
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier: 6tbCIJPRIayAhGk4yUp6LpnKPpcMSX+et4EMK3mCqKE=
Subject key identifier: 97:F3:65:AF:66:54:DB:F3:CF:88:15:A4:47:8D:AA:C8:F0:3E:CD:B1
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number: 01E5
Signing time: Mon 05 Oct 2026 03:51:14 +0000
Manifest this update: Mon 05 Oct 2026 03:51:14 +0000
Manifest next update: Mon 12 Oct 2026 03:51:14 +0000
Files and hashes: 1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: w8BCIwYbzRf+uf4Ja9qqSZmAv/t3VSPJs7ehlo9FMrQ=)
2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Validity
Not Before: Oct 5 03:51:14 2026 GMT
Not After : Oct 12 03:51:14 2026 GMT
Subject: CN=6ac31eb2-12a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:b3:2c:4c:13:2e:86:a8:c9:33:17:b8:cb:
1d:c1:f5:ad:b1:50:94:84:ce:bf:c8:23:35:5f:5f:
62:fa:32:c3:a4:95:aa:b9:b6:0a:1e:a7:ce:42:18:
fd:ca:30:ab:01:ec:01:57:46:18:7b:ea:b2:45:e0:
9c:0b:3a:44:5e:68:a8:b8:48:bc:c5:59:c8:92:00:
d4:6c:d5:ea:e0:2e:74:9f:6d:55:4a:67:75:80:38:
a4:8f:10:4b:52:ed:a0:92:ec:d7:3e:c9:ec:0c:ff:
62:80:c8:1e:54:be:24:e0:5c:f0:2b:7e:38:05:99:
51:32:78:3c:de:b7:47:bd:61:06:ef:e3:b9:1d:cd:
eb:26:f6:47:5c:1f:3b:34:d1:8b:25:4a:f2:52:9c:
91:e8:fa:d7:7e:69:7e:16:bf:30:1b:e8:e3:01:a8:
fb:eb:02:f5:f2:12:f2:79:e9:08:96:2f:3e:8a:b7:
26:89:42:5a:95:fb:cf:bb:f8:25:26:6e:03:30:a2:
c7:4b:9f:33:d9:c5:8a:eb:93:36:0d:1f:4e:ab:20:
6a:ba:7b:e5:e6:17:48:15:24:93:0a:ed:a6:3e:d9:
57:cf:51:63:50:ed:31:91:61:5f:90:a0:eb:74:93:
b9:6f:94:57:dc:9a:bb:20:3f:3f:e7:11:60:8e:6d:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:65:AF:66:54:DB:F3:CF:88:15:A4:47:8D:AA:C8:F0:3E:CD:B1
X509v3 Authority Key Identifier:
keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:63:41:dd:66:a1:57:e6:06:ce:b7:a6:99:91:41:ee:ee:5b:
aa:0d:95:1b:f3:2e:a6:4c:04:82:8a:67:85:2d:bf:10:68:a9:
40:44:c2:ac:ea:67:a9:b4:81:5c:26:82:c2:e3:df:44:b8:c7:
eb:24:d8:6d:17:cf:18:6b:e7:7c:96:a7:8f:98:64:01:7c:f8:
51:50:58:80:c5:d4:5e:6c:a2:d9:57:f9:70:2f:58:44:64:2e:
41:81:91:86:2b:f5:df:3c:53:95:cb:f6:c2:86:32:c6:7d:1a:
d5:fe:99:7c:23:67:89:20:c0:52:7c:15:83:46:e4:03:19:cc:
48:b8:e8:e0:10:09:39:2c:0a:46:08:3d:3b:9b:39:ad:e8:a6:
b2:1d:80:06:35:98:7c:67:36:f0:ae:4b:07:81:12:9c:04:bc:
85:9d:59:fd:3d:0b:70:27:18:05:3e:31:60:e9:2a:cf:49:28:
55:db:aa:2c:4c:e8:5d:e3:a6:91:00:9b:28:be:a6:49:a9:71:
d9:55:80:05:65:e3:77:2e:22:14:0d:ad:5d:c1:e2:a1:e0:18:
5e:95:92:23:50:30:a0:65:36:4a:b8:c4:dc:49:ed:df:28:23:
92:de:f2:e4:f0:fa:50:39:e1:14:2e:03:aa:41:a8:6c:af:81:
77:39:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:26:22 2026 by rpki-client