
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
File: oXIQwPgrRl5webuW88SZw_xMCog.mft (raw, json)
Hash identifier: v6O0yJq2/dL3pOnt/TBw8wC0JKdtR2tF1KqphSH3FSs=
Subject key identifier: 90:F7:2A:33:60:87:25:17:D9:66:1C:07:06:81:9A:78:05:C8:4B:1B
Authority key identifier: A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
Certificate issuer: /CN=A91E208A/serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
Manifest number: 1C
Signing time: Wed 19 Aug 2026 09:41:51 +0000
Manifest this update: Wed 19 Aug 2026 09:41:50 +0000
Manifest next update: Wed 26 Aug 2026 09:41:50 +0000
Files and hashes: 1: oXIQwPgrRl5webuW88SZw_xMCog.crl (hash: uqIcgEurVBGKJfJeYP9tNdP68NNVHNg+Vrq/KF1KxF0=)
2: 1D13321C760911F1B67326767BA30FBC.roa (hash: gKFAP2rvC3dl4ISST8Sh3uKKIKoWICHC4vi311f7Wpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl
rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Validity
Not Before: Aug 19 09:41:50 2026 GMT
Not After : Aug 26 09:41:50 2026 GMT
Subject: CN=6a857a5f-4470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:55:29:39:72:41:55:83:e0:35:0a:b3:d1:
d6:ea:60:6e:19:9e:ca:c2:f3:4d:be:d4:fc:d9:2b:
ec:12:99:52:f0:9d:75:0c:fd:d6:ed:20:6c:72:ec:
65:e7:1f:d7:bb:ee:b4:6b:97:d4:bf:87:eb:fa:7e:
a6:61:36:4c:68:73:16:a2:e3:85:d4:4a:2b:55:81:
b2:5e:83:e6:ae:07:ff:73:58:57:ca:02:a4:8d:69:
49:cc:90:f5:98:da:bd:9f:0d:b1:b9:11:1f:1e:bb:
cd:4d:de:7a:e4:75:4f:f5:ba:c4:46:a3:37:bf:f3:
3b:af:53:14:a5:e5:b1:19:de:cd:65:9f:a2:e7:ba:
ba:99:c9:b3:e2:2e:b5:9f:8f:97:d9:cb:49:7e:71:
da:9e:13:5b:b1:ce:46:8a:73:74:60:60:24:15:18:
33:b7:d2:67:f6:90:1f:dd:c1:d7:4c:62:9b:64:1a:
48:15:af:00:9f:20:fe:ae:06:5b:30:fe:68:ad:10:
b7:be:b8:b7:7d:73:0b:be:87:ea:b8:c7:2f:a4:07:
39:bc:6e:0c:d0:a7:ce:d1:e4:34:3b:93:f2:ea:c9:
6b:7a:7e:c3:21:9e:e5:9e:5c:2e:3e:90:d0:4d:6b:
34:0b:91:89:4b:c4:17:0a:cb:1b:e6:41:8f:a6:a1:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:2A:33:60:87:25:17:D9:66:1C:07:06:81:9A:78:05:C8:4B:1B
X509v3 Authority Key Identifier:
keyid:A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:7f:f9:b1:a1:bc:05:a9:f0:11:44:41:13:a3:28:3f:a0:8d:
f7:fc:1b:0d:9e:cd:a1:48:96:5c:99:7c:cb:8e:41:b0:97:2f:
a4:9a:1e:81:fc:8c:07:1f:7c:61:0d:7e:35:13:5d:fb:c7:cc:
28:bd:66:78:7b:20:6c:b2:7d:8f:1b:bd:80:27:e7:9d:e3:fe:
2a:e8:70:6c:65:82:29:16:ed:f3:d8:a4:2e:b1:4e:93:5b:a0:
b4:15:40:e2:2d:f5:37:63:17:09:cb:14:96:3d:54:ae:89:08:
42:d5:25:28:75:93:e8:18:5e:84:eb:5f:1e:c9:8f:94:e6:5b:
57:61:26:5a:a6:15:56:59:b8:02:2e:11:09:07:f0:e4:1a:9a:
41:95:a1:b7:7b:be:b4:47:f7:86:39:b5:14:78:f1:d2:83:0d:
c8:a7:b3:60:18:cb:9f:8d:f1:64:1a:e4:61:7d:1d:73:3a:19:
9e:d8:fc:5d:78:6d:09:41:20:15:41:11:43:58:52:7b:8c:1b:
b6:96:85:9f:9d:ee:92:7e:6d:86:1f:d7:aa:03:32:98:9c:9e:
a1:ac:8c:7c:d8:2c:09:d3:ba:3a:09:97:8e:60:38:83:34:a0:
9c:82:59:17:4c:bb:18:7f:8c:79:c4:aa:e5:72:dd:6f:73:47:
66:bf:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:13 2026 by rpki-client