
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json)
Hash identifier: gJzXcqPfHa0jq7S5HN+TewfDUih4PYrjjxoe+5zHzIA=
Subject key identifier: BA:E4:B1:66:63:6F:CF:9C:96:35:A8:FB:64:42:78:86:63:94:52:EE
Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
Manifest number: 4D
Signing time: Sun 25 Oct 2026 08:46:10 +0000
Manifest this update: Sun 25 Oct 2026 08:46:10 +0000
Manifest next update: Sun 01 Nov 2026 08:46:10 +0000
Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: CZpPv2HU+IQQGFU31rPclJCIVWui9Z89NZmvYRKe/Z8=)
2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Validity
Not Before: Oct 25 08:46:10 2026 GMT
Not After : Nov 1 08:46:10 2026 GMT
Subject: CN=6addc1d2-55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:5e:42:f2:a1:bc:e4:bb:9a:32:33:2a:03:
75:43:68:f9:09:7d:62:02:41:45:56:9a:5e:75:0d:
fb:4f:9f:f5:77:99:b6:f0:f6:4e:d4:74:0a:11:28:
f8:23:fd:e4:de:dc:8c:6d:e1:8a:f8:6b:73:eb:83:
5b:67:0a:e8:9b:fe:4d:62:f3:dc:d0:29:06:04:f0:
61:a7:44:6c:ba:ca:97:7b:e3:ac:96:6e:1d:75:47:
de:d7:e9:f7:77:ab:e3:f6:d9:51:ad:37:ab:be:35:
26:88:47:4c:d1:5a:32:6f:57:03:35:49:5e:d5:62:
17:a7:4f:48:c7:28:73:27:04:f0:0a:cd:71:2b:fe:
0b:55:81:f4:51:1d:90:71:da:d3:f0:f1:02:a5:81:
97:46:4f:4e:c9:37:28:66:ec:ce:b4:05:1f:3c:57:
13:ac:84:0c:45:b7:ae:8a:74:4c:3f:e7:7f:42:1e:
0d:a0:e4:42:51:86:11:76:66:6f:c5:3f:3d:5f:e7:
1c:41:68:28:30:c2:d9:27:0a:47:68:5c:1d:5b:d2:
c1:96:48:33:45:0e:2c:99:cc:01:f6:84:7b:85:40:
bf:8f:35:b4:22:b4:97:6e:48:d1:a4:3c:1c:8f:da:
2d:33:26:00:7b:9e:4a:cf:ff:43:3b:e6:cd:f7:6a:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:B1:66:63:6F:CF:9C:96:35:A8:FB:64:42:78:86:63:94:52:EE
X509v3 Authority Key Identifier:
keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:af:75:03:4c:0b:fd:f6:ba:7a:0d:ab:d7:59:39:6e:7a:
2f:81:34:5a:eb:af:3f:49:46:ca:d2:4c:b8:c5:98:77:74:c7:
ab:3e:4a:37:60:90:d2:bf:f0:0c:44:3b:4a:1b:a9:f9:6f:2e:
78:77:97:a0:8c:da:e4:00:33:5d:16:4f:b7:d7:7b:b2:78:48:
f7:6a:7c:87:84:3d:fa:a5:98:75:09:52:c9:1b:28:cf:c4:cf:
63:78:f7:d1:74:91:86:9a:7b:e2:ee:40:19:c3:90:67:05:05:
9d:3f:8e:d6:73:3c:39:64:6f:cd:f1:03:6b:d2:ea:69:31:99:
b0:0d:33:af:87:96:4e:ac:09:49:ed:c3:2b:b3:ca:d3:0c:76:
d3:1c:78:78:8d:38:2b:d2:d3:1f:fe:7a:d4:5e:b7:0a:59:80:
64:6a:d3:ff:11:be:65:b1:72:21:6a:02:47:da:6f:88:77:77:
80:6c:95:41:16:89:7b:36:1e:c5:ad:5d:48:cb:a9:93:f4:91:
f8:41:df:69:aa:e2:cf:c9:2c:88:1d:15:80:29:12:6f:1f:15:
de:45:ce:2e:bc:3e:b6:6d:37:b3:93:9c:2d:c7:8b:8f:93:67:
95:6d:63:52:25:a2:83:b7:b4:e3:9a:0b:9b:ab:df:28:9f:d4:
0c:57:db:7b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MzZGMjExMC8GA1UEBRMoQTA5OUQwMkNEMEI3Rjk2ODg5NjQ2NTYzOUYxQUYwNkIz
M0U0NkFBMjAeFw0yNjEwMjUwODQ2MTBaFw0yNjExMDEwODQ2MTBaMBgxFjAUBgNV
BAMTDTZhZGRjMWQyLTU1ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtn15C8qG85LuaMjMqA3VDaPkJfWICQUVWml51DftPn/V3mbbw9k7UdAoRKPgj
/eTe3Ixt4Yr4a3Prg1tnCuib/k1i89zQKQYE8GGnRGy6ypd746yWbh11R97X6fd3
q+P22VGtN6u+NSaIR0zRWjJvVwM1SV7VYhenT0jHKHMnBPAKzXEr/gtVgfRRHZBx
2tPw8QKlgZdGT07JNyhm7M60BR88VxOshAxFt66KdEw/539CHg2g5EJRhhF2Zm/F
Pz1f5xxBaCgwwtknCkdoXB1b0sGWSDNFDiyZzAH2hHuFQL+PNbQitJduSNGkPByP
2i0zJgB7nkrP/0M75s33alOJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuuSxZmNv
z5yWNaj7ZEJ4hmOUUu4wHwYDVR0jBBgwFoAUoJnQLNC3+WiJZGVjnxrwazPkaqIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNkYyLzVFMEY3QjNDNjNC
NjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdpSlpHVmpueHJ3YXpQa2Fx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb0puUUxOQzMtV2lKWkdWam54cndhelBrYXFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
NkYyLzVFMEY3QjNDNjNCNjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdp
SlpHVmpueHJ3YXpQa2FxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAK4q91A0wL/fa6eg2r11k5bnovgTRa668/SUbK0ky4xZh3dMerPko3YJDSv/AM
RDtKG6n5by54d5egjNrkADNdFk+313uyeEj3anyHhD36pZh1CVLJGyjPxM9jePfR
dJGGmnvi7kAZw5BnBQWdP47Wczw5ZG/N8QNr0uppMZmwDTOvh5ZOrAlJ7cMrs8rT
DHbTHHh4jTgr0tMf/nrUXrcKWYBkatP/Eb5lsXIhagJH2m+Id3eAbJVBFol7Nh7F
rV1Iy6mT9JH4Qd9pquLPySyIHRWAKRJvHxXeRc4uvD62bTezk5wtx4uPk2eVbWNS
JaKDt7Tjmgubq98on9QMV9t7
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:07:09 2026 by rpki-client