
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: VuNdfLHDsM5VGpOdS1x+BaWnbKmETq8ZsV4G4GhSRo8=
Subject key identifier: 15:07:7C:B6:44:C6:2D:76:19:B6:BF:21:32:2C:FD:07:92:99:29:F5
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 10D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 10B0
Signing time: Tue 22 Sep 2026 17:16:28 +0000
Manifest this update: Tue 22 Sep 2026 17:16:28 +0000
Manifest next update: Tue 29 Sep 2026 17:16:28 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: 6NBwEU7V7LSLriarsQBxvQFsSKsge3vFHyOWuHyo0RM=)
2: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=)
3: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=)
4: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=)
5: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=)
6: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=)
7: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4305 (0x10d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Sep 22 17:16:28 2026 GMT
Not After : Sep 29 17:16:28 2026 GMT
Subject: CN=6ab2b7ec-3b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:92:0b:a4:a2:8c:44:11:77:5b:9f:75:d2:
99:c4:8c:9c:1a:21:51:61:d9:02:a5:8e:2f:94:b2:
dc:ef:74:33:bc:3b:94:10:70:98:5e:eb:d5:cd:de:
0b:99:bc:93:1f:20:19:8e:ff:5d:86:6d:af:8a:d6:
4c:1c:60:67:4e:94:42:18:9d:ee:50:20:56:14:da:
51:79:97:d3:cf:53:5f:c9:65:35:2c:98:f2:f8:e8:
f0:61:82:47:cb:1b:c2:cb:db:6f:05:77:13:10:82:
ab:b2:60:50:b8:b4:47:f6:4c:fa:ab:a5:7a:af:9f:
84:fa:f9:f4:f5:65:34:70:e3:aa:af:c1:92:1d:e5:
88:de:2b:6f:90:e8:d3:5e:9e:78:47:b5:f4:4c:3e:
8d:6b:36:1c:3b:7f:ed:1a:df:5c:ac:52:dc:77:06:
c8:26:25:ab:dd:52:2c:29:a1:9d:73:51:fd:a4:b8:
f7:74:88:e1:66:6f:7d:92:57:5b:57:6b:64:97:cd:
ba:8e:1a:96:2d:51:ba:19:e4:5f:53:97:d7:89:d7:
61:2f:de:73:b8:6a:27:05:d4:22:7d:ad:00:d2:61:
be:db:6a:06:72:3d:1b:f6:88:42:1e:99:7d:1d:72:
0e:f1:a5:dd:bb:af:24:eb:98:ca:da:dc:71:2c:95:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:7C:B6:44:C6:2D:76:19:B6:BF:21:32:2C:FD:07:92:99:29:F5
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:8f:ac:07:88:5d:21:98:e0:a8:e1:a8:8c:4f:3b:ed:e4:
24:07:eb:31:97:a9:de:15:c8:c3:ef:15:12:48:8c:4d:0e:05:
b3:56:eb:ce:6b:70:de:75:53:9e:c5:62:83:dc:dc:69:cf:66:
af:e1:ec:99:06:36:81:11:19:a6:e8:0c:8e:03:6e:0f:16:37:
af:ba:2c:d6:98:ee:95:07:4c:bb:a2:d3:50:d1:ad:f1:49:71:
b3:0e:77:60:8f:c8:16:2c:35:c0:6d:12:50:88:a9:a4:6f:47:
50:aa:58:44:06:de:44:73:be:5d:c9:3e:8f:a9:c7:7e:71:4d:
e2:a1:a2:04:66:13:32:8d:cb:66:27:87:b9:b3:9a:31:eb:a8:
4a:9c:22:91:b2:da:41:b3:e6:a3:b0:0b:cf:0c:a7:28:58:d0:
6d:04:e7:e0:fb:af:c4:bd:a2:4d:57:93:cf:55:93:32:a2:8a:
c4:15:85:2d:54:07:63:19:fa:ee:5b:6b:82:b2:a2:a4:f9:cd:
1d:08:cc:bb:cc:35:14:c5:8e:30:ab:3a:3e:55:df:85:39:28:
a8:ad:61:98:8b:64:74:a6:33:f7:5e:91:fb:9a:b5:76:b1:64:
e8:d8:eb:d2:a1:b9:a2:56:42:0b:e7:0b:a5:75:75:92:81:96:
ee:3f:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:26 2026 by rpki-client