
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier: 8bwKZVk4FQjG+5gvS1Id3UFh5obV7dD8sk+38IH37Mg=
Subject key identifier: 58:E7:C1:72:77:2C:ED:06:AA:7E:19:32:1F:03:CD:E7:22:A4:4D:01
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number: 0120
Signing time: Fri 17 Jul 2026 07:02:36 +0000
Manifest this update: Fri 17 Jul 2026 07:02:35 +0000
Manifest next update: Fri 24 Jul 2026 07:02:35 +0000
Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: 7qV0c3rVmfLmiYUoQpENTazx4NuqzwvUfrv4oVzFPZg=)
2: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
3: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Validity
Not Before: Jul 17 07:02:35 2026 GMT
Not After : Jul 24 07:02:35 2026 GMT
Subject: CN=6a59d38c-7f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:51:7f:a1:6e:49:dc:94:62:07:d0:cd:1f:
5e:33:7a:9a:de:20:b7:0f:44:7d:02:50:be:81:8f:
ad:d4:3c:84:aa:96:45:d8:82:6c:63:d0:bf:66:9f:
2c:aa:54:56:b6:cf:cf:40:11:25:85:dc:8c:c9:f8:
e1:7a:4a:39:4a:c3:08:04:7a:9a:70:70:8c:b6:e6:
7d:40:d6:7a:f1:a9:2e:1a:c7:46:c3:a1:23:ec:8a:
78:4b:5f:20:c2:3b:45:6e:01:f5:d6:26:5f:44:71:
db:a4:02:27:e1:05:fc:98:63:42:b2:8b:05:0a:7e:
76:64:fe:4c:95:f8:15:60:4b:56:6f:db:3e:73:77:
73:5d:03:30:9c:37:94:72:88:d1:75:a1:2c:4b:f4:
05:47:87:d3:c4:43:99:0e:ae:77:62:0b:a6:d6:24:
93:9d:85:b0:63:fe:c4:91:9a:a5:e3:c0:04:8c:36:
64:6b:24:1a:91:ac:c9:72:82:74:c5:63:07:51:b4:
24:c3:64:a7:8f:01:00:74:62:9f:c6:b8:9b:ff:7e:
b6:8f:8c:59:09:4e:9c:18:87:be:58:a0:42:13:67:
67:be:12:9d:15:3d:30:35:41:e0:81:ab:fe:66:4f:
7c:2a:37:de:44:37:70:69:83:8b:31:3a:b4:1c:b1:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:C1:72:77:2C:ED:06:AA:7E:19:32:1F:03:CD:E7:22:A4:4D:01
X509v3 Authority Key Identifier:
keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:0e:94:07:e8:d5:58:1a:65:fe:0d:49:f4:b3:e5:e7:51:
68:30:18:08:99:04:45:e9:7b:92:9c:2b:56:ee:0c:a1:5a:a8:
d7:7d:22:24:00:d2:8b:c7:ab:82:7f:73:ba:3b:e7:aa:44:41:
a5:47:55:cf:03:3a:e8:c1:4c:99:32:cd:af:d7:58:94:99:d4:
70:15:bb:44:3a:84:54:2b:b3:74:2a:ca:19:b9:35:95:ec:ce:
32:a6:cc:f5:a6:f2:da:ae:b8:7f:ea:b9:38:ef:9c:a9:42:64:
ba:6c:ce:56:cb:a9:a5:0f:7d:58:a2:e0:8a:07:c6:a7:c1:33:
16:20:54:ea:88:d6:44:ea:ee:78:b6:0d:e9:3c:64:dc:0e:22:
e5:62:0a:4e:45:b6:30:11:3e:03:15:16:cc:bb:6a:34:4a:7c:
d7:a1:e3:16:d5:1d:9e:c4:a4:a1:18:32:cf:51:2e:53:bf:c4:
e2:97:31:1f:4f:94:e2:79:5a:99:67:46:3e:3a:d4:10:51:59:
31:eb:bf:20:dd:2f:d2:9d:0a:08:a6:0c:57:57:95:69:40:9c:
a6:b5:7a:00:b1:1c:97:c5:09:04:98:a6:23:81:66:c6:81:5e:
98:ab:4e:c3:97:33:61:42:a8:dd:48:60:08:3c:bd:b0:1a:69:
05:26:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:34 2026 by rpki-client