
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier: eLoD5wlzVVNrlnOgvo6e0iWajituB/4CBooBiwomI44=
Subject key identifier: 4F:03:E7:2B:2A:09:06:85:81:F2:E8:D7:EE:86:8B:F1:C5:DA:85:E5
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number: 03FF
Signing time: Thu 17 Sep 2026 00:39:37 +0000
Manifest this update: Thu 17 Sep 2026 00:39:37 +0000
Manifest next update: Thu 24 Sep 2026 00:39:37 +0000
Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: JR7mx6s5FJrXDXUNLSqcuSYeOd7gh1DWV5RXvx9Rjqw=)
2: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: AKoZyPuf4M9ZcEU/leMev9H1xz48aswraZiTQr7vftg=)
3: B111111288B411EF80480527C4F9AE02.roa (hash: xJMBIq+z+Hr5KMjAaKBxe80ZwBF0kEHvPHKxaRo9DIQ=)
4: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CDOHJRFPLioKIq0PuStTWBZGQbhh1O/85ZcAsgFBOoU=)
5: 2E7E25EA921D11F1B1C7D4CB6611F970.roa (hash: NxHB5XBL7ve4r080JLtFWlK5r7K17fGRWsvt/Wn/coQ=)
6: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: eo97g9UlZshMJA4HXsGwl2EqgsYxkz3OFQu0ZT7ioY4=)
7: F2F59366E93211F0977E0D6F386F56BC.roa (hash: SaqwUER8FXoCY8XMwl3VUuOZz0WZkKo6QxxCfB6IRAo=)
8: 01E32FB0AB8311F1A20282104511F970.roa (hash: VsomVcK/GLNpw4OvnJLc9D/RdvByd92jmlfvPnvBPfc=)
9: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: brgVDCGXixcbJRNF8ggHKQFgFrzS4R9OgM/PcYC5nQc=)
10: 72CB1E1C7B5011F1B2F9C2DC58A30FBC.roa (hash: dORDFnaaxQGY4vjjFr7BGYntkVIFxkqdlRTgdg+fLbo=)
11: 6762C6E0909211F18C4BD3AE6911F970.roa (hash: GO5zh7MCHBg56U5rWYeNTB2vPGPUOw86aIMrka1N4cg=)
12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: eKDAjFI7uLbjlMqzaXqO/giEMIaCgnJ47zdh3OypaOI=)
13: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: H7MTLgBvJqkX/zlXhQ1M+AoAUBypYzZNCTAi5k1DtyM=)
14: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: xU1zjA76l+0iM9bsFjOEAgjkfSx72d/teh/7jiFl8qs=)
15: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: 9E7fitqPq9ar/Ob4y6a6R4Pwq8T7ZTTzFgXU4K5+Oug=)
16: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: pJq2I6/phF6xwFXAl6PEEV/RgzAR5E+0Z+tE1UwO0T8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Sep 17 00:39:37 2026 GMT
Not After : Sep 24 00:39:37 2026 GMT
Subject: CN=6aab36c9-1bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:b3:1d:b9:d1:c6:59:62:f0:aa:be:2d:5c:
46:2e:98:c3:c9:2b:6d:fc:b6:65:90:9a:d2:f3:17:
1e:e9:a3:66:33:1a:b3:ce:26:e4:1d:19:7d:4a:48:
e0:43:a4:1b:38:a0:0c:dd:95:53:09:52:96:9f:f2:
2d:7c:3d:63:d1:63:25:42:59:7c:eb:5b:59:f7:a1:
34:4e:85:a9:3b:54:75:80:8a:b6:0f:5a:79:5b:86:
20:d9:ee:74:a4:7c:10:8d:bd:fd:48:be:b5:92:52:
