
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: JsMn+RMPMzUzHuUXRlS6QFJRfxOKreGWeZf1x5trWN0=
Subject key identifier: 7E:56:55:69:A5:80:C7:53:3F:F9:64:AA:CD:49:80:FC:CD:14:73:9B
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: F4
Signing time: Thu 03 Sep 2026 06:46:30 +0000
Manifest this update: Thu 03 Sep 2026 06:46:30 +0000
Manifest next update: Thu 10 Sep 2026 06:46:30 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: /PwCj+83zA69TR3ql0wZE2Lzs47yMbCaw6U6YmEUquc=)
2: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=)
3: A760CBA891D611F1A1097B9E5111F970.roa (hash: rVJa4ebXuFql7e5EjczJk/uiGqznYyPnvPEFXZFvTA4=)
4: 5792E7089C8211F1BE3258805211F970.roa (hash: SksxWtWEgcLENurVHTkG2do91ByIFkLP750du3iMIuM=)
5: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=)
6: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=)
7: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=)
8: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Sep 3 06:46:30 2026 GMT
Not After : Sep 10 06:46:30 2026 GMT
Subject: CN=6a9917c6-af54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:cd:be:4a:3e:ea:4e:e8:58:cf:4b:27:11:
ff:07:72:94:3e:30:43:79:20:30:bc:cd:ed:bd:0d:
43:a9:67:40:74:d1:26:57:24:71:0c:2f:e7:cb:7a:
f1:cd:de:8a:38:bc:00:f0:c3:13:d5:e8:20:af:c0:
bc:51:b3:e1:d0:1e:ac:05:f4:c2:5a:39:75:f1:e9:
98:89:5b:8d:a6:b4:7b:f8:e8:ed:e0:fa:99:54:e5:
29:ac:8a:db:ed:fc:71:8a:eb:6c:44:0b:04:dc:01:
87:4a:a9:e8:e4:27:80:ea:d3:a4:f0:90:e0:92:e0:
eb:de:07:71:e1:41:4a:46:50:5e:96:e3:41:f1:7a:
5a:0d:da:36:57:b3:a9:4b:f3:97:b3:77:ce:90:68:
56:84:ba:4e:f7:e4:4b:b1:24:bc:98:23:63:9b:d2:
8a:74:06:70:a7:28:8b:b9:1c:02:8b:61:d1:15:58:
cb:33:59:85:f8:a3:71:4c:e0:b4:0e:14:88:16:ae:
fd:70:59:c3:17:95:0c:69:11:71:05:70:32:df:aa:
ca:bd:fa:32:cf:1b:18:b0:60:a9:62:49:cf:b9:9e:
b5:20:4a:9f:66:79:85:9e:47:42:e3:e8:66:8f:5a:
1e:58:1f:72:cd:5e:03:cf:b8:10:82:a7:22:d9:e4:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:55:69:A5:80:C7:53:3F:F9:64:AA:CD:49:80:FC:CD:14:73:9B
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:40:0d:23:06:56:a9:ff:28:5a:2a:ac:0b:1a:a7:62:af:
8f:df:07:a6:d6:b2:7f:9e:e9:e3:d4:63:49:36:e2:cb:de:62:
80:5a:14:ac:a1:f3:cb:b7:42:46:29:9f:55:1f:aa:91:8b:7a:
13:bd:ec:8b:8b:35:8e:15:38:1e:6e:f4:97:a1:f2:0d:77:e9:
9c:c8:65:3d:e1:ac:cf:30:3e:3c:af:49:02:75:61:75:79:6a:
e7:7c:0d:02:8d:25:73:f4:1f:4b:05:1b:d4:b8:69:78:c2:de:
15:bc:e2:25:ac:48:ef:8e:ee:f2:5d:f9:91:c0:46:d7:68:e6:
a5:38:d8:2a:1c:bf:ea:54:76:e6:91:34:33:3a:64:75:c0:5e:
41:d9:fa:d1:37:c6:71:29:ba:fa:6d:f6:f7:cb:cd:4a:b3:c4:
d0:80:96:36:e8:d7:e3:08:3d:5b:cb:42:ff:b8:54:8b:0a:63:
17:2f:b5:4e:ba:76:1c:2c:0a:2d:97:b7:8f:92:19:a1:cb:70:
d0:74:84:a0:c0:b6:00:9e:a5:3f:1f:d1:99:d2:02:f2:59:34:
21:57:f6:3d:62:c3:72:7c:c0:b4:ec:22:56:0c:ac:88:5e:f9:
22:2c:b9:84:fb:92:9a:5e:95:3a:9b:ee:73:4c:6a:2f:67:ee:
14:37:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:53 2026 by rpki-client