
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: 13FQtyt9D3pHvHXttE5jkp1sI2OUUjLOUEj2G1WM30g=
Subject key identifier: E3:AB:3C:70:B3:FE:4D:F6:87:21:72:F9:8F:29:66:7A:8D:3F:BC:7A
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 034C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 0346
Signing time: Wed 19 Aug 2026 01:21:33 +0000
Manifest this update: Wed 19 Aug 2026 01:21:32 +0000
Manifest next update: Wed 26 Aug 2026 01:21:32 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: 8ytMZtnCqO7TYqiKKPavsLq0wYcBYQKUCoZajSXycs0=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Validity
Not Before: Aug 19 01:21:32 2026 GMT
Not After : Aug 26 01:21:32 2026 GMT
Subject: CN=6a85051d-c5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:eb:42:10:fd:17:23:2d:70:54:57:98:4a:
49:44:43:b0:80:e1:e5:10:17:03:17:f8:b8:1f:48:
34:5e:46:1f:54:20:90:b3:bf:32:21:c8:7f:e1:52:
9c:68:96:da:84:e9:00:31:84:ec:38:72:f5:9b:19:
39:89:0f:7d:0f:ae:46:fd:e4:a4:67:8e:20:09:7f:
ac:5b:e4:68:07:cc:65:08:25:d7:68:23:bf:09:4f:
99:8f:c1:42:4a:97:ff:5a:de:ef:73:72:77:3b:a1:
8e:5c:0a:34:d2:1c:11:ee:aa:dc:a3:6c:5c:c5:52:
a8:9c:a5:56:cb:7d:cb:62:6d:53:2c:2c:17:f9:6c:
04:1a:c7:3c:29:7d:20:4b:fd:c0:5f:12:46:69:b6:
47:cd:cd:73:6b:1e:13:81:ad:35:f5:9e:2c:bd:09:
c2:6f:f3:3c:b9:11:e8:ac:a7:f9:83:56:ba:ba:06:
75:dc:8a:c8:7b:b6:ac:1a:f9:8e:a3:f9:ee:69:13:
50:85:dc:b9:fc:27:cc:91:23:38:7a:19:8b:00:37:
3e:be:b2:34:d7:13:f0:fb:1a:50:88:10:89:08:21:
77:9a:36:9f:4a:4e:43:e5:4d:4f:18:70:76:54:17:
72:20:8c:b1:ad:3f:2f:17:aa:2f:e4:c3:fb:a6:e8:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:3C:70:B3:FE:4D:F6:87:21:72:F9:8F:29:66:7A:8D:3F:BC:7A
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:85:56:a6:b5:82:61:ab:83:06:8a:28:94:ae:c7:42:21:e0:
8c:77:9a:b1:a1:9b:e5:92:0b:b3:16:f6:e0:ae:74:2a:8c:e3:
ff:8f:27:82:57:56:60:bc:1f:a8:67:83:ef:3b:eb:9a:63:0b:
18:fb:2f:9d:bc:61:b4:c7:d9:81:fd:58:70:69:33:18:39:c0:
35:53:01:7f:1b:7f:10:4f:91:ce:08:f6:20:63:c8:8c:2e:23:
be:f1:cd:0c:54:40:06:30:e6:4e:fc:60:14:3f:f9:cf:12:ac:
36:bd:86:51:43:c3:ad:6b:76:5b:7e:a1:ce:d5:cb:d6:87:32:
53:39:11:ab:0e:8e:01:cf:66:22:1c:cf:1b:c3:2e:ea:19:3b:
24:a3:2d:bf:aa:48:3b:39:44:19:e7:b8:ac:04:0c:53:2d:bb:
5c:96:65:ed:74:4c:03:7f:34:70:85:ce:10:a0:26:a8:ca:19:
68:3b:57:80:69:b6:e1:3c:9b:2a:94:e4:53:96:ae:4b:c0:11:
7a:23:ac:91:d5:0e:e2:49:18:66:2c:c0:ae:4f:e2:52:da:3a:
1f:1f:01:bd:25:40:52:c7:e8:e9:57:e2:7a:13:6b:a5:c7:44:
e3:a9:a1:06:86:d0:0d:40:2b:01:a7:f1:76:d0:60:2e:88:e9:
d0:4d:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:37 2026 by rpki-client