2c:0c:c8:ca:f0:34:af:3c:ef:0d:a0:e8:7a:02:16:
e8:2c:6b:5d:39:da:b2:4f:2c:05:8f:29:71:d0:0b:
f6:0c:dd:5c:3c:7d:40:5d:2a:93:5d:fa:6c:aa:03:
78:0f:a7:8c:82:09:c5:34:b4:c2:2c:2f:3d:e7:ad:
15:e3:40:fa:db:57:bb:8b:d8:40:e7:23:f0:59:2c:
d1:f6:55:0c:09:09:23:7b:46:75:5b:c2:7b:f2:a0:
99:7d:da:25:e3:8c:8e:e2:f2:4d:d7:dd:51:87:a4:
91:9d:4d:d7:b1:f8:63:08:96:62:d3:e2:40:05:53:
16:82:d0:11:65:4f:2e:cc:f8:63:0a:4f:47:57:78:
02:6d:ce:31:86:80:f5:ff:76:46:d7:c4:b6:00:56:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:E7:2B:2A:09:06:85:81:F2:E8:D7:EE:86:8B:F1:C5:DA:85:E5
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:d4:33:b1:93:eb:bf:0e:06:f9:c8:23:c9:fd:b3:10:25:
d1:0a:c2:cf:a6:e4:c5:ed:ff:bf:60:76:e9:d7:b5:50:09:d3:
bf:43:45:f5:75:0c:4d:d0:a6:b3:f5:3a:7b:31:00:b0:ad:be:
81:a6:f8:fe:e4:f4:d9:41:b9:da:28:35:c2:bd:13:04:d8:46:
4c:74:26:16:32:eb:4f:bb:33:d9:c8:0c:82:d2:cb:49:69:88:
2d:95:34:35:1b:e8:9e:5c:f2:9e:ff:34:61:91:89:aa:b9:d9:
b3:ca:eb:eb:7e:73:9c:3a:47:83:5d:ce:22:c2:f4:40:6c:31:
1d:74:cd:63:e5:a3:4b:61:5e:dd:98:62:4f:a7:e2:01:de:38:
3f:b4:15:93:18:ec:cf:f1:4a:16:39:3f:7a:2f:48:01:93:88:
a7:24:88:d5:a4:4e:84:69:e5:ce:7c:f9:36:50:b4:5e:e8:90:
dc:c8:d9:72:b3:18:08:64:b3:fa:2f:e1:9e:3e:0b:1a:4c:1f:
93:19:4b:7f:b8:65:3f:0a:41:59:00:3e:97:2c:e4:67:f3:80:
5d:65:e1:d4:46:68:1d:13:a4:c1:26:a7:c1:b8:18:45:db:e5:
76:2f:58:bf:77:eb:01:fb:23:50:c1:9e:f2:67:44:2b:9a:af:
a7:b1:94:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjYwOTE3MDAzOTM3WhcNMjYwOTI0MDAzOTM3WjAYMRYwFAYD
VQQDEw02YWFiMzZjOS0xYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3mzHbnRxlli8Kq+LVxGLpjDyStt/LZlkJrS8xce6aNmMxqzzibkHRl9Skjg
Q6QbOKAM3ZVTCVKWn/ItfD1j0WMlQll861tZ96E0ToWpO1R1gIq2D1p5W4Yg2e50
pHwQjb39SL61klIsDMjK8DSvPO8NoOh6AhboLGtdOdqyTywFjylx0Av2DN1cPH1A
XSqTXfpsqgN4D6eMggnFNLTCLC89560V40D621e7i9hA5yPwWSzR9lUMCQkje0Z1
W8J78qCZfdol44yO4vJN191Rh6SRnU3XsfhjCJZi0+JABVMWgtARZU8uzPhjCk9H
V3gCbc4xhoD1/3ZG18S2AFZPwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8D5ysq
CQaFgfLo1+6Gi/HF2oXlMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G
X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVDDUM7GT678OBvnII8n9sxAl0QrCz6bkxe3/v2B26de1UAnTv0NF9XUMTdCm
s/U6ezEAsK2+gab4/uT02UG52ig1wr0TBNhGTHQmFjLrT7sz2cgMgtLLSWmILZU0
NRvonlzynv80YZGJqrnZs8rr635znDpHg13OIsL0QGwxHXTNY+WjS2Fe3ZhiT6fi
Ad44P7QVkxjsz/FKFjk/ei9IAZOIpySI1aROhGnlznz5NlC0XuiQ3MjZcrMYCGSz
+i/hnj4LGkwfkxlLf7hlPwpBWQA+lyzkZ/OAXWXh1EZoHROkwSanwbgYRdvldi9Y
v3frAfsjUMGe8mdEK5qvp7GU4g==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:15 2026 by rpki-client