
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: hi99ycYFJ+MmnXU2im/l7GG/CsGmWLnncQNJeLkglsg=
Subject key identifier: 1D:B5:08:78:42:A1:68:3A:1A:C2:01:22:6E:D5:B8:F6:6C:14:74:8F
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 03AB
Signing time: Wed 29 Apr 2026 01:33:23 +0000
Manifest this update: Wed 29 Apr 2026 01:33:22 +0000
Manifest next update: Wed 06 May 2026 01:33:22 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: m1YgwC8aOj2STm7IQ7WV1WdBPIyjQ/1Q+pqm0hT/U6k=)
2: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
3: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
4: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
5: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
6: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
7: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
8: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
9: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
10: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
11: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
13: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
14: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 01:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Apr 29 01:33:22 2026 GMT
Not After : May 6 01:33:22 2026 GMT
Subject: CN=69f15fe2-cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:ed:05:40:31:05:0d:51:5d:45:14:03:5d:
bc:4b:04:40:b8:36:37:5b:53:f4:f4:3d:9b:c5:9c:
46:c7:05:3c:16:2f:57:be:68:2e:ea:31:86:0a:49:
f9:c2:05:a0:73:95:07:ab:82:ac:31:3a:64:4e:7d:
dd:60:f8:07:67:88:a4:02:01:68:df:91:51:d4:38:
23:93:1e:2a:8e:9e:ef:ca:49:93:3a:72:24:38:89:
42:fe:6d:06:45:41:a9:7e:d1:1f:31:0c:48:9d:81:
b6:f1:5b:37:2f:26:7f:32:27:d0:40:3a:f7:a4:b6:
2a:8f:a8:b2:8d:3d:61:47:8a:12:03:69:06:92:26:
5e:38:5c:9b:a5:e0:be:2a:32:11:c8:a3:8a:01:b3:
95:e0:a9:9b:b4:70:02:f4:fe:fd:95:23:6d:85:6c:
aa:73:fb:ef:87:cb:91:a8:d1:6c:04:36:fb:41:57:
5e:e1:76:77:4b:fc:09:5e:18:ae:fb:11:1b:01:a2:
52:7e:29:c8:b8:28:18:5f:9e:f5:c8:05:17:b2:f5:
9e:14:44:9a:2d:2b:cf:3d:53:98:c2:f0:6d:5a:24:
ed:c1:db:ea:d8:11:74:7c:ed:6e:ea:f5:31:c9:6b:
21:65:f8:07:91:b9:d1:fd:4f:79:1e:6f:ff:ef:d4:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:08:78:42:A1:68:3A:1A:C2:01:22:6E:D5:B8:F6:6C:14:74:8F
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:00:35:76:b4:ce:1b:00:0d:a7:42:4c:17:ee:29:35:a8:ed:
c6:b7:e9:ed:9b:5a:ad:a9:ad:7a:c5:9b:d0:b4:d0:5e:13:78:
a1:41:e4:80:cc:e4:79:2b:13:0b:8e:de:cc:f9:8b:50:18:8b:
d0:c4:24:f4:9f:96:6a:ce:d9:e2:8b:61:8b:aa:3d:fd:3f:f2:
d6:a9:b8:31:43:95:e6:22:ae:94:d4:6c:79:6e:17:02:23:9c:
33:c8:92:eb:eb:ac:d1:f2:60:fb:1a:74:c3:b0:84:51:99:90:
b8:af:5e:18:aa:c7:e6:3d:bd:c7:53:be:c3:56:61:a7:46:79:
c9:e6:f3:14:92:c8:4a:1e:27:6a:e8:2b:4b:69:13:9f:0b:c7:
0a:7f:6c:66:a1:3b:63:58:85:93:dc:20:e3:08:2a:d5:22:bd:
d5:d8:ee:45:aa:9a:5f:2f:0b:37:bd:39:86:17:11:36:98:31:
9d:b0:b2:81:ea:89:75:d0:bf:7e:f0:1a:c3:be:35:86:e5:96:
48:ba:2c:32:c1:bc:c1:19:85:01:f2:27:4c:a6:6e:1b:91:95:
d5:24:35:69:2c:b2:53:dd:19:0c:cb:87:4f:07:37:1b:82:39:
4c:74:78:0e:fc:33:fb:84:2e:2a:54:99:9b:8e:4f:02:07:88:
a3:10:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 02:52:01 2026 by rpki-client