
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier: g4yJqgXfcm1Gafm/hHAfFH7CIk+Tj618KaPMIyd2ZSc=
Subject key identifier: 96:0B:96:8C:85:F6:9A:F9:9B:B7:D1:E5:A5:FF:C6:0C:07:6E:83:E4
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number: 0192
Signing time: Sun 21 Jun 2026 04:23:39 +0000
Manifest this update: Sun 21 Jun 2026 04:23:38 +0000
Manifest next update: Sun 28 Jun 2026 04:23:38 +0000
Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: xLH3ksV05oMsL/GIr07pC8OmjOoO/galaA+2idJtdjQ=)
2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 04:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Validity
Not Before: Jun 21 04:23:38 2026 GMT
Not After : Jun 28 04:23:38 2026 GMT
Subject: CN=6a37674a-6235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:34:69:96:e6:90:7f:6c:bf:92:c3:e7:08:
b4:ff:eb:bf:eb:4e:ef:e9:c2:0d:b4:87:e5:99:01:
5f:3a:66:32:ec:b2:13:3f:c0:ca:08:0e:a5:72:8d:
2b:be:4b:de:e2:2e:fd:4d:d2:cf:f9:3b:be:9a:f4:
b7:3d:2e:61:8b:22:6f:e4:54:1c:d1:37:2b:cc:72:
9c:af:5b:a2:28:db:d8:e7:9f:38:e0:17:59:b1:fc:
43:bb:ca:d3:74:bd:f5:20:81:ed:e3:b9:4a:c5:b8:
b2:04:03:39:d3:03:de:c7:7d:a5:9e:a6:f0:e0:a8:
fd:59:d8:07:89:2a:fb:b5:62:81:9b:49:81:94:05:
30:18:52:bc:ff:03:8f:0d:50:0f:15:8b:5d:9a:be:
a9:6f:1e:2c:d4:e8:c0:f3:6b:af:99:94:6d:a6:43:
3b:5d:6b:ed:01:a4:8f:4f:17:47:04:e1:60:0f:87:
80:4b:9f:8e:ea:92:8e:a0:d8:4c:1c:a6:ca:1a:28:
2e:65:1d:5c:86:b7:c7:76:22:37:2e:90:d5:45:74:
0f:43:dc:01:be:d2:94:96:cc:38:cc:5a:7d:39:f9:
ec:4b:56:ab:ec:d4:00:04:97:1e:ad:a8:ab:f1:6b:
f0:c5:e6:97:39:83:29:b5:f3:00:73:27:b7:92:f6:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:96:8C:85:F6:9A:F9:9B:B7:D1:E5:A5:FF:C6:0C:07:6E:83:E4
X509v3 Authority Key Identifier:
keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d0:f3:6a:aa:be:77:cc:c5:ac:c0:ef:b3:32:67:40:83:96:
7f:7d:27:a6:fb:9a:86:07:c1:30:63:40:68:71:88:5d:3d:f3:
90:2e:dd:2e:b5:8e:f8:62:a7:82:50:bb:6b:62:fe:b6:03:15:
61:2a:7f:33:fb:bc:68:e8:12:7d:25:99:3b:d7:39:19:b6:c3:
eb:ec:e4:16:d1:73:ed:c5:b6:2c:b5:f4:2d:72:0a:c7:62:f4:
99:67:8c:e0:37:8f:ef:24:d6:77:1c:04:e4:d5:83:3b:58:bf:
30:9e:84:e0:3d:a9:b3:6c:b2:13:da:e5:6f:66:d7:5d:48:8c:
63:97:0c:96:2b:fc:13:8c:86:b2:12:37:6c:60:5a:64:5a:9b:
db:3a:e9:dd:26:94:a6:9c:8d:5c:9f:33:b4:a7:96:f7:eb:de:
25:0a:94:c0:48:af:0a:e5:45:0b:1a:8a:d4:09:e7:af:2c:29:
39:c3:c3:fd:2b:07:cc:62:57:eb:e9:9a:62:3f:27:a4:f7:30:
f3:3e:e6:03:53:f7:96:54:5c:64:7b:82:3a:35:d3:bc:bf:77:
6f:62:1f:29:ec:de:b8:c5:33:e6:df:b9:ec:b8:74:89:b6:89:
d1:5a:21:35:16:5a:e3:87:41:d3:ea:4e:8f:24:19:e6:40:a3:
7e:bb:c5:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB
M0ExRUVGM0YwHhcNMjYwNjIxMDQyMzM4WhcNMjYwNjI4MDQyMzM4WjAYMRYwFAYD
VQQDEw02YTM3Njc0YS02MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGk0aZbmkH9sv5LD5wi0/+u/607v6cINtIflmQFfOmYy7LITP8DKCA6lco0r
vkve4i79TdLP+Tu+mvS3PS5hiyJv5FQc0TcrzHKcr1uiKNvY55844BdZsfxDu8rT
dL31IIHt47lKxbiyBAM50wPex32lnqbw4Kj9WdgHiSr7tWKBm0mBlAUwGFK8/wOP
DVAPFYtdmr6pbx4s1OjA82uvmZRtpkM7XWvtAaSPTxdHBOFgD4eAS5+O6pKOoNhM
HKbKGiguZR1chrfHdiI3LpDVRXQPQ9wBvtKUlsw4zFp9OfnsS1ar7NQABJcerair
8WvwxeaXOYMptfMAcye3kvZGJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYLloyF
9pr5m7fR5aX/xgwHboPkMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1
RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD
ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUNDzaqq+d8zFrMDvszJnQIOWf30npvuahgfBMGNAaHGIXT3zkC7dLrWO+GKn
glC7a2L+tgMVYSp/M/u8aOgSfSWZO9c5GbbD6+zkFtFz7cW2LLX0LXIKx2L0mWeM
4DeP7yTWdxwE5NWDO1i/MJ6E4D2ps2yyE9rlb2bXXUiMY5cMliv8E4yGshI3bGBa
ZFqb2zrp3SaUppyNXJ8ztKeW9+veJQqUwEivCuVFCxqK1AnnrywpOcPD/SsHzGJX
6+maYj8npPcw8z7mA1P3llRcZHuCOjXTvL93b2IfKezeuMUz5t+57Lh0ibaJ0Voh
NRZa44dB0+pOjyQZ5kCjfrvFHQ==
-----END CERTIFICATE-----
Generated at Tue Jun 23 02:43:38 2026 by rpki-client