
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: U+I/Gfj90XeqrmWFWczM6U0M+nCoVxLVYlKf+iBsLBI=
Subject key identifier: 60:C7:A1:33:B1:BD:81:CE:88:03:C9:2B:11:A3:AC:25:FF:CD:86:36
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 0393
Signing time: Fri 13 Mar 2026 00:33:50 +0000
Manifest this update: Fri 13 Mar 2026 00:33:50 +0000
Manifest next update: Fri 20 Mar 2026 00:33:50 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: dZXEdbJslAjbF8K3mu4QGk+yDIPM9ciufrWi0fPylt4=)
2: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
3: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
4: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
5: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
7: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
8: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
9: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
10: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
11: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
12: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
13: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
14: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 00:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Mar 13 00:33:50 2026 GMT
Not After : Mar 20 00:33:50 2026 GMT
Subject: CN=69b35b6e-97f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:94:df:e0:cc:65:cd:d4:a3:27:e5:d1:bf:
de:c7:73:2f:94:ed:57:e6:7e:6a:8d:cf:a2:84:fa:
4e:16:ac:cf:d1:65:7e:71:30:e2:de:3d:77:00:b5:
51:3b:33:dd:11:4f:e2:0e:f3:7d:54:5b:ff:61:f5:
9b:28:bb:a0:fc:24:2b:92:29:6b:ff:72:af:04:c0:
23:62:5c:3a:70:9b:5f:79:21:7e:cf:62:85:a1:6b:
e9:4d:bc:51:70:ef:e3:62:f3:71:d5:63:a5:df:a8:
46:f1:c7:05:12:a9:3b:21:5e:96:0f:3b:6a:cd:60:
f8:de:4d:ce:9c:08:51:08:06:88:8c:d1:38:ef:02:
e8:f7:4e:ba:8d:78:09:12:4e:b9:0b:28:5d:db:27:
5b:ea:14:f7:91:ab:79:51:24:a0:be:95:33:f2:23:
a6:0a:8b:08:43:12:0f:3e:9c:ac:9a:55:e1:f3:57:
db:27:32:07:62:bb:4f:35:3a:57:af:04:b6:0a:1c:
a7:5d:f8:4a:2f:af:65:5a:fe:e0:f0:03:23:bb:d3:
76:e8:17:6f:d8:1f:be:b9:30:fe:21:11:75:1c:dc:
f2:ae:ab:8d:c9:d7:a3:40:d7:a7:f9:ae:01:47:25:
93:10:93:46:7f:53:d8:78:4a:5d:7e:da:3b:83:2b:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:A1:33:B1:BD:81:CE:88:03:C9:2B:11:A3:AC:25:FF:CD:86:36
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:42:e6:ad:34:a9:fe:3a:2b:70:46:ec:4c:61:f4:5c:52:
8b:5c:dd:c0:c8:df:ee:f4:f6:82:dd:6d:8e:00:62:86:a3:5b:
94:8f:69:66:ab:16:c2:36:0d:ab:f0:08:6a:d9:4f:ef:fd:42:
3b:fb:d7:18:e5:29:28:a4:1e:c2:2e:cc:96:55:6a:bb:62:06:
3d:47:ff:34:ed:39:54:fc:77:73:77:72:87:b0:11:1c:e7:5b:
52:b9:93:fd:f1:16:e4:66:17:0b:ac:51:7e:5f:b1:f0:40:52:
09:c7:7e:10:47:a1:16:8a:52:79:71:c4:16:46:b3:66:03:ae:
e6:aa:98:60:26:fa:49:03:16:44:52:45:21:eb:ef:2c:b4:ba:
3d:e1:e0:f4:0b:8e:09:10:87:0d:e6:ee:c4:09:45:8c:72:b2:
8b:70:b0:04:3f:07:4e:c7:cb:b1:33:2f:c7:6a:87:d4:1d:51:
01:3f:75:f9:e2:ab:fa:09:ff:c6:c4:ce:76:75:a1:ae:ea:48:
89:89:31:a3:b7:ba:78:8e:43:21:34:db:be:0f:15:01:cc:d8:
ba:c6:9f:f0:7d:42:dc:ea:35:a0:3d:64:3b:71:70:bb:07:2c:
e7:75:b2:2e:dd:ce:30:70:a3:df:24:86:f6:1b:34:c9:24:64:
4c:c3:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:38:00 2026 by rpki-client