
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier: Oqe7Y4UFikS71v6auI+9lp/iGSP7rGs2eqpimFO19XE=
Subject key identifier: 39:B0:24:4A:3D:6A:D1:FB:2A:80:A0:F7:5E:BA:4B:E7:0F:9A:38:B5
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number: 01B0
Signing time: Thu 21 May 2026 04:04:18 +0000
Manifest this update: Thu 21 May 2026 04:04:18 +0000
Manifest next update: Thu 28 May 2026 04:04:18 +0000
Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: bQ5hw6nsyQxRj/MVP0VHgB15ho68NvAtN+5RsT1U5xo=)
2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: fXqbBRWZeBNZ3fZzOgA4a+7wMB/4xdAxxRaA5d6gc6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Validity
Not Before: May 21 04:04:18 2026 GMT
Not After : May 28 04:04:18 2026 GMT
Subject: CN=6a0e8442-59b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:b0:47:47:e5:77:51:06:ac:92:c8:67:22:
12:5c:2f:19:99:d4:a5:9c:47:9c:ae:c3:8f:2c:ee:
09:8d:31:ed:b3:d5:28:2a:68:fa:0f:03:e9:d4:18:
01:bc:71:05:20:99:b6:a4:f9:b7:6f:1d:33:27:9d:
37:69:60:7c:98:19:e2:54:af:e5:34:5e:0c:a0:e5:
d8:4c:f9:6f:47:c6:da:d0:99:de:04:2a:bd:be:b0:
b4:88:30:a5:bd:16:ef:dc:6b:c4:7f:42:bf:da:e3:
6d:57:c3:e7:92:a4:85:7f:ae:ee:3a:6b:5a:c7:f6:
70:1e:c6:b0:50:5d:cf:26:7e:3e:1a:34:46:87:06:
84:35:7c:65:f5:e2:d4:41:1c:4b:95:30:70:eb:d2:
b3:29:8a:50:fc:7a:7e:21:0e:f7:54:b2:c9:57:eb:
74:11:f6:32:b3:de:84:eb:81:da:1b:6d:25:0e:7a:
75:4d:52:89:8b:52:2b:29:51:5e:8c:9d:17:3e:cc:
50:2f:19:74:7a:07:68:76:d0:fe:e4:73:84:57:16:
c7:1c:e2:80:bc:d8:81:9b:fc:1d:63:1a:de:5c:08:
8a:08:c4:73:1e:56:d8:bf:6f:85:27:0b:d6:26:48:
b1:83:cf:50:1b:ed:78:e4:5c:a9:23:35:ba:7d:5a:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:24:4A:3D:6A:D1:FB:2A:80:A0:F7:5E:BA:4B:E7:0F:9A:38:B5
X509v3 Authority Key Identifier:
keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:57:58:99:89:b6:66:c1:96:5b:41:fd:97:7c:10:24:c9:a8:
cd:b0:fd:2f:ae:d9:0f:3a:94:00:93:b0:b1:89:14:4a:21:be:
9d:ff:73:ec:7c:e9:b7:2e:99:5c:46:4d:21:9a:42:65:87:5a:
32:6f:55:10:2b:41:d9:20:8e:af:5f:1b:f6:ae:25:54:f4:3d:
ab:cd:66:70:5b:44:94:82:e0:c1:23:01:82:81:6b:d9:a7:35:
06:5f:3a:12:0c:31:be:0e:e7:17:01:62:86:aa:d0:fc:50:0b:
f0:00:c7:42:a3:94:ff:00:e6:94:77:22:1c:22:fe:f8:99:f8:
54:5c:cb:d8:df:be:38:87:a1:56:8d:c6:41:0f:69:91:ed:9e:
4c:c0:34:e1:eb:ba:ba:1f:8a:09:f5:68:8b:45:e6:38:0e:06:
b8:1b:c0:b6:d9:3a:4f:65:f9:26:53:c9:42:f2:c7:be:85:cd:
fd:2f:82:07:4e:fd:83:a1:5f:02:a7:e2:36:84:0d:ee:ae:3a:
9c:d5:b5:db:c1:db:b7:a0:3c:29:6d:f0:98:df:c1:f0:ae:99:
e9:92:b4:5e:50:a0:dc:c2:13:7a:f0:6e:73:15:77:22:a3:66:
1a:38:74:d5:fa:35:22:c2:b1:a0:87:4b:80:9a:5c:7b:8a:e2:
87:db:af:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1
QUIwNUFDQzUwHhcNMjYwNTIxMDQwNDE4WhcNMjYwNTI4MDQwNDE4WjAYMRYwFAYD
VQQDEw02YTBlODQ0Mi01OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVuwR0fld1EGrJLIZyISXC8ZmdSlnEecrsOPLO4JjTHts9UoKmj6DwPp1BgB
vHEFIJm2pPm3bx0zJ503aWB8mBniVK/lNF4MoOXYTPlvR8ba0JneBCq9vrC0iDCl
vRbv3GvEf0K/2uNtV8PnkqSFf67uOmtax/ZwHsawUF3PJn4+GjRGhwaENXxl9eLU
QRxLlTBw69KzKYpQ/Hp+IQ73VLLJV+t0EfYys96E64HaG20lDnp1TVKJi1IrKVFe
jJ0XPsxQLxl0egdodtD+5HOEVxbHHOKAvNiBm/wdYxreXAiKCMRzHlbYv2+FJwvW
Jkixg89QG+145FypIzW6fVrIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmwJEo9
atH7KoCg9166S+cPmji1MB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw
OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq
VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGVdYmYm2ZsGWW0H9l3wQJMmozbD9L67ZDzqUAJOwsYkUSiG+nf9z7Hzpty6Z
XEZNIZpCZYdaMm9VECtB2SCOr18b9q4lVPQ9q81mcFtElILgwSMBgoFr2ac1Bl86
Egwxvg7nFwFihqrQ/FAL8ADHQqOU/wDmlHciHCL++Jn4VFzL2N++OIehVo3GQQ9p
ke2eTMA04eu6uh+KCfVoi0XmOA4GuBvAttk6T2X5JlPJQvLHvoXN/S+CB079g6Ff
AqfiNoQN7q46nNW128Hbt6A8KW3wmN/B8K6Z6ZK0XlCg3MITevBucxV3IqNmGjh0
1fo1IsKxoIdLgJpce4rih9uvWw==
-----END CERTIFICATE-----
Generated at Thu May 21 09:35:13 2026 by rpki-client