
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier: cws6vIULhPfAmbYp5xwNwgHo6MkPkqvM1JkSU4qmPHs=
Subject key identifier: ED:D0:B4:BE:9F:A4:CA:87:94:D8:67:3F:F9:E5:61:AD:2B:61:77:1F
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 06FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number: 06E8
Signing time: Sun 26 Apr 2026 22:07:45 +0000
Manifest this update: Sun 26 Apr 2026 22:07:44 +0000
Manifest next update: Sun 03 May 2026 22:07:44 +0000
Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: AvCzFFxNOEDZo+UP64S45AhPdEAUOTkkxChgNC1FjuE=)
2: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (hash: 2s0kYzcxntnOC74EHeYBKILmLaGPsj8ZMironzxM9RM=)
3: C7C9E3B6125111F1B8BE3F1A2A3D8C67.roa (hash: XjNUxvWdrN/f8UvJCjdCzDeTUbQlad9gZAT9Co3kYbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Apr 26 22:07:44 2026 GMT
Not After : May 3 22:07:44 2026 GMT
Subject: CN=69ee8cb0-10c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:2f:1e:28:f9:e8:b6:2e:03:01:01:5c:8d:
76:41:cc:6e:a5:8a:1d:18:df:af:56:1b:54:b0:7a:
81:a0:87:1c:30:7d:0e:4a:29:4f:c7:b7:bc:30:63:
30:5d:35:ce:f1:de:ab:7c:fd:3b:50:c3:1e:4b:ae:
7f:f9:0a:59:85:c2:18:55:52:17:3d:6e:1f:b6:47:
57:c1:3b:69:fb:55:23:a3:3a:f4:1f:b3:ef:92:5f:
21:f0:f4:a7:47:a3:98:b5:32:81:03:7c:07:2c:9d:
63:8d:71:07:18:cf:b4:e1:31:13:9f:02:8a:e1:ee:
b7:7c:6b:d3:63:1a:46:13:68:ea:ed:fb:02:eb:00:
d6:10:c7:2f:46:38:34:65:3a:4c:0d:4e:ff:f0:87:
e8:d0:90:fa:f4:fb:37:06:3e:a1:55:c3:b5:2c:0a:
7b:0e:7c:c6:53:5f:62:f2:5b:cd:85:42:c8:74:41:
01:0a:c6:15:19:d7:a0:26:e0:de:04:44:7b:03:bc:
b0:f7:97:95:0e:e9:2c:17:86:2d:bc:77:b2:8d:0d:
19:1a:a6:53:7b:42:39:5d:be:e3:b4:59:98:12:df:
0b:f5:6e:32:9a:80:e2:71:09:e1:e5:ee:5b:b5:fa:
09:24:23:08:16:2a:6d:80:af:41:1c:9f:ca:d0:0d:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:B4:BE:9F:A4:CA:87:94:D8:67:3F:F9:E5:61:AD:2B:61:77:1F
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:4b:c2:e2:32:88:20:c2:c2:be:8b:56:be:e6:7f:71:de:7f:
9c:84:ec:a9:14:5d:cd:52:e7:82:d7:bf:8b:21:91:6f:99:f3:
bc:f9:a8:06:58:53:54:6d:cf:53:f5:ba:d0:a5:25:f6:90:b6:
20:84:c1:63:f7:67:fe:25:41:9d:6d:0d:b1:72:e9:b9:fa:c5:
ee:e1:bc:1e:fc:19:db:cc:27:f7:81:8a:23:cb:dc:b1:d4:7d:
f7:01:f3:b0:29:ee:a7:98:e5:01:90:4c:b1:a3:00:4e:1e:d9:
9e:f5:d5:a7:ba:23:30:b5:59:83:ab:08:1b:e9:9c:f4:75:bb:
b7:06:f5:72:b1:3f:14:25:79:e7:52:15:64:4d:bd:52:a7:c6:
71:8f:21:31:f0:96:f2:4a:db:16:68:17:17:a0:b3:af:03:35:
57:c8:02:d8:9b:b2:46:4d:3b:48:71:2a:83:97:3c:f8:f0:f2:
ff:d7:33:9d:37:f4:3c:44:af:4c:54:bf:a1:18:26:ea:8e:53:
3e:5b:8b:72:a6:42:6b:c2:db:df:38:bb:40:fb:39:59:6a:cd:
ce:56:fc:41:86:85:69:6b:73:99:ca:18:fc:f1:9f:b2:18:84:
f7:7c:3f:ff:e6:2a:ae:a5:21:ed:dd:c7:0a:dc:b3:f6:b7:e9:
37:8c:e6:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYwNDI2MjIwNzQ0WhcNMjYwNTAzMjIwNzQ0WjAYMRYwFAYD
VQQDEw02OWVlOGNiMC0xMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Q4vHij56LYuAwEBXI12QcxupYodGN+vVhtUsHqBoIccMH0OSilPx7e8MGMw
XTXO8d6rfP07UMMeS65/+QpZhcIYVVIXPW4ftkdXwTtp+1Ujozr0H7Pvkl8h8PSn
R6OYtTKBA3wHLJ1jjXEHGM+04TETnwKK4e63fGvTYxpGE2jq7fsC6wDWEMcvRjg0
ZTpMDU7/8Ifo0JD69Ps3Bj6hVcO1LAp7DnzGU19i8lvNhULIdEEBCsYVGdegJuDe
BER7A7yw95eVDuksF4YtvHeyjQ0ZGqZTe0I5Xb7jtFmYEt8L9W4ymoDicQnh5e5b
tfoJJCMIFiptgK9BHJ/K0A0YWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3QtL6f
pMqHlNhnP/nlYa0rYXcfMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4
VHhTUzBHTGJEWkdVNmZVSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhkvC4jKIIMLCvotWvuZ/cd5/nITsqRRdzVLngte/iyGRb5nzvPmoBlhTVG3P
U/W60KUl9pC2IITBY/dn/iVBnW0NsXLpufrF7uG8HvwZ28wn94GKI8vcsdR99wHz
sCnup5jlAZBMsaMATh7ZnvXVp7ojMLVZg6sIG+mc9HW7twb1crE/FCV551IVZE29
UqfGcY8hMfCW8krbFmgXF6CzrwM1V8gC2JuyRk07SHEqg5c8+PDy/9cznTf0PESv
TFS/oRgm6o5TPluLcqZCa8Lb3zi7QPs5WWrNzlb8QYaFaWtzmcoY/PGfshiE93w/
/+YqrqUh7d3HCtyz9rfpN4zmqw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:10 2026 by rpki-client