
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json)
Hash identifier: YHRrCmbZsOI1g8MbNED/330PQr7xg8X/ZkAKVznFcDQ=
Subject key identifier: C0:DA:12:E6:34:C1:58:34:1C:5D:B6:78:93:DB:01:9E:00:0B:66:D8
Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
Manifest number: 01D6
Signing time: Wed 07 Oct 2026 04:10:56 +0000
Manifest this update: Wed 07 Oct 2026 04:10:55 +0000
Manifest next update: Wed 14 Oct 2026 04:10:55 +0000
Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: yh/2HIAAeOXzP8kJQMTuPghQ8fuNpw52knSjtagnG0s=)
2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: UtSzzMWfIXw2NSZrpA5LzJDehsRQP2yPJNRN7dJRUq8=)
3: Gq8S8f-vTCiES70UJjHiH3WbVE0.asa (hash: tYaI65JKNto3F2d+y4q4964IeYYPOAL9+A874rYqH3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Validity
Not Before: Oct 7 04:10:55 2026 GMT
Not After : Oct 14 04:10:55 2026 GMT
Subject: CN=6ac5c650-1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:17:1b:ce:3d:12:f6:7a:d3:a6:7d:ca:3e:
3b:b0:6c:4d:5d:18:c2:b9:7d:83:a6:b6:09:ef:a0:
60:92:08:c3:0d:d2:75:3a:56:bd:6b:d3:69:9d:57:
24:e0:db:8f:5f:84:9a:fd:36:9d:a2:73:9d:09:41:
9b:70:66:3c:46:2a:f4:5b:a2:3a:be:e7:f7:cc:63:
87:89:44:a7:9b:84:02:8f:97:b0:84:e3:92:5a:c0:
29:16:34:21:04:22:e5:26:8c:aa:cb:75:ad:be:81:
40:36:ee:92:52:7a:26:93:09:27:3e:1e:64:f2:88:
45:4f:14:3f:09:3a:dc:51:75:ab:52:7e:ea:cd:e2:
53:b9:9f:ab:51:3c:df:6c:ab:6d:d3:97:d9:a0:25:
a2:da:0f:52:b4:ce:5d:a0:db:6f:2c:bc:84:76:ec:
00:53:b7:bd:9c:cb:64:c2:2d:1b:5b:fd:36:e3:9b:
ab:1a:ea:b4:ef:d7:17:ae:02:72:bb:af:fd:89:38:
15:df:2c:05:76:0b:ea:04:10:3b:b0:a3:0b:10:24:
ce:3a:f8:01:7a:b6:73:92:e8:1b:74:37:10:70:dc:
5b:39:86:d3:d7:b4:42:c0:09:03:a0:c4:fd:1b:ab:
bb:b0:e1:9d:a0:89:d8:a9:19:fe:cb:c3:eb:aa:cd:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:12:E6:34:C1:58:34:1C:5D:B6:78:93:DB:01:9E:00:0B:66:D8
X509v3 Authority Key Identifier:
keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:be:f9:25:88:f4:e4:fb:c0:05:aa:d1:96:fb:4d:f2:5a:7b:
44:41:75:0b:16:e7:1d:ef:a3:4b:c8:00:a4:09:d3:af:69:75:
a4:bc:07:06:15:de:e5:63:ae:e1:62:59:ac:18:1a:61:6b:e4:
b7:04:86:4a:fd:6c:92:31:e7:00:1a:f7:0e:49:18:f8:c7:8a:
76:c2:ec:d4:f0:f5:8e:db:4e:44:77:92:d2:70:e0:24:1c:a5:
bb:a8:c4:6e:88:a5:c3:c8:43:13:ec:54:ee:65:a8:34:c2:b0:
1b:c6:ba:ea:d3:ed:c2:f4:0a:55:60:62:4a:17:44:3d:96:4b:
ef:59:42:9a:b3:ea:5e:9b:af:e2:cb:06:89:73:2e:b7:86:e6:
55:0d:9a:c9:90:5c:e5:fb:42:05:9c:fc:ab:e8:3b:d4:7a:56:
1f:1b:8c:74:86:00:66:fe:0a:06:4a:38:d4:fa:a2:95:cd:3a:
be:f7:c7:73:9a:37:3d:b0:5b:33:34:4b:71:8d:8d:a5:f5:4d:
95:d3:87:ab:71:80:e2:38:e8:5c:66:b0:b4:94:96:ed:a0:80:
8e:57:25:d1:d0:91:ff:b4:eb:af:f5:95:4c:84:a1:3b:fa:70:
91:21:9a:9f:f4:95:14:d4:87:2e:51:35:94:e6:84:1a:24:f0:
cf:25:d2:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4
NjY0NjFBRTcwHhcNMjYxMDA3MDQxMDU1WhcNMjYxMDE0MDQxMDU1WjAYMRYwFAYD
VQQDEw02YWM1YzY1MC0xODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsy4XG849EvZ606Z9yj47sGxNXRjCuX2DprYJ76BgkgjDDdJ1Ola9a9NpnVck
4NuPX4Sa/TadonOdCUGbcGY8Rir0W6I6vuf3zGOHiUSnm4QCj5ewhOOSWsApFjQh
BCLlJoyqy3WtvoFANu6SUnomkwknPh5k8ohFTxQ/CTrcUXWrUn7qzeJTuZ+rUTzf
bKtt05fZoCWi2g9StM5doNtvLLyEduwAU7e9nMtkwi0bW/0245urGuq079cXrgJy
u6/9iTgV3ywFdgvqBBA7sKMLECTOOvgBerZzkugbdDcQcNxbOYbT17RCwAkDoMT9
G6u7sOGdoInYqRn+y8Prqs2jzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDaEuY0
wVg0HF22eJPbAZ4AC2bYMB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE
N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj
bE9MZDlmS211STZHWkdHdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm775JYj05PvABarRlvtN8lp7REF1CxbnHe+jS8gApAnTr2l1pLwHBhXe5WOu
4WJZrBgaYWvktwSGSv1skjHnABr3DkkY+MeKdsLs1PD1jttORHeS0nDgJBylu6jE
boilw8hDE+xU7mWoNMKwG8a66tPtwvQKVWBiShdEPZZL71lCmrPqXpuv4ssGiXMu
t4bmVQ2ayZBc5ftCBZz8q+g71HpWHxuMdIYAZv4KBko41Pqilc06vvfHc5o3PbBb
MzRLcY2NpfVNldOHq3GA4jjoXGawtJSW7aCAjlcl0dCR/7Trr/WVTIShO/pwkSGa
n/SVFNSHLlE1lOaEGiTwzyXSJA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:23:42 2026 by rpki-client