
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
File: oXIQwPgrRl5webuW88SZw_xMCog.mft (raw, json)
Hash identifier: L3EV0u+JIUf/fFDiJmVsdv4bwv60Svf3zBetDbz2Udg=
Subject key identifier: 7F:1D:36:75:F7:FF:65:A9:4F:F5:8B:39:CF:84:6F:34:5C:69:35:DE
Authority key identifier: A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
Certificate issuer: /CN=A91E208A/serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
Manifest number: 34
Signing time: Mon 05 Oct 2026 09:07:56 +0000
Manifest this update: Mon 05 Oct 2026 09:07:55 +0000
Manifest next update: Mon 12 Oct 2026 09:07:55 +0000
Files and hashes: 1: oXIQwPgrRl5webuW88SZw_xMCog.crl (hash: 0rxPVhzDNSJCOVy+Hs2bSo6irjuqTwys7PleuofGELI=)
2: 1D13321C760911F1B67326767BA30FBC.roa (hash: gKFAP2rvC3dl4ISST8Sh3uKKIKoWICHC4vi311f7Wpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl
rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Validity
Not Before: Oct 5 09:07:55 2026 GMT
Not After : Oct 12 09:07:55 2026 GMT
Subject: CN=6ac368ec-3943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:33:e5:cb:12:9e:af:06:d5:d9:5f:a9:ad:
fb:4d:b0:99:7a:11:e1:48:44:c8:a0:c8:18:78:30:
52:9c:51:5b:1c:34:d1:30:9a:00:7b:4b:89:b7:94:
2f:97:24:43:d6:82:b2:d2:42:d5:7e:3f:7e:1c:9f:
3a:08:5b:2d:ed:c6:42:9c:ab:00:66:5b:98:0a:1d:
76:dc:32:78:7b:e9:37:86:8b:d1:89:7c:8d:9e:ab:
8b:a9:28:0d:7d:82:73:80:d7:98:c6:50:0a:96:5c:
c3:bc:9d:cb:2e:28:e9:02:b7:c0:dc:ff:8a:93:98:
18:89:57:7b:b0:c6:0c:ff:2c:58:31:0f:a9:5f:87:
39:a5:45:76:9f:40:ed:ea:32:fd:32:b5:71:a2:93:
85:df:5a:61:96:e6:47:78:82:09:87:da:96:38:0f:
8d:c2:be:3a:fa:73:a0:60:8d:72:36:e4:21:1b:51:
06:10:98:15:43:16:25:15:39:e7:30:91:5d:cf:60:
bd:d6:56:cf:84:3d:18:52:55:76:19:65:48:c9:c4:
ca:6f:56:8d:a2:ba:6e:91:ba:11:6f:7d:8a:64:b3:
2c:5d:f7:64:c3:20:22:62:89:12:bf:82:21:9c:9a:
cf:d6:3d:a8:e1:42:da:52:7e:23:b5:89:02:58:1e:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:36:75:F7:FF:65:A9:4F:F5:8B:39:CF:84:6F:34:5C:69:35:DE
X509v3 Authority Key Identifier:
keyid:A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:1d:6a:b8:9f:6e:f5:7d:0a:96:cf:17:16:f1:1d:a4:38:
d4:5e:f5:1a:40:51:0a:d9:42:1d:29:82:98:d0:f0:6e:af:43:
a2:2f:00:0a:6b:2b:e0:4f:0c:8b:cf:cd:9f:ea:f0:2a:b4:eb:
01:28:79:55:f3:e7:72:7d:0e:0e:22:d0:9f:e1:1b:9d:be:fa:
00:79:ba:f7:9a:94:e0:61:67:95:d7:29:62:5e:ee:d4:83:bf:
98:fa:0c:d7:bd:09:8a:05:70:bd:ee:2a:dd:a1:a7:99:61:58:
47:d7:8a:d8:47:3f:3a:9b:f2:72:f8:24:d8:01:bf:e9:00:bb:
50:b3:e6:ce:36:ca:08:89:c0:52:e3:c4:d6:11:17:b8:bb:ee:
38:90:7f:2f:a0:2a:6e:78:1b:92:42:a2:f1:ae:e9:11:52:98:
76:f5:e1:66:60:ab:d2:3c:7d:f5:40:de:fc:d6:24:cc:48:0f:
a5:08:d1:a9:03:26:aa:e6:88:68:96:7d:19:86:e3:82:10:f2:
7c:d9:5c:9e:ef:84:29:d8:3e:e9:ae:fb:32:3b:d9:c5:a1:fe:
76:a1:da:06:dc:b8:ef:36:af:25:77:db:0e:b8:c4:ce:88:2a:
6b:2a:cb:08:79:aa:c9:89:95:f2:2e:4c:40:e4:52:77:84:fd:
f7:62:9d:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MjA4QTExMC8GA1UEBRMoQTE3MjEwQzBGODJCNDY1RTcwNzlCQjk2RjNDNDk5QzNG
QzRDMEE4ODAeFw0yNjEwMDUwOTA3NTVaFw0yNjEwMTIwOTA3NTVaMBgxFjAUBgNV
BAMTDTZhYzM2OGVjLTM5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC49TPlyxKerwbV2V+prftNsJl6EeFIRMigyBh4MFKcUVscNNEwmgB7S4m3lC+X
JEPWgrLSQtV+P34cnzoIWy3txkKcqwBmW5gKHXbcMnh76TeGi9GJfI2eq4upKA19
gnOA15jGUAqWXMO8ncsuKOkCt8Dc/4qTmBiJV3uwxgz/LFgxD6lfhzmlRXafQO3q
Mv0ytXGik4XfWmGW5kd4ggmH2pY4D43Cvjr6c6BgjXI25CEbUQYQmBVDFiUVOecw
kV3PYL3WVs+EPRhSVXYZZUjJxMpvVo2ium6RuhFvfYpksyxd92TDICJiiRK/giGc
ms/WPajhQtpSfiO1iQJYHtNhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfx02dff/
ZalP9Ys5z4RvNFxpNd4wHwYDVR0jBBgwFoAUoXIQwPgrRl5webuW88SZw/xMCogw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMDhBLzcwRTVBMjIwNzYw
NTExRjFCNjMxNjZERjc5QTMwRkJDL29YSVF3UGdyUmw1d2VidVc4OFNad194TUNv
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvb1hJUXdQZ3JSbDV3ZWJ1Vzg4U1p3X3hNQ29nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy
MDhBLzcwRTVBMjIwNzYwNTExRjFCNjMxNjZERjc5QTMwRkJDL29YSVF3UGdyUmw1
d2VidVc4OFNad194TUNvZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHGR1quJ9u9X0Kls8XFvEdpDjUXvUaQFEK2UIdKYKY0PBur0OiLwAKayvgTwyL
z82f6vAqtOsBKHlV8+dyfQ4OItCf4RudvvoAebr3mpTgYWeV1yliXu7Ug7+Y+gzX
vQmKBXC97irdoaeZYVhH14rYRz86m/Jy+CTYAb/pALtQs+bONsoIicBS48TWERe4
u+44kH8voCpueBuSQqLxrukRUph29eFmYKvSPH31QN781iTMSA+lCNGpAyaq5oho
ln0ZhuOCEPJ82Vye74Qp2D7prvsyO9nFof52odoG3LjvNq8ld9sOuMTOiCprKssI
earJiZXyLkxA5FJ3hP33Yp3X
-----END CERTIFICATE-----
Generated at Mon Oct 5 19:24:47 2026 by rpki-client