
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier: n1hqL4ywF31xgZGUpMG75QKEhS72VuOkBuCKcuqAvzM=
Subject key identifier: EA:85:53:C8:A7:C5:E2:52:0B:71:4B:4E:9A:C1:83:F4:4A:70:47:23
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 3435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number: 33C0
Signing time: Thu 10 Sep 2026 15:22:39 +0000
Manifest this update: Thu 10 Sep 2026 15:22:38 +0000
Manifest next update: Thu 17 Sep 2026 15:22:38 +0000
Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 7og4zrEMiWrx1rO78ZDKJJDfJO/Q8jMzgk8l/xham28=)
2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
4: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
5: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13365 (0x3435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Sep 10 15:22:38 2026 GMT
Not After : Sep 17 15:22:38 2026 GMT
Subject: CN=6aa2cb3f-1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:df:74:51:44:e4:c7:f3:a0:aa:44:6c:dd:16:
82:2f:67:95:43:6b:2a:0d:ba:5d:fa:d2:5d:33:35:
ed:d0:1f:9b:5f:1d:96:ce:06:ce:3e:3b:8d:48:8a:
fd:07:10:8b:e5:85:66:89:2c:73:54:e5:65:38:1e:
fe:e3:98:e0:da:4b:10:7b:cf:a2:3c:00:8f:75:c0:
89:f9:8e:d8:9a:d9:c3:f5:17:ef:da:01:98:8c:f3:
05:81:2d:e0:9a:28:c8:27:bc:61:e7:8e:92:dc:26:
93:27:f0:0d:22:70:75:44:97:d8:57:5f:4f:a2:20:
e8:9a:52:b7:f1:54:e1:8e:10:30:7d:15:5c:e5:97:
2d:2a:db:58:52:22:fe:df:be:db:69:76:d0:98:a9:
e8:85:88:af:13:83:6d:cd:5b:e8:31:af:71:0f:5a:
94:db:b3:af:79:f8:a8:48:2d:80:3d:e0:d0:3e:90:
d6:5f:c7:28:0d:57:8f:1f:84:d9:bb:66:ac:f5:7c:
91:49:97:2d:da:dd:85:24:ce:44:dd:ce:6c:7d:29:
2a:39:7f:4b:c5:8f:7d:d2:db:66:81:f1:28:a4:77:
e4:8f:c5:47:9c:9b:d9:90:6c:45:3f:6a:53:01:cb:
91:8d:51:65:3f:a5:23:49:a8:51:64:e6:06:c2:ab:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:53:C8:A7:C5:E2:52:0B:71:4B:4E:9A:C1:83:F4:4A:70:47:23
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:8c:4c:54:f2:7d:74:68:fb:80:bd:e0:a8:84:5d:aa:5f:
bb:19:d0:a8:64:d2:d1:c8:40:6b:8b:fe:d5:5b:eb:68:f9:76:
75:74:01:24:35:a6:0e:7d:4b:54:7f:74:a2:da:f0:eb:db:ae:
3d:51:68:d9:ef:5f:7f:d2:08:50:9c:24:18:5f:c2:46:8d:bb:
f6:18:e7:5a:80:0f:45:d3:c8:8e:f2:e3:c9:f8:4e:a9:16:b8:
f5:a8:29:d4:e9:b9:c4:70:66:06:48:36:b9:38:1a:28:2f:3f:
37:3f:15:ca:4e:d5:7d:b6:d4:e1:f5:73:e7:10:94:a7:45:1a:
4c:ff:3c:97:3c:e1:e3:73:9f:eb:23:34:75:83:4e:38:ce:93:
07:a3:cd:49:d5:bb:e4:94:31:fb:3b:8e:17:16:78:00:33:7b:
f2:ff:15:7f:50:61:f2:32:82:95:0c:9e:13:51:4e:35:be:6b:
33:cd:ce:97:bd:c2:91:da:f3:9a:3e:f6:1a:47:13:a4:15:45:
f1:cf:12:04:4a:9e:6f:af:57:ec:4d:2e:19:cd:3c:0c:72:49:
d5:30:8d:3e:2f:aa:46:fe:4c:07:89:18:9e:f3:df:dc:f1:d1:
4f:44:28:f4:48:4e:e6:05:9a:1d:a4:24:d6:7b:87:08:98:f4:
aa:55:8c:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG
NUE2QjkzNDgwHhcNMjYwOTEwMTUyMjM4WhcNMjYwOTE3MTUyMjM4WjAYMRYwFAYD
VQQDEw02YWEyY2IzZi0xMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+d90UUTkx/OgqkRs3RaCL2eVQ2sqDbpd+tJdMzXt0B+bXx2WzgbOPjuNSIr9
BxCL5YVmiSxzVOVlOB7+45jg2ksQe8+iPACPdcCJ+Y7YmtnD9Rfv2gGYjPMFgS3g
mijIJ7xh546S3CaTJ/ANInB1RJfYV19PoiDomlK38VThjhAwfRVc5ZctKttYUiL+
377baXbQmKnohYivE4NtzVvoMa9xD1qU27OvefioSC2APeDQPpDWX8coDVePH4TZ
u2as9XyRSZct2t2FJM5E3c5sfSkqOX9LxY990ttmgfEopHfkj8VHnJvZkGxFP2pT
AcuRjVFlP6UjSahRZOYGwqtBBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqFU8in
xeJSC3FLTprBg/RKcEcjMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx
NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p
TEs3bVRnejR1akgxcHJrMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArhCMTFTyfXRo+4C94KiEXapfuxnQqGTS0chAa4v+1VvraPl2dXQBJDWmDn1L
VH90otrw69uuPVFo2e9ff9IIUJwkGF/CRo279hjnWoAPRdPIjvLjyfhOqRa49agp
1Om5xHBmBkg2uTgaKC8/Nz8Vyk7VfbbU4fVz5xCUp0UaTP88lzzh43Of6yM0dYNO
OM6TB6PNSdW75JQx+zuOFxZ4ADN78v8Vf1Bh8jKClQyeE1FONb5rM83Ol73Ckdrz
mj72GkcTpBVF8c8SBEqeb69X7E0uGc08DHJJ1TCNPi+qRv5MB4kYnvPf3PHRT0Qo
9EhO5gWaHaQk1nuHCJj0qlWMmw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:10:33 2026 by rpki-client