:25:c7:cb:48:c5:b1:a9:5b:02:b1:ae:65:
c6:11:3a:91:2b:92:79:81:27:bb:35:c4:88:f0:6a:c2:16:37:
43:aa:f0:8b:44:fb:97:ab:aa:bd:63:c8:75:97:81:71:8b:8b:
ac:43:28:68:53:8c:31:29:bf:4f:36:40:0c:48:b7:b1:22:e2:
e4:fb:6d:2c:36:f7:8d:1a:8d:b1:e4:2f:95:11:33:90:65:36:
cf:39:ff:17:ce:28:10:e5:7c:bf:51:4a:f3:77:77:e7:06:dd:
d7:52:8f:11:1b:d6:d6:56:39:ac:59:5c:85:db:7d:4a:5f:79:
6d:9f:d8:ad:90:bc:94:c3:9a:ea:fd:45:6b:54:a7:dd:12:b5:
69:e0:06:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB
M0ExRUVGM0YwHhcNMjYwODA1MDUxODU3WhcNMjYwODEyMDUxODU3WjAYMRYwFAYD
VQQDEw02YTcyYzdjMS1kYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaDw6UqF/FttgpFD5PgMdaKux/43MkY1mf8A/FSU4uJWR6CorF2Cl1GopaDT
b8ylUuc26ifyy2yKbcdmx2RZR/zTs6xionPqnXqudTY2d97Yu5TurxZ+64jyWpo7
NMk82dk+DVYGoxL1WWc9fJYe+jQ/O9InJq1+NpYOjZcFpvHWeU7EOFuqB1h3yxJ2
QVwDC01akUlg3EZQPKNIHAX46A3cz/ZSEKSK6GWvw1RsO4fMlPPjVT912JD9Vv5x
sk8QiRLX97Go0hrKi2CZnOKOh3fPybbMV/dZ3Wxfiw9jSSsmhkJv5JYPwwv2oVFj
V1iW4tAd8os5vd65WD/HJY8BHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkGmUfw
qvwU2uOT/8edp0eSSz7vMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1
RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD
ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIAUdFfLomtL3JbVAdH5mhgiiv5rUJP6F6fovAzFa1AMHtctcyhA9Jdv992aU
VXgwG9tobgGOtLEi62WOl/gutgrzCR2bl+OYarU6o/WRIlysJUOYbgQJYFIkAjBB
qxOPwPJ+PVylT+jEoCK21P1rbHi7JcfLSMWxqVsCsa5lxhE6kSuSeYEnuzXEiPBq
whY3Q6rwi0T7l6uqvWPIdZeBcYuLrEMoaFOMMSm/TzZADEi3sSLi5PttLDb3jRqN
seQvlREzkGU2zzn/F84oEOV8v1FK83d35wbd11KPERvW1lY5rFlchdt9Sl95bZ/Y
rZC8lMOa6v1Fa1Sn3RK1aeAG8g==
-----END CERTIFICATE-----
Generated at Fri Aug 7 03:31:12 2026 by rpki-client