
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier: nDsiynWNoZ7mDnrhQJNSONeyqC9n/Kk638a01ncFoHE=
Subject key identifier: D6:CF:6D:2F:80:B3:AF:1E:25:C0:63:EC:89:70:DF:1A:50:8B:FF:47
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number: 04C3
Signing time: Sat 03 Oct 2026 00:09:05 +0000
Manifest this update: Sat 03 Oct 2026 00:09:04 +0000
Manifest next update: Sat 10 Oct 2026 00:09:04 +0000
Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: JHdUixDsg2A/Ph+qAD7Zr2hG7w6f9DOyb1yWPRyRlKc=)
2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Validity
Not Before: Oct 3 00:09:04 2026 GMT
Not After : Oct 10 00:09:04 2026 GMT
Subject: CN=6ac047a1-9a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:05:a3:c8:92:f0:1d:f7:65:7d:e9:d5:fc:
c1:7d:00:c4:48:f8:8d:54:96:d7:e6:1d:93:ab:a3:
d0:70:5d:20:d7:7e:d0:4c:c1:e2:63:3e:2f:3d:10:
a7:53:55:5a:8d:7e:fa:93:07:13:13:b0:62:a9:6c:
da:c0:61:d0:5c:c6:a1:cd:03:b7:d2:54:de:99:dc:
be:8e:a0:02:a8:af:fe:22:f9:e8:b5:35:3c:b3:44:
0b:25:bf:c9:60:a7:9b:55:9b:0a:37:f7:25:d1:93:
59:3b:6e:ed:9a:69:19:84:25:64:42:c0:3b:b3:5c:
29:a5:53:48:eb:ef:ad:ed:d6:e7:77:86:2f:40:be:
4f:40:51:1e:a4:ad:85:78:ce:58:87:4c:da:c6:8e:
7e:bf:be:24:96:92:61:80:ac:c6:ac:c7:3e:bf:37:
dc:a8:5d:cf:0f:42:be:d9:fe:ea:26:4e:ed:f3:ba:
9d:2d:81:d2:65:3f:bd:3d:4c:98:ef:15:c6:94:ad:
85:55:8e:b7:95:2d:4a:11:25:98:92:4e:b8:35:90:
6e:2c:6b:e2:dc:5d:1c:2d:c7:c4:2c:d0:a8:87:3e:
b6:15:90:ad:33:46:c5:46:f0:c1:6e:de:ee:94:6f:
b7:d7:c7:14:55:89:90:24:1e:4a:0a:c1:54:5a:9a:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:6D:2F:80:B3:AF:1E:25:C0:63:EC:89:70:DF:1A:50:8B:FF:47
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:00:6f:59:8e:1d:aa:14:47:9b:cb:be:f0:14:b0:fe:94:32:
c4:3e:36:df:1a:d5:84:e1:f5:c5:ec:c3:0b:ca:92:13:81:0f:
83:3d:b3:ad:e9:43:0d:e0:f2:12:ff:24:57:bc:e7:02:86:a8:
ba:8c:a1:71:17:0c:73:f7:4a:38:db:95:7a:ef:2f:74:62:fc:
da:ed:c7:7d:a7:a7:46:ab:bf:95:fd:3f:cb:46:36:ed:d3:ad:
26:b2:f4:90:59:40:91:2f:a4:ff:5d:de:5e:c9:92:b6:d0:38:
e1:d9:fd:18:7b:d9:95:7e:b3:f2:9f:b2:9a:30:b1:66:37:e3:
99:29:9a:fb:bf:f0:e2:ef:8d:c3:be:66:73:0a:43:54:ef:a2:
b1:ba:c5:7f:17:0a:65:c4:45:14:45:25:de:7e:39:ed:b2:4f:
ba:f1:34:46:17:54:f9:ef:6e:63:12:30:3d:bc:b4:77:59:be:
01:ee:e0:2f:af:2c:29:82:09:10:d6:fd:fd:42:98:4a:48:bf:
da:ef:7f:00:fc:44:e3:f7:26:11:26:88:dc:db:d9:06:de:6b:
76:c6:81:80:67:f0:32:d1:85:5c:5b:3a:f7:89:eb:96:47:f7:
7a:64:a6:6a:58:4b:8d:2e:b0:b6:36:a0:e3:b4:32:d3:fe:f6:
38:a4:2a:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5
MkRERUJERkMwHhcNMjYxMDAzMDAwOTA0WhcNMjYxMDEwMDAwOTA0WjAYMRYwFAYD
VQQDEw02YWMwNDdhMS05YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2j0Fo8iS8B33ZX3p1fzBfQDESPiNVJbX5h2Tq6PQcF0g137QTMHiYz4vPRCn
U1VajX76kwcTE7BiqWzawGHQXMahzQO30lTemdy+jqACqK/+IvnotTU8s0QLJb/J
YKebVZsKN/cl0ZNZO27tmmkZhCVkQsA7s1wppVNI6++t7dbnd4YvQL5PQFEepK2F
eM5Yh0zaxo5+v74klpJhgKzGrMc+vzfcqF3PD0K+2f7qJk7t87qdLYHSZT+9PUyY
7xXGlK2FVY63lS1KESWYkk64NZBuLGvi3F0cLcfELNCohz62FZCtM0bFRvDBbt7u
lG+318cUVYmQJB5KCsFUWprI7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbPbS+A
s68eJcBj7Ilw3xpQi/9HMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC
Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj
LWhNek1MbU5zMkdTM2V2ZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANgBvWY4dqhRHm8u+8BSw/pQyxD423xrVhOH1xezDC8qSE4EPgz2zrelDDeDy
Ev8kV7znAoaouoyhcRcMc/dKONuVeu8vdGL82u3HfaenRqu/lf0/y0Y27dOtJrL0
kFlAkS+k/13eXsmSttA44dn9GHvZlX6z8p+ymjCxZjfjmSma+7/w4u+Nw75mcwpD
VO+isbrFfxcKZcRFFEUl3n457bJPuvE0RhdU+e9uYxIwPby0d1m+Ae7gL68sKYIJ
ENb9/UKYSki/2u9/APxE4/cmESaI3NvZBt5rdsaBgGfwMtGFXFs694nrlkf3emSm
alhLjS6wtjag47Qy0/72OKQqkQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:26 2026 by rpki-client