
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier: CZVWOKGuF/xJ3QkbRE4imD60k0/1HGe/ELY7bE3/m34=
Subject key identifier: 90:8C:C1:FB:7D:AE:4A:DF:B1:BC:CC:7A:E8:87:9E:9C:59:FC:1D:8E
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial: 1360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number: 133F
Signing time: Wed 28 Oct 2026 17:03:09 +0000
Manifest this update: Wed 28 Oct 2026 17:03:09 +0000
Manifest next update: Wed 04 Nov 2026 17:03:09 +0000
Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: rBRXqvzWJMt0wlfPN4Pm5tf3CctdcRax6629ZXEUDxI=)
2: FE5CF51C86FF11F194514C90ABEE528E.roa (hash: 9vytRQ8Wmcr6ySPVj73jgnl3+yKt+CUe1VNPGqjQAdE=)
3: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: J9KRgMea1vbWK73wJE25NPnzZ9tX3mrlarUa6blw3yM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 17:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4960 (0x1360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Validity
Not Before: Oct 28 17:03:09 2026 GMT
Not After : Nov 4 17:03:09 2026 GMT
Subject: CN=6ae22acd-bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:52:11:10:52:1e:6e:74:49:de:4e:52:0a:5a:
38:5c:91:40:ee:d3:60:22:38:cb:bf:d0:cd:bb:d0:
cb:0b:20:8b:52:25:f8:e6:01:e1:3b:70:8f:37:bc:
aa:72:c1:35:99:93:c6:3e:88:0c:93:31:59:8f:db:
44:7f:c2:fb:62:aa:11:e4:f8:e3:f2:f9:74:2b:a5:
17:ab:20:18:16:d8:ed:f8:31:85:39:0e:26:9e:43:
8b:61:b8:e9:67:24:6b:3d:69:d5:2b:23:1c:08:4c:
49:ce:ee:26:44:3a:3b:07:af:a4:4d:cb:7a:3e:a6:
9b:28:5b:19:86:26:0c:73:dc:2d:46:1b:34:da:fd:
5f:f6:06:66:f1:32:e1:34:53:0d:31:3e:41:0e:14:
ba:6b:fc:c6:ab:9c:9c:16:1b:04:63:4b:14:f4:4a:
25:0c:2a:37:9d:d0:68:da:19:7f:5c:05:4a:ae:ac:
17:a8:f0:9d:88:b8:6e:e7:5e:fe:2a:71:95:73:12:
ae:19:f1:db:68:06:a8:36:97:c6:74:d2:98:91:6f:
83:3e:c5:c5:b3:87:c5:d8:07:c6:04:34:aa:0b:e8:
dc:9a:1f:63:7b:b6:02:70:a1:0d:71:60:b3:22:51:
2b:0a:7a:ee:83:e6:30:ba:fd:85:c3:a8:01:95:3c:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:C1:FB:7D:AE:4A:DF:B1:BC:CC:7A:E8:87:9E:9C:59:FC:1D:8E
X509v3 Authority Key Identifier:
keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:38:6f:3c:c9:3a:12:c9:f7:c4:2a:d4:ce:a0:01:c5:d9:7e:
a4:85:66:90:1e:15:66:a4:da:0e:dd:22:72:a0:3a:b9:2a:15:
10:24:aa:98:49:dd:91:3f:24:4b:5d:5c:49:b2:4a:ba:b3:90:
42:9d:aa:17:79:b9:3a:13:13:63:67:41:34:19:64:7b:12:42:
97:fa:7d:40:f2:ff:d9:cf:9f:bf:9a:15:6a:33:62:51:77:09:
74:84:24:07:36:47:a9:69:f9:a1:4d:b6:4c:e2:20:aa:a9:61:
43:25:87:a6:dc:2b:dc:65:da:ec:27:32:1e:b6:71:7b:e5:95:
e4:a2:0c:89:7b:07:c3:2d:c1:16:52:d8:37:d1:49:c1:fd:93:
c2:55:1d:21:8c:a2:4f:7f:3f:da:dd:86:f0:b7:eb:11:f9:d8:
4f:2c:7a:eb:93:01:15:6d:35:86:9b:83:48:ba:11:c3:aa:48:
08:10:98:8b:b1:6c:9e:83:61:33:f8:71:b4:08:a3:da:b1:95:
38:00:0e:53:05:0c:8c:c6:b5:3d:ad:02:95:25:f8:0b:fc:27:
83:70:74:8b:c0:0d:5f:03:79:e2:9e:14:a4:d8:cf:6e:79:dd:
fc:7f:90:c4:43:27:a7:54:c0:32:df:2f:78:e0:79:b5:94:d5:
02:4c:58:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy
M0ZBRUVBMDgwHhcNMjYxMDI4MTcwMzA5WhcNMjYxMTA0MTcwMzA5WjAYMRYwFAYD
VQQDEw02YWUyMmFjZC1iZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/lIREFIebnRJ3k5SClo4XJFA7tNgIjjLv9DNu9DLCyCLUiX45gHhO3CPN7yq
csE1mZPGPogMkzFZj9tEf8L7YqoR5Pjj8vl0K6UXqyAYFtjt+DGFOQ4mnkOLYbjp
ZyRrPWnVKyMcCExJzu4mRDo7B6+kTct6PqabKFsZhiYMc9wtRhs02v1f9gZm8TLh
NFMNMT5BDhS6a/zGq5ycFhsEY0sU9EolDCo3ndBo2hl/XAVKrqwXqPCdiLhu517+
KnGVcxKuGfHbaAaoNpfGdNKYkW+DPsXFs4fF2AfGBDSqC+jcmh9je7YCcKENcWCz
IlErCnrug+Ywuv2Fw6gBlTy4JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCMwft9
rkrfsbzMeuiHnpxZ/B2OMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE
QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla
SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAejhvPMk6Esn3xCrUzqABxdl+pIVmkB4VZqTaDt0icqA6uSoVECSqmEndkT8k
S11cSbJKurOQQp2qF3m5OhMTY2dBNBlkexJCl/p9QPL/2c+fv5oVajNiUXcJdIQk
BzZHqWn5oU22TOIgqqlhQyWHptwr3GXa7CcyHrZxe+WV5KIMiXsHwy3BFlLYN9FJ
wf2TwlUdIYyiT38/2t2G8LfrEfnYTyx665MBFW01hpuDSLoRw6pICBCYi7FsnoNh
M/hxtAij2rGVOAAOUwUMjMa1Pa0ClSX4C/wng3B0i8ANXwN54p4UpNjPbnnd/H+Q
xEMnp1TAMt8veOB5tZTVAkxYLg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:51:30 2026 by rpki-client