
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: U9D9gxykxS463sXhn2ICb7xVL/5wwzk819rEJxlf/O0=
Subject key identifier: 27:6A:0C:63:14:93:01:32:5E:E5:E7:C9:A2:67:94:2F:5F:7E:54:21
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 107C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 1071
Signing time: Mon 22 Jun 2026 17:22:09 +0000
Manifest this update: Mon 22 Jun 2026 17:22:08 +0000
Manifest next update: Mon 29 Jun 2026 17:22:08 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: FiSILRsCNwy9WyHTIqO0W/bRk32MD6FVPOhptuJCKQI=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: cNOGWjX3tS0QYF3+Hr85nxbmOcjy7rNxMm+ayP/uy9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4220 (0x107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Validity
Not Before: Jun 22 17:22:08 2026 GMT
Not After : Jun 29 17:22:08 2026 GMT
Subject: CN=6a396f41-0db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:b4:50:51:ed:19:5c:1d:d1:f4:2d:74:03:
86:c1:d6:6a:e0:fe:47:3c:21:a9:2f:f5:b5:28:c4:
7a:a6:ab:85:9b:68:51:39:ec:ee:e1:18:98:c5:f9:
ed:07:bc:00:b3:20:98:6a:b3:e3:67:dd:f7:dd:ee:
ae:6c:32:dd:c8:2f:12:3e:b7:b1:47:cd:df:22:ec:
83:4e:7b:43:4d:9b:57:cb:87:98:fd:59:0d:6c:21:
7c:55:71:3a:f8:60:33:c2:a4:66:4b:ed:7f:45:34:
48:4f:4b:15:8a:27:26:a0:f6:1e:ff:b7:7e:24:ae:
a6:be:2c:cf:f0:a7:2b:9e:59:eb:7b:3f:1f:d3:8b:
93:d7:ea:c8:3e:a2:a7:40:27:12:2f:d9:a8:12:b6:
87:b8:50:03:54:bf:81:35:2e:9d:cd:91:57:96:64:
1d:06:04:99:e6:e3:64:81:fb:76:b4:fe:bc:89:b5:
e0:40:95:e2:cc:e3:ce:ae:2a:d1:19:d5:17:c1:a8:
96:50:f3:14:3c:44:77:7d:ab:81:05:3e:b4:5a:4b:
fb:32:00:a2:6b:d8:e9:f6:cc:fa:b1:15:05:a0:23:
f4:78:1c:c7:9c:20:06:08:b7:16:a5:32:e3:fc:91:
f7:3a:6b:48:12:bc:58:9f:df:94:67:ac:16:9b:30:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:0C:63:14:93:01:32:5E:E5:E7:C9:A2:67:94:2F:5F:7E:54:21
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:5d:70:ca:cd:d7:07:8e:da:f5:ff:e1:56:7f:ea:45:de:01:
32:fe:a8:00:22:0a:fb:60:fb:1b:c8:44:44:b4:90:e6:56:ba:
a3:0c:62:1b:be:eb:1b:d6:d0:94:37:7b:cc:74:99:c7:35:46:
75:37:23:39:a9:1a:2c:06:a4:f1:41:94:27:86:17:33:62:24:
e6:e8:28:8e:06:02:82:85:1f:ef:9d:63:69:2c:98:27:49:c3:
08:25:15:ba:d4:f9:a2:3b:1a:b8:14:67:db:0d:20:90:4c:18:
a0:88:54:a2:a5:3a:c0:58:83:6c:00:58:f5:57:24:37:ee:02:
dc:ca:3b:0f:02:90:d3:09:77:66:7f:de:70:fd:cc:6c:05:12:
06:79:5f:5b:a7:1b:0d:00:cb:5d:80:53:be:31:a6:c6:02:d8:
13:47:5a:59:88:69:b9:b5:91:76:f2:8f:d2:4c:d5:b2:d7:0d:
7c:97:3e:c4:bb:0d:f7:f9:3f:22:22:71:82:7d:03:d7:e8:94:
8a:ac:57:6e:cc:60:b0:19:d8:68:eb:bc:23:08:00:45:bf:41:
f9:b8:39:2c:b4:b1:b2:d4:91:62:10:0b:b3:00:b1:13:49:cd:
89:1c:61:f9:63:70:72:88:7c:07:42:5b:c3:83:81:ec:db:94:
ad:a5:89:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1
NkQzNDQyNTQwHhcNMjYwNjIyMTcyMjA4WhcNMjYwNjI5MTcyMjA4WjAYMRYwFAYD
VQQDEw02YTM5NmY0MS0wZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKO0UFHtGVwd0fQtdAOGwdZq4P5HPCGpL/W1KMR6pquFm2hROezu4RiYxfnt
B7wAsyCYarPjZ9333e6ubDLdyC8SPrexR83fIuyDTntDTZtXy4eY/VkNbCF8VXE6
+GAzwqRmS+1/RTRIT0sViicmoPYe/7d+JK6mvizP8Kcrnlnrez8f04uT1+rIPqKn
QCcSL9moEraHuFADVL+BNS6dzZFXlmQdBgSZ5uNkgft2tP68ibXgQJXizOPOrirR
GdUXwaiWUPMUPER3fauBBT60Wkv7MgCia9jp9sz6sRUFoCP0eBzHnCAGCLcWpTLj
/JH3OmtIErxYn9+UZ6wWmzCmswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdqDGMU
kwEyXuXnyaJnlC9fflQhMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC
QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W
c1NXbUFzZEdhNXBXMDBRbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJl1wys3XB47a9f/hVn/qRd4BMv6oACIK+2D7G8hERLSQ5la6owxiG77rG9bQ
lDd7zHSZxzVGdTcjOakaLAak8UGUJ4YXM2Ik5ugojgYCgoUf751jaSyYJ0nDCCUV
utT5ojsauBRn2w0gkEwYoIhUoqU6wFiDbABY9VckN+4C3Mo7DwKQ0wl3Zn/ecP3M
bAUSBnlfW6cbDQDLXYBTvjGmxgLYE0daWYhpubWRdvKP0kzVstcNfJc+xLsN9/k/
IiJxgn0D1+iUiqxXbsxgsBnYaOu8IwgARb9B+bg5LLSxstSRYhALswCxE0nNiRxh
+WNwcoh8B0Jbw4OB7NuUraWJow==
-----END CERTIFICATE-----
Generated at Wed Jun 24 17:44:11 2026 by rpki-client