
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier: j1zc3ImTzLfSOz+AK0lOMbkLXJy/wXNWzx05PIJmLAk=
Subject key identifier: 77:4A:36:CD:B9:D6:F8:0F:87:6A:71:EE:7B:7B:5A:AA:78:F8:90:EE
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number: 092B
Signing time: Mon 13 Jul 2026 11:36:37 +0000
Manifest this update: Mon 13 Jul 2026 11:36:36 +0000
Manifest next update: Mon 20 Jul 2026 11:36:36 +0000
Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: TrdkDxTmuuwnAPJj4/FrT+FXnE5MjY2nsk1+tElB0P8=)
2: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=)
3: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=)
4: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=)
5: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=)
6: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=)
7: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=)
8: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 11:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Jul 13 11:36:36 2026 GMT
Not After : Jul 20 11:36:36 2026 GMT
Subject: CN=6a54cdc5-d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:be:e9:c0:97:f1:b0:95:9a:ef:64:33:0f:
fa:0c:dc:fd:35:c2:01:1b:c8:3b:86:76:70:fe:5b:
65:6c:2c:ae:8d:ef:00:ab:f2:11:fa:fe:f2:9a:0e:
bc:42:22:02:30:81:57:88:46:af:8a:2c:b8:3b:b7:
ae:44:9b:73:62:8e:f4:94:3f:19:e6:d2:05:7b:2a:
95:d8:90:59:e4:43:97:25:57:95:74:12:33:ab:c8:
be:35:dc:80:4b:cf:0c:65:f3:e3:99:0a:c8:4a:cb:
b7:6b:58:0b:bb:1d:c9:13:7e:50:17:b8:ba:cc:77:
38:78:85:85:da:c6:b6:15:28:6a:26:a2:2d:13:9b:
0d:10:b1:73:25:79:df:61:b4:31:4f:4b:a2:76:69:
05:5e:ee:f3:f6:75:e3:7e:17:4e:b1:00:52:8f:d5:
41:41:bd:d6:97:2a:46:b9:07:18:73:91:b3:e1:bc:
5e:46:dd:6f:e2:fa:83:25:d2:22:d3:e9:64:df:e0:
1a:99:56:52:c0:d0:ab:08:2f:df:8f:a6:7f:f3:e5:
c5:58:5a:46:5b:7f:96:99:c8:f5:0b:e3:2f:1c:06:
d9:6e:61:1c:56:40:39:04:48:55:7e:a7:17:15:03:
01:ce:99:05:ed:cd:df:9c:16:9f:48:b8:68:c6:0f:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:36:CD:B9:D6:F8:0F:87:6A:71:EE:7B:7B:5A:AA:78:F8:90:EE
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d6:24:c9:7b:1c:01:8e:22:c4:c6:6a:52:91:b4:b3:3d:c0:
9b:b7:5d:88:bc:32:ff:8b:57:a3:a4:ef:ca:0e:14:84:64:ff:
d4:d9:89:cc:47:4a:74:55:ba:8c:61:0d:f6:97:8e:7d:83:1e:
5f:7c:86:fc:50:03:bd:2c:02:93:93:70:4d:24:9a:03:76:bd:
e8:af:39:5a:4f:c7:a2:03:3b:14:80:ad:96:f2:b6:a4:f9:17:
f1:81:8c:db:8b:4b:2c:e3:fc:b2:39:fd:3c:ca:5f:a7:11:7b:
fa:f4:ed:6e:7c:37:57:f3:6b:70:a0:0a:65:8c:83:c3:ac:28:
5f:7b:73:cc:5c:e3:8d:bc:1e:33:95:2e:a0:9f:ab:c4:68:c1:
81:16:24:45:be:d6:e8:3e:b6:c0:d2:f0:5f:8b:b8:60:3a:2f:
9c:5e:e6:01:24:d6:af:97:df:ec:27:8a:0e:d3:68:1c:3e:90:
42:6e:bd:51:93:85:58:d4:15:e4:21:66:11:b8:65:03:72:1d:
98:ba:be:d6:72:c2:bd:01:e3:9e:5d:db:63:df:3a:0f:49:f3:
49:0d:ad:45:aa:f5:9a:38:c9:1b:11:7f:8e:87:06:31:0e:5e:
95:85:86:73:13:9e:b0:cc:a2:0d:72:ec:a9:5b:1c:66:2d:ad:
a0:49:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:46:12 2026 by rpki-client