
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier: +NEYPN3PXX0Fez53RPGxTBElc93/RSHSl5N6xAvl+PQ=
Subject key identifier: 87:83:F1:91:3C:2A:D9:B1:04:BC:E8:D3:95:AB:37:78:A4:88:16:E2
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial: 1452
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number: 1443
Signing time: Tue 18 Aug 2026 17:03:48 +0000
Manifest this update: Tue 18 Aug 2026 17:03:47 +0000
Manifest next update: Tue 25 Aug 2026 17:03:47 +0000
Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: 0X84MPHwdIPSkAwQufLELO7TJ7AiMUZn/5Dn0F9YcfE=)
2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5202 (0x1452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Validity
Not Before: Aug 18 17:03:47 2026 GMT
Not After : Aug 25 17:03:47 2026 GMT
Subject: CN=6a849074-7660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:08:d7:08:f3:f5:1c:f8:c6:f8:f9:2f:57:
75:fa:6b:40:23:a2:b6:0f:2a:ea:d3:56:fc:94:17:
f6:a0:fb:4b:c7:9b:a9:24:06:dd:19:1b:7a:76:07:
13:5d:84:72:87:71:29:ba:6b:4e:c5:75:a3:b0:e2:
f0:34:00:4f:75:40:d2:a4:17:4f:6e:cd:6b:64:15:
f1:54:f9:30:61:9d:8d:e7:c7:e4:8d:af:c7:88:3d:
39:73:16:12:72:c8:c5:b9:3e:1b:20:c0:c4:10:00:
76:7b:6e:d7:c2:26:4d:93:65:21:3c:28:d5:fb:5b:
28:73:d9:db:d4:13:66:21:9f:36:62:48:bb:30:09:
42:4f:dc:5f:d8:e8:33:bd:57:e8:a4:c0:36:04:d6:
cd:58:4a:7d:92:29:19:32:22:c8:23:24:6f:92:36:
a3:29:dc:79:76:8f:79:70:c4:f6:a5:f5:9d:b9:ce:
4e:74:fd:4c:f7:b4:0d:f9:e2:db:52:29:22:2d:1e:
9a:3b:56:25:d5:54:0a:4e:85:c3:ce:1c:f6:6b:21:
e0:68:9f:55:0d:19:98:95:b6:ef:4b:eb:31:fd:69:
2e:76:e7:9e:0e:cc:d0:d1:7f:ef:85:ec:e7:e6:d8:
a3:46:98:0f:2c:72:b6:ca:8a:93:fd:02:19:39:ce:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:F1:91:3C:2A:D9:B1:04:BC:E8:D3:95:AB:37:78:A4:88:16:E2
X509v3 Authority Key Identifier:
keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:f4:25:23:89:3d:7b:1f:78:fd:dd:8e:32:51:ec:05:9d:
38:93:3e:cb:5e:76:57:2d:eb:e0:6f:b5:ed:6a:2a:51:72:75:
bd:5c:b7:05:0a:48:c0:27:fb:81:a7:e4:20:3c:7d:9a:8a:99:
15:40:42:32:68:96:b5:4b:63:8a:3d:80:f9:80:31:d4:d4:a4:
9e:1a:37:36:ac:91:63:91:a7:fa:c9:28:f8:f5:ea:8b:f0:24:
35:cf:98:0b:06:8e:1e:48:35:a7:05:16:5a:8b:d3:cf:e8:45:
b7:cd:70:b6:75:fd:57:c1:60:8a:86:c4:91:c9:6a:6c:10:be:
f0:d6:79:b0:d5:03:f0:48:9c:61:9c:ba:4d:5e:7a:bf:b9:51:
40:72:22:29:f6:2f:31:1e:5f:09:bc:2c:ce:b3:bb:88:c8:27:
7d:c8:12:1d:6a:fd:0b:bb:ef:00:79:05:f9:6b:89:00:d1:86:
2d:b8:a3:92:fa:93:0c:28:82:7f:ec:e9:74:62:89:39:1a:e2:
33:df:e7:10:08:87:6e:25:30:80:91:1e:40:4e:d4:04:e7:04:
cf:cf:6c:ed:eb:d6:b7:d2:4d:af:2f:47:b2:1e:f1:c1:f6:5e:
25:57:fd:2e:c1:15:2f:0d:22:1c:39:4b:97:4c:75:1c:ba:6d:
44:6f:38:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB
MENGQjA4MjYwHhcNMjYwODE4MTcwMzQ3WhcNMjYwODI1MTcwMzQ3WjAYMRYwFAYD
VQQDEw02YTg0OTA3NC03NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5EI1wjz9Rz4xvj5L1d1+mtAI6K2Dyrq01b8lBf2oPtLx5upJAbdGRt6dgcT
XYRyh3EpumtOxXWjsOLwNABPdUDSpBdPbs1rZBXxVPkwYZ2N58fkja/HiD05cxYS
csjFuT4bIMDEEAB2e27XwiZNk2UhPCjV+1soc9nb1BNmIZ82Yki7MAlCT9xf2Ogz
vVfopMA2BNbNWEp9kikZMiLIIyRvkjajKdx5do95cMT2pfWduc5OdP1M97QN+eLb
UikiLR6aO1Yl1VQKToXDzhz2ayHgaJ9VDRmYlbbvS+sx/WkudueeDszQ0X/vhezn
5tijRpgPLHK2yoqT/QIZOc4eUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeD8ZE8
KtmxBLzo05WrN3ikiBbiMB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx
MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MURCOC8wRDk5MzFCQUExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3
Mm00bkVrbF9iYnVnejdDQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANjX0JSOJPXsfeP3djjJR7AWdOJM+y152Vy3r4G+17WoqUXJ1vVy3BQpIwCf7
gafkIDx9moqZFUBCMmiWtUtjij2A+YAx1NSknho3NqyRY5Gn+sko+PXqi/AkNc+Y
CwaOHkg1pwUWWovTz+hFt81wtnX9V8FgiobEkclqbBC+8NZ5sNUD8EicYZy6TV56
v7lRQHIiKfYvMR5fCbwszrO7iMgnfcgSHWr9C7vvAHkF+WuJANGGLbijkvqTDCiC
f+zpdGKJORriM9/nEAiHbiUwgJEeQE7UBOcEz89s7evWt9JNry9Hsh7xwfZeJVf9
LsEVLw0iHDlLl0x1HLptRG84CQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:47 2026 by rpki-client