
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json)
Hash identifier: cxZjHLIxAN7IUx/wi4aJB8Edhx2p6CFOPpbqgto+QBU=
Subject key identifier: FE:81:72:F9:0C:E4:AC:6E:49:C1:F1:4E:13:5F:9F:6C:A8:4E:E5:DF
Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Certificate serial: 0447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
Manifest number: 0447
Signing time: Mon 05 Oct 2026 00:11:25 +0000
Manifest this update: Mon 05 Oct 2026 00:11:24 +0000
Manifest next update: Mon 12 Oct 2026 00:11:24 +0000
Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: +79iIP/J0lomUTCYriA/lDvcDG2UwGIsB53BhalW/Dc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Validity
Not Before: Oct 5 00:11:24 2026 GMT
Not After : Oct 12 00:11:24 2026 GMT
Subject: CN=6ac2eb2d-2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:d4:88:a1:be:aa:13:f3:65:52:e9:42:b5:
a3:85:89:c1:c1:88:bb:c5:6f:08:12:d5:e8:98:ab:
09:cb:07:54:9d:dd:b4:20:d6:b9:bd:cb:57:13:77:
d3:54:31:b4:eb:bb:cf:a0:7b:6a:c0:5c:c0:aa:09:
c5:e3:85:23:24:db:08:be:8d:da:6f:58:93:9d:6d:
60:6a:9c:9d:eb:54:f4:5e:54:2a:f1:5d:e8:e8:9b:
3d:3e:08:59:3c:c6:59:25:36:b0:02:c1:77:91:be:
50:97:ff:65:f4:72:7d:01:a6:62:fc:7f:c0:31:7a:
2c:fb:5c:cf:3f:6c:4f:86:de:7f:62:02:ec:30:d0:
63:c2:02:72:04:95:f1:29:71:1a:a1:b7:31:3d:fe:
65:a2:4e:61:9d:54:fe:88:90:bd:8a:99:cc:6f:71:
88:eb:50:83:10:8f:d6:e7:91:eb:f9:ec:cc:1c:7f:
e6:9e:78:09:6b:16:24:09:bf:b4:3d:a6:30:2d:9b:
c2:fc:09:d0:70:84:06:43:95:46:a9:fa:89:28:a2:
4f:99:44:3e:2b:90:83:cb:44:28:aa:6e:a3:fb:05:
27:cd:29:2c:46:b8:8a:1f:6e:19:0e:cc:c7:8a:90:
e1:01:77:a8:00:71:3f:05:0c:39:6e:78:19:26:e0:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:72:F9:0C:E4:AC:6E:49:C1:F1:4E:13:5F:9F:6C:A8:4E:E5:DF
X509v3 Authority Key Identifier:
keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b6:aa:03:3b:35:e6:31:a2:78:2b:49:77:c7:10:a4:14:54:
63:44:69:50:23:43:8a:11:2d:4d:c2:f5:10:da:6e:42:49:3a:
b8:a7:3c:ad:54:15:ec:b8:e4:f1:27:e6:d1:56:59:10:0c:4b:
ec:7f:01:1c:70:15:ca:df:e0:91:f2:e2:86:17:0e:2d:a0:d6:
cd:78:19:6b:eb:de:bb:2f:95:8f:d5:1a:7f:03:e6:ae:db:2d:
c8:b8:4b:55:91:dc:08:73:47:d3:27:93:40:74:e2:c8:a6:f3:
37:13:93:65:8d:9b:a7:7f:10:d8:32:20:c2:7e:d0:6b:f9:0e:
e4:a7:23:64:d0:59:77:f0:b7:21:e4:be:0d:60:a0:b9:61:6b:
dc:39:bc:3e:e2:75:84:78:f1:12:3f:96:e7:14:6f:08:bb:8a:
c5:41:bb:35:18:d2:7f:ec:d0:3d:67:94:51:70:92:30:d4:5f:
d1:40:cf:0c:f6:cb:8b:8d:ba:82:cd:4a:b2:58:e0:56:65:22:
9e:ae:4e:63:fb:b2:f5:27:01:de:0c:90:85:14:f2:d2:08:43:
ca:90:57:1f:e3:cc:71:be:08:c5:73:17:d1:46:a0:82:23:7a:
0c:cb:80:02:96:7b:14:20:da:51:6d:f1:1a:02:a3:7c:c2:ba:
53:49:0e:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG
MENERjY4MzAwHhcNMjYxMDA1MDAxMTI0WhcNMjYxMDEyMDAxMTI0WjAYMRYwFAYD
VQQDEw02YWMyZWIyZC0yMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rLUiKG+qhPzZVLpQrWjhYnBwYi7xW8IEtXomKsJywdUnd20INa5vctXE3fT
VDG067vPoHtqwFzAqgnF44UjJNsIvo3ab1iTnW1gapyd61T0XlQq8V3o6Js9PghZ
PMZZJTawAsF3kb5Ql/9l9HJ9AaZi/H/AMXos+1zPP2xPht5/YgLsMNBjwgJyBJXx
KXEaobcxPf5lok5hnVT+iJC9ipnMb3GI61CDEI/W55Hr+ezMHH/mnngJaxYkCb+0
PaYwLZvC/AnQcIQGQ5VGqfqJKKJPmUQ+K5CDy0Qoqm6j+wUnzSksRriKH24ZDszH
ipDhAXeoAHE/BQw5bngZJuAy+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6BcvkM
5KxuScHxThNfn2yoTuXfMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5
MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh
REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV
eVJuR1RhcExmckh3emZhREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABLaqAzs15jGieCtJd8cQpBRUY0RpUCNDihEtTcL1ENpuQkk6uKc8rVQV7Ljk
8Sfm0VZZEAxL7H8BHHAVyt/gkfLihhcOLaDWzXgZa+veuy+Vj9UafwPmrtstyLhL
VZHcCHNH0yeTQHTiyKbzNxOTZY2bp38Q2DIgwn7Qa/kO5KcjZNBZd/C3IeS+DWCg
uWFr3Dm8PuJ1hHjxEj+W5xRvCLuKxUG7NRjSf+zQPWeUUXCSMNRf0UDPDPbLi426
gs1KsljgVmUinq5OY/uy9ScB3gyQhRTy0ghDypBXH+PMcb4IxXMX0UaggiN6DMuA
ApZ7FCDaUW3xGgKjfMK6U0kO8A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:12 2026 by rpki-client