
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
File: oYVUdv79oHy8rTr5lUhEq6B7dyw.mft (raw, json)
Hash identifier: jaWhGQTpokxVAjUUj424ePjwDAyucRSE3wlZ1ToJi+E=
Subject key identifier: 79:A4:AF:0D:A8:0A:FC:91:84:91:6D:20:62:A5:1C:2F:F4:39:85:A6
Authority key identifier: A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
Certificate issuer: /CN=A91C909E/serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
Manifest number: 55
Signing time: Fri 23 Oct 2026 08:49:04 +0000
Manifest this update: Fri 23 Oct 2026 08:49:03 +0000
Manifest next update: Fri 30 Oct 2026 08:49:03 +0000
Files and hashes: 1: oYVUdv79oHy8rTr5lUhEq6B7dyw.crl (hash: +r28y9l6IVfvDC6n15kiPwq7hAdqvMKCMcjkr9C/nA0=)
2: 377E5F464B5C11F1B3CC4A0AAE833773.roa (hash: l+MmjZZ7vb/FC3MXzcOXQHG/MQgYHBCADLYpYIgUX8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl
rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C909E, serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
Validity
Not Before: Oct 23 08:49:03 2026 GMT
Not After : Oct 30 08:49:03 2026 GMT
Subject: CN=6adb1f80-b74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:22:c8:ef:0c:2b:57:f3:46:c2:d2:cb:89:
47:a3:16:72:62:e1:ee:0f:a1:08:0a:4a:3a:2e:b6:
30:e3:c7:3f:57:b7:53:14:69:9c:63:07:25:c2:4f:
49:a7:23:8c:41:ae:29:99:b6:94:75:19:6b:5c:53:
4a:97:da:6f:f5:f1:61:63:cc:ba:49:29:86:cb:62:
dd:da:4d:02:8f:3b:69:6e:6a:2c:ec:3a:f1:a2:41:
80:9e:7c:34:15:7d:a8:63:68:cc:9a:c7:fd:ff:de:
dc:62:08:44:ea:28:7b:fd:1b:67:5e:26:ff:23:e8:
2d:c8:6b:5b:b0:be:8c:d1:8a:ea:d9:69:b6:25:fb:
5d:08:d5:71:ca:de:a3:07:3d:3d:02:44:3b:1a:be:
d3:77:59:6d:87:b2:aa:ae:45:c7:d8:69:cd:d1:26:
fc:9b:d9:65:ee:46:a1:fc:b4:f7:61:a0:4a:19:33:
2e:41:31:3c:86:87:2d:1d:dc:f6:db:25:46:66:04:
4b:9c:03:7b:29:b0:11:d4:16:f8:b3:08:fe:3f:86:
81:74:14:15:b6:99:6f:a0:2d:49:88:40:03:47:eb:
18:62:42:3f:33:38:54:dd:8c:74:48:f4:a8:d3:5f:
79:d5:1e:a3:99:ee:02:16:15:80:81:81:62:7b:c4:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:AF:0D:A8:0A:FC:91:84:91:6D:20:62:A5:1C:2F:F4:39:85:A6
X509v3 Authority Key Identifier:
keyid:A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:62:2a:72:09:4f:38:dd:26:6b:74:0d:4a:d2:15:22:a0:
67:b6:e9:25:4c:aa:5e:54:9f:ca:71:85:c4:7b:0e:93:f8:8c:
0a:be:d1:f9:a1:aa:a2:7a:2a:56:85:9c:2a:07:92:18:13:e6:
a8:25:e6:dc:a3:85:8d:9e:08:a4:f3:55:f9:bf:77:4f:25:38:
fd:99:14:a9:35:b6:fd:af:90:11:0f:80:e1:15:38:ad:12:ac:
4f:62:a5:5c:3f:1e:42:aa:56:b1:93:eb:5d:1f:66:22:e5:b7:
da:52:99:d1:93:e5:64:2d:75:05:37:d6:3d:09:90:8d:6a:62:
63:d7:96:af:2c:99:0f:3e:23:31:28:80:5b:b3:d0:c1:75:45:
51:c8:0d:fd:7a:a0:04:ec:b3:40:b7:30:d0:3a:1e:95:a5:d3:
e9:6f:e8:9e:a6:f6:3a:53:8b:6a:32:da:e4:6f:c8:01:d7:91:
4e:af:8e:cf:80:cf:8b:1a:b3:c1:d4:e3:5e:a1:b1:c6:f3:98:
77:4a:eb:eb:79:06:30:79:3e:d9:81:b1:af:6e:be:dc:74:ca:
e2:ce:e9:c5:62:87:f0:5d:fb:e6:c0:e1:e8:1b:0b:36:3a:52:
b5:cc:32:24:a6:40:5a:df:e9:f9:74:21:e4:2a:00:fb:20:32:
31:ac:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:22:43 2026 by rpki-client