
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File: pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier: CvrclczG4xLyELiMrBO76mOuxajaMrcU/DibznO5wH0=
Subject key identifier: D6:29:03:69:DA:E4:2C:8E:8C:CF:14:7C:DD:B2:B7:FF:4D:48:96:1F
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer: /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number: 9D
Signing time: Mon 05 Oct 2026 07:45:50 +0000
Manifest this update: Mon 05 Oct 2026 07:45:50 +0000
Manifest next update: Mon 12 Oct 2026 07:45:50 +0000
Files and hashes: 1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: pejS+MvvLAjL57aqQZAZkYv2qOSJTvzOsfLXsusCxjg=)
2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Validity
Not Before: Oct 5 07:45:50 2026 GMT
Not After : Oct 12 07:45:50 2026 GMT
Subject: CN=6ac355ae-d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:12:a7:31:82:8a:63:fd:6c:8d:04:2f:01:
38:f1:34:64:4a:3d:00:bb:af:81:2d:c6:14:08:8b:
e2:c7:cf:aa:c0:18:72:5b:5f:a1:9d:af:94:2a:d2:
42:a1:aa:d4:c9:43:78:85:4a:6a:9a:ea:0a:fd:9a:
01:b5:12:c6:06:6d:38:52:63:69:56:5e:a9:1a:35:
a6:8f:4d:eb:8a:8c:39:97:1c:82:06:cc:55:88:ea:
7b:5d:96:f9:6e:32:e7:67:24:ea:9e:79:af:ff:57:
ee:7b:90:f8:a3:45:66:24:04:08:60:81:c3:3e:6c:
72:c9:7a:dd:10:b7:9e:71:50:54:9c:d8:f8:f7:1b:
c4:40:79:8a:ec:6a:07:a9:05:3a:3e:dc:82:f4:b1:
d1:90:33:ff:56:77:58:3b:67:65:5c:f5:48:02:4f:
e0:3d:93:39:41:30:83:58:8a:e5:05:d2:59:9c:ee:
bf:73:e1:fa:d9:02:88:33:0f:c8:1c:66:b2:21:e9:
7a:4e:45:bb:b1:a1:b0:22:ba:60:bb:23:ef:df:59:
9c:e0:77:11:cb:dc:7b:09:19:80:12:5c:0d:70:ab:
26:1d:6a:50:27:15:55:3f:60:2b:46:16:b6:21:76:
b1:43:ce:dc:80:ca:d0:0d:cc:53:28:f0:c5:8b:51:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:03:69:DA:E4:2C:8E:8C:CF:14:7C:DD:B2:B7:FF:4D:48:96:1F
X509v3 Authority Key Identifier:
keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:72:e3:75:ff:93:d4:e6:5f:38:7b:d9:55:6e:10:d9:f0:
f0:38:2f:8a:6d:c3:fe:a1:58:50:2a:29:3f:fc:df:00:63:15:
91:57:aa:d1:a5:cb:79:0c:3d:17:b7:00:4c:62:15:a2:c2:3e:
76:f2:6b:cc:a8:b1:bd:10:16:88:2a:e9:38:29:3f:79:4b:ba:
fe:56:d0:c7:59:ea:75:3a:e1:ab:a9:a0:ca:30:47:21:3c:dd:
a6:ba:ff:7a:56:64:4f:c4:4f:a0:2c:15:de:6e:b7:e8:4e:af:
9f:63:69:86:ba:fa:f4:1c:77:d7:2d:8b:cb:3c:d5:f6:9e:d3:
16:65:a2:30:20:c1:7e:89:ae:20:cd:21:88:8d:20:32:d6:35:
e2:94:c8:75:3d:ed:cb:fd:b4:e2:b2:29:b0:e2:3b:f7:2d:0f:
a4:1a:43:98:85:bc:af:49:f9:41:ee:a6:fc:4b:00:05:b3:04:
f8:88:b6:dd:60:2a:ce:97:28:bb:f8:3d:18:5f:46:35:bd:aa:
33:c4:b4:49:58:24:69:f6:c5:bd:4b:63:ff:8a:92:31:6e:a1:
49:42:fb:29:c4:64:89:0b:b5:c6:29:66:8f:c0:81:c6:1d:67:
be:fa:40:a5:79:f2:d9:18:89:25:25:9f:39:e5:59:f9:da:00:
72:66:63:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFCQUExMTAvBgNVBAUTKEE0RThFQkMzQTczOTc1OTk5MDREQTZDNzY5NDg5NUJC
QzlFOTEzRUUwHhcNMjYxMDA1MDc0NTUwWhcNMjYxMDEyMDc0NTUwWjAYMRYwFAYD
VQQDEw02YWMzNTVhZS1kOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZgSpzGCimP9bI0ELwE48TRkSj0Au6+BLcYUCIvix8+qwBhyW1+hna+UKtJC
oarUyUN4hUpqmuoK/ZoBtRLGBm04UmNpVl6pGjWmj03riow5lxyCBsxViOp7XZb5
bjLnZyTqnnmv/1fue5D4o0VmJAQIYIHDPmxyyXrdELeecVBUnNj49xvEQHmK7GoH
qQU6PtyC9LHRkDP/VndYO2dlXPVIAk/gPZM5QTCDWIrlBdJZnO6/c+H62QKIMw/I
HGayIel6TkW7saGwIrpguyPv31mc4HcRy9x7CRmAElwNcKsmHWpQJxVVP2ArRha2
IXaxQ87cgMrQDcxTKPDFi1H1vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYpA2na
5CyOjM8UfN2yt/9NSJYfMB8GA1UdIwQYMBaAFKTo68OnOXWZkE2mx2lIlbvJ6RPu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUJBQS80QzRDQURBOEQx
OUQxMUYwQkRDNTQxNzBDNEY5QUUwMi9wT2pydzZjNWRabVFUYWJIYVVpVnU4bnBF
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPanJ3NmM1ZFptUVRhYkhhVWlWdThucEUtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUJBQS80QzRDQURBOEQxOUQxMUYwQkRDNTQxNzBDNEY5QUUwMi9wT2pydzZjNWRa
bVFUYWJIYVVpVnU4bnBFLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeMZy43X/k9TmXzh72VVuENnw8Dgvim3D/qFYUCopP/zfAGMVkVeq0aXLeQw9
F7cATGIVosI+dvJrzKixvRAWiCrpOCk/eUu6/lbQx1nqdTrhq6mgyjBHITzdprr/
elZkT8RPoCwV3m636E6vn2Nphrr69Bx31y2LyzzV9p7TFmWiMCDBfomuIM0hiI0g
MtY14pTIdT3ty/204rIpsOI79y0PpBpDmIW8r0n5Qe6m/EsABbME+Ii23WAqzpco
u/g9GF9GNb2qM8S0SVgkafbFvUtj/4qSMW6hSUL7KcRkiQu1xilmj8CBxh1nvvpA
pXny2RiJJSWfOeVZ+doAcmZjoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:35:13 2026 by rpki-client