
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json)
Hash identifier: B2G/ECARvNLWf8NRDdil7/79d0m9jm9iJM0ASmOfYm0=
Subject key identifier: 3E:FB:2E:61:9B:D2:DE:94:3D:A4:AB:92:D7:AB:D3:5F:71:E4:DD:EA
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial: 0B08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
Manifest number: 0AFB
Signing time: Thu 16 Jul 2026 19:35:07 +0000
Manifest this update: Thu 16 Jul 2026 19:35:07 +0000
Manifest next update: Thu 23 Jul 2026 19:35:07 +0000
Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: TGJr6IOtu1q1xZjFwdqIZQ5SVJXwVjfR4SU7nj8WYlw=)
2: 62B22A709D2511F092B08685C4F9AE02.roa (hash: DbJt5uAKex9huMofhvsxlPhtfALGiwZmq+7JtduRU3g=)
3: 631E45669D2511F092B08685C4F9AE02.roa (hash: oE0udGN+SutLxt/AfcTk4Go1StJ+DmNSlYRBs9ZP8J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 19:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Validity
Not Before: Jul 16 19:35:07 2026 GMT
Not After : Jul 23 19:35:07 2026 GMT
Subject: CN=6a59326b-ef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:54:6b:2c:01:1f:b7:bd:96:06:83:11:d4:
b6:bc:bb:cf:12:20:04:c4:7e:fc:8b:f0:67:63:30:
19:47:7e:5d:37:e9:1e:a4:19:3f:2c:fd:73:4c:6a:
10:8b:a5:21:ca:82:3e:78:e1:cf:2c:36:b2:10:f7:
65:39:8a:ab:4c:2f:24:46:80:9f:91:8d:99:f8:5b:
00:4d:80:3d:dd:16:27:0f:1d:2a:c6:8d:7a:d8:c0:
c1:bc:75:72:cf:c9:da:50:71:07:53:a0:1a:a5:0c:
72:8c:b8:c5:70:52:a5:0e:0a:48:0a:56:40:65:30:
1e:fd:ff:7c:bc:04:e0:bf:2d:c3:9f:6d:75:7b:28:
55:27:dd:08:8e:94:1f:61:cc:d0:65:bc:ed:aa:6d:
25:ca:a2:e2:b1:56:1b:53:4c:a3:7f:2d:7a:d3:5a:
9a:8e:12:6e:a0:e0:b0:4a:c4:8d:71:e1:42:c5:73:
0f:3c:27:9b:33:c6:3b:e4:47:ab:c2:b1:ef:d9:da:
46:dc:b1:eb:c7:a1:da:5d:0a:10:99:95:81:16:3b:
74:ae:c0:de:cf:2a:a9:fa:fe:c7:04:2b:74:bf:58:
f9:3b:d1:fa:3f:51:bb:97:09:ad:db:f0:26:1b:7c:
ed:7d:de:4f:6e:f1:44:d2:82:02:48:fe:89:40:67:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:2E:61:9B:D2:DE:94:3D:A4:AB:92:D7:AB:D3:5F:71:E4:DD:EA
X509v3 Authority Key Identifier:
keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:4c:c2:4a:22:db:ab:86:18:e9:6c:1b:86:bd:fe:a5:6f:
d8:43:a4:8c:8c:e8:81:12:7e:bc:a4:97:b4:e8:76:e3:d3:ae:
7a:b8:bd:58:df:64:e2:e2:31:08:bc:f8:cd:4a:4b:23:d6:78:
07:93:8f:f4:b3:99:fe:24:87:9d:fb:b0:b2:4e:81:7b:07:91:
4a:41:86:6f:3b:c1:50:99:c6:31:c2:8f:62:c7:12:94:31:bf:
80:6b:82:22:61:ea:f6:1b:fc:3f:1f:ac:98:97:28:2f:ab:ec:
3e:92:08:cd:05:89:85:aa:36:4b:8f:bd:b4:39:54:58:db:e6:
63:09:bb:9c:e2:76:f3:21:0c:5d:ea:f6:b2:75:f7:86:dc:de:
5c:be:18:db:90:3c:bc:cb:12:85:b6:a7:c8:84:7a:20:90:dc:
9f:31:c5:a5:35:50:a3:ca:99:4e:77:28:de:05:46:da:e3:19:
d4:7b:14:36:b7:f9:cc:e7:c8:46:1a:8c:8f:a1:63:ae:d5:48:
db:cb:77:17:19:86:8d:ab:20:cc:7b:48:6a:03:1a:9d:77:2c:
85:7e:40:9b:ad:ad:77:fd:44:fe:fa:9b:b8:18:67:ed:e1:f7:
88:25:b4:74:12:6b:0b:e2:cf:79:fc:85:12:ed:ab:6d:8a:c1:
81:8d:a0:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz
QzI5NTUyODMwHhcNMjYwNzE2MTkzNTA3WhcNMjYwNzIzMTkzNTA3WjAYMRYwFAYD
VQQDEw02YTU5MzI2Yi1lZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk25UaywBH7e9lgaDEdS2vLvPEiAExH78i/BnYzAZR35dN+kepBk/LP1zTGoQ
i6UhyoI+eOHPLDayEPdlOYqrTC8kRoCfkY2Z+FsATYA93RYnDx0qxo162MDBvHVy
z8naUHEHU6AapQxyjLjFcFKlDgpIClZAZTAe/f98vATgvy3Dn211eyhVJ90IjpQf
YczQZbztqm0lyqLisVYbU0yjfy1601qajhJuoOCwSsSNceFCxXMPPCebM8Y75Eer
wrHv2dpG3LHrx6HaXQoQmZWBFjt0rsDezyqp+v7HBCt0v1j5O9H6P1G7lwmt2/Am
G3ztfd5PbvFE0oICSP6JQGd26QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD77LmGb
0t6UPaSrkter019x5N3qMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw
NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy
dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHt9Mwkoi26uGGOlsG4a9/qVv2EOkjIzogRJ+vKSXtOh249Oueri9WN9k4uIx
CLz4zUpLI9Z4B5OP9LOZ/iSHnfuwsk6BeweRSkGGbzvBUJnGMcKPYscSlDG/gGuC
ImHq9hv8Px+smJcoL6vsPpIIzQWJhao2S4+9tDlUWNvmYwm7nOJ28yEMXer2snX3
htzeXL4Y25A8vMsShbanyIR6IJDcnzHFpTVQo8qZTnco3gVG2uMZ1HsUNrf5zOfI
RhqMj6FjrtVI28t3FxmGjasgzHtIagManXcshX5Am62td/1E/vqbuBhn7eH3iCW0
dBJrC+LPefyFEu2rbYrBgY2gbw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:21:20 2026 by rpki-client