
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier: d2LijbsVVF/JrxTnQI6W6EgrfMcDNmWpi2/3NcfMKSo=
Subject key identifier: 1F:E6:D6:16:C7:A6:63:21:70:50:21:25:00:48:08:E7:25:F0:4C:D5
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 35B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number: 3592
Signing time: Tue 18 Aug 2026 14:32:02 +0000
Manifest this update: Tue 18 Aug 2026 14:32:02 +0000
Manifest next update: Tue 25 Aug 2026 14:32:02 +0000
Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: LvAcHcp92D/LNULCV/Pr2pGr1usEMckZvipuDMbJelM=)
2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=)
3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746 (0x35b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: Aug 18 14:32:02 2026 GMT
Not After : Aug 25 14:32:02 2026 GMT
Subject: CN=6a846ce2-d583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:21:9a:a6:ee:a9:2a:eb:56:88:e7:3e:5e:
63:39:44:86:d8:29:12:2a:fe:92:61:4c:b1:13:a0:
0f:43:a3:1d:a5:dc:df:74:b1:68:6d:01:57:46:e1:
a8:97:a7:5c:d9:c6:ee:39:32:95:69:cf:44:cf:02:
49:c2:80:1b:02:4f:61:e6:bd:82:2c:ff:64:09:05:
52:2b:1d:25:10:6b:f1:00:42:d3:7a:05:cc:8d:a9:
26:5a:e7:ce:fd:d1:ef:3f:4f:67:7a:ec:ef:10:10:
e8:01:24:e9:e5:2f:50:e3:e9:81:16:69:06:d0:ab:
95:c1:45:55:3d:57:cf:32:7e:f9:6a:4d:2c:f4:fc:
64:11:89:d3:3a:73:3d:a8:87:c9:d4:e7:d1:4d:53:
3c:b7:5a:34:18:c1:9f:c1:db:c4:fc:a4:e3:d7:a5:
bf:ee:ed:8e:e9:11:91:98:09:8e:c3:c1:7d:22:fe:
a1:51:ec:59:19:69:e7:38:02:8e:3e:2a:4b:07:6c:
bc:3c:dd:a0:1e:22:ed:d7:97:82:af:56:b7:37:f4:
3b:3d:9b:47:be:0f:ee:84:76:c6:3e:41:08:05:4d:
d2:9b:7b:9c:9d:4d:4c:73:ff:50:b1:80:f9:af:dc:
2e:5a:98:eb:6f:62:d7:61:78:66:3b:a3:f9:4e:d8:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:D6:16:C7:A6:63:21:70:50:21:25:00:48:08:E7:25:F0:4C:D5
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f9:46:c9:56:2c:20:a5:81:ce:29:c2:34:14:17:29:de:dc:
39:0f:62:a1:d0:c9:e4:2c:07:ff:3f:30:ff:71:01:19:56:98:
f2:b6:15:ec:61:bd:9e:b9:93:4f:fc:c0:8c:a0:57:9f:74:f3:
06:6e:ef:70:e9:aa:89:29:11:dd:06:9c:77:ae:ac:aa:5f:b4:
4c:ae:90:43:9a:64:9c:35:81:bd:8e:7c:f8:31:51:6d:24:e9:
15:cf:d9:42:b1:02:91:5d:05:a2:f4:fe:f6:a7:cb:c5:8c:30:
22:a4:7d:fd:4f:f4:fa:96:c0:4f:3b:b8:29:25:ba:17:34:ee:
9c:7b:d7:22:3f:1c:39:fe:21:95:72:87:95:0a:1e:4f:bc:f1:
62:11:e1:cb:28:b9:a0:0a:ac:16:19:ff:3a:a5:5f:8c:ec:fb:
35:d4:0a:c1:ee:d9:1b:da:2b:7d:24:bf:f9:07:ff:cb:e0:88:
c2:12:b9:c9:b0:bb:d6:b8:dd:a4:08:44:86:f0:09:2b:4b:3a:
84:b4:30:ab:5e:5b:21:a0:a9:cf:c2:54:bd:26:81:c2:2b:13:
85:2e:58:b3:e8:ab:ee:77:e8:98:bf:2e:34:26:c4:e7:fd:43:
4b:71:4f:5f:e1:95:04:c6:ad:44:8a:11:12:82:22:6d:d3:c4:
6f:7b:79:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjYwODE4MTQzMjAyWhcNMjYwODI1MTQzMjAyWjAYMRYwFAYD
VQQDEw02YTg0NmNlMi1kNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEkhmqbuqSrrVojnPl5jOUSG2CkSKv6SYUyxE6APQ6MdpdzfdLFobQFXRuGo
l6dc2cbuOTKVac9EzwJJwoAbAk9h5r2CLP9kCQVSKx0lEGvxAELTegXMjakmWufO
/dHvP09neuzvEBDoASTp5S9Q4+mBFmkG0KuVwUVVPVfPMn75ak0s9PxkEYnTOnM9
qIfJ1OfRTVM8t1o0GMGfwdvE/KTj16W/7u2O6RGRmAmOw8F9Iv6hUexZGWnnOAKO
PipLB2y8PN2gHiLt15eCr1a3N/Q7PZtHvg/uhHbGPkEIBU3Sm3ucnU1Mc/9QsYD5
r9wuWpjrb2LXYXhmO6P5TthR7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/m1hbH
pmMhcFAhJQBICOcl8EzVMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhvlGyVYsIKWBzinCNBQXKd7cOQ9iodDJ5CwH/z8w/3EBGVaY8rYV7GG9nrmT
T/zAjKBXn3TzBm7vcOmqiSkR3Qacd66sql+0TK6QQ5pknDWBvY58+DFRbSTpFc/Z
QrECkV0FovT+9qfLxYwwIqR9/U/0+pbATzu4KSW6FzTunHvXIj8cOf4hlXKHlQoe
T7zxYhHhyyi5oAqsFhn/OqVfjOz7NdQKwe7ZG9orfSS/+Qf/y+CIwhK5ybC71rjd
pAhEhvAJK0s6hLQwq15bIaCpz8JUvSaBwisThS5Ys+ir7nfomL8uNCbE5/1DS3FP
X+GVBMatRIoREoIibdPEb3t5PQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client