
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: uRrOMWTcIwJ+pcUmM3Yu+EzQ+qy4ZgqpS/2ZXC4hJaM=
Subject key identifier: 3A:AF:6B:12:E8:C7:0A:D5:80:6D:E8:61:09:72:F9:4C:E6:47:EA:FE
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 107F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 1065
Signing time: Wed 06 May 2026 17:21:39 +0000
Manifest this update: Wed 06 May 2026 17:21:38 +0000
Manifest next update: Wed 13 May 2026 17:21:38 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: LIJ/bwE+l68ZrEyohOWfuZrKUELzA59WmoKr7YvXB3c=)
2: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: 7k/0PH5nSqAO2g0oYdL/sS5gQW9gOR4413PNtJehi7c=)
3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: aubLihlPiRMZcAing3eyikSdQeQcGYLWa8aEgV6rMbw=)
4: B66836E029FD11F1B53E620AA6833773.roa (hash: I9T+NepjsQPv+xzplAWCLToIoKqM32oTOa1Q+Tf8pRI=)
5: 24528B3C076811F1A996F976023D8C67.roa (hash: xScZjBZZvVOj75CzK0I4g7RaS0lDSWrcyuO5cQw8+S4=)
6: 23D70458076811F1A996F976023D8C67.roa (hash: P/jKVKxpnPS5oM0vxp1cgktFei7qJGJt+hIa7BJlhbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4223 (0x107f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: May 6 17:21:38 2026 GMT
Not After : May 13 17:21:38 2026 GMT
Subject: CN=69fb78a3-5b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:24:6b:8c:8f:b6:99:93:ee:8f:eb:85:fc:
9b:be:09:5b:98:cf:47:02:d9:a0:f9:c0:5c:d2:8c:
8a:17:dd:cf:a2:36:c0:67:01:75:f2:31:98:74:89:
9f:89:ba:f2:cd:d9:f3:02:87:db:09:28:f9:8e:78:
f2:1f:bb:43:b5:b5:d3:9d:20:22:f8:5a:8b:30:07:
f2:9c:40:38:5d:cf:8a:b6:47:03:c0:7d:83:c0:ae:
6a:3c:66:d2:67:8b:6c:50:f0:40:de:19:a2:dd:73:
cb:46:3f:4c:98:c6:bd:01:5a:06:f5:c6:95:99:f3:
be:ed:bb:78:1e:e7:d7:3a:25:3a:74:0c:29:48:f2:
17:0b:91:a6:7c:d0:d6:93:74:65:29:19:24:40:c0:
d0:be:23:b0:f7:4b:c7:4c:d2:3c:66:b2:a4:39:98:
65:e7:62:65:0f:48:a0:b0:a6:25:ad:53:5f:8b:e9:
fa:f8:48:41:af:c8:80:d4:8b:07:30:49:1c:17:72:
dd:cb:71:4d:94:6f:1e:3e:d5:da:52:89:c8:c3:97:
60:38:96:58:be:b7:02:b3:1f:5e:0a:b8:77:15:5d:
a2:57:b2:af:50:71:2a:6b:3e:59:23:be:09:cc:39:
5d:93:3b:e3:31:06:9b:89:ab:12:82:bd:33:7e:9f:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:6B:12:E8:C7:0A:D5:80:6D:E8:61:09:72:F9:4C:E6:47:EA:FE
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:05:f9:aa:2f:7a:20:e3:4f:2f:3c:18:c9:a6:c7:ec:bd:a6:
f5:50:af:f9:8c:7b:90:d1:74:1e:95:ff:7f:8b:b6:d5:2d:32:
ca:a7:dd:93:86:67:34:90:f9:1d:e7:38:60:ae:a4:4d:58:6b:
2b:5a:6c:0d:29:88:84:b7:14:17:22:b3:68:f0:b3:2f:4f:da:
39:b1:1c:fb:a2:3e:35:8a:09:28:03:09:0b:e6:20:40:6e:bd:
00:87:63:c7:4d:35:5e:8e:f6:ae:d0:db:8b:6c:3a:7b:7d:9c:
8e:40:77:2f:8c:3b:d5:5e:0a:c2:53:3b:ee:a5:17:44:ec:ae:
6b:57:bf:10:cc:32:14:e9:56:a2:bb:02:fb:a7:09:51:73:c6:
34:a3:95:4b:bd:67:7b:a4:76:2c:19:12:f6:fd:0c:01:07:23:
8a:9a:4d:e1:ec:28:6d:c8:90:34:45:7f:c1:9c:7a:13:d7:3c:
93:b9:bf:ba:36:9b:f9:56:fb:c0:d3:d4:11:17:b5:79:38:00:
63:4f:41:aa:88:ab:eb:e3:97:36:70:a7:43:6d:fd:80:a9:53:
24:75:2f:bf:ad:bc:f5:ed:41:25:bc:82:ad:48:4f:3f:82:66:
91:de:eb:61:34:34:26:b0:00:fb:ce:7c:df:67:f3:e1:5a:d9:
7f:f5:d3:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy
Q0Y3OTI5NEQwHhcNMjYwNTA2MTcyMTM4WhcNMjYwNTEzMTcyMTM4WjAYMRYwFAYD
VQQDEw02OWZiNzhhMy01YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0iIka4yPtpmT7o/rhfybvglbmM9HAtmg+cBc0oyKF93PojbAZwF18jGYdImf
ibryzdnzAofbCSj5jnjyH7tDtbXTnSAi+FqLMAfynEA4Xc+KtkcDwH2DwK5qPGbS
Z4tsUPBA3hmi3XPLRj9MmMa9AVoG9caVmfO+7bt4HufXOiU6dAwpSPIXC5GmfNDW
k3RlKRkkQMDQviOw90vHTNI8ZrKkOZhl52JlD0igsKYlrVNfi+n6+EhBr8iA1IsH
MEkcF3Ldy3FNlG8ePtXaUonIw5dgOJZYvrcCsx9eCrh3FV2iV7KvUHEqaz5ZI74J
zDldkzvjMQabiasSgr0zfp9b3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqvaxLo
xwrVgG3oYQly+UzmR+r+MB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC
QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4
ZlpObFNLTWlPTGdzOTVLVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKQX5qi96IONPLzwYyabH7L2m9VCv+Yx7kNF0HpX/f4u21S0yyqfdk4ZnNJD5
Hec4YK6kTVhrK1psDSmIhLcUFyKzaPCzL0/aObEc+6I+NYoJKAMJC+YgQG69AIdj
x001Xo72rtDbi2w6e32cjkB3L4w71V4KwlM77qUXROyua1e/EMwyFOlWorsC+6cJ
UXPGNKOVS71ne6R2LBkS9v0MAQcjippN4ewobciQNEV/wZx6E9c8k7m/ujab+Vb7
wNPUERe1eTgAY09Bqoir6+OXNnCnQ239gKlTJHUvv6289e1BJbyCrUhPP4Jmkd7r
YTQ0JrAA+85832fz4VrZf/XTWA==
-----END CERTIFICATE-----
Generated at Thu May 7 18:43:42 2026 by rpki-client