
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File: o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier: 6KZ3xCyKK4tA2KIeMLlGYIDJ3rW5j+NBdrvVsKtMQ2k=
Subject key identifier: 5C:15:F2:E7:CB:57:65:E8:CF:A3:88:B8:D4:C0:54:FA:DE:DE:64:50
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number: 40
Signing time: Fri 05 Jun 2026 08:56:44 +0000
Manifest this update: Fri 05 Jun 2026 08:56:43 +0000
Manifest next update: Fri 12 Jun 2026 08:56:43 +0000
Files and hashes: 1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: a4tGm7/IWGfNJJgt9O76yIUBVVJgpdf9prxEgpTYuoM=)
2: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
3: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Validity
Not Before: Jun 5 08:56:43 2026 GMT
Not After : Jun 12 08:56:43 2026 GMT
Subject: CN=6a228f4c-e63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:df:d4:44:60:38:2e:96:7f:cf:0a:33:e9:
14:c9:3b:29:bf:9a:5d:58:a1:4b:3d:97:fc:28:5c:
86:00:c7:5a:21:d7:4c:61:a7:ff:46:60:de:8e:2f:
d8:e7:67:cb:67:c5:ce:ce:8c:17:f0:9e:2e:12:22:
63:bf:38:f8:06:a3:5f:92:4d:66:cd:05:41:4e:71:
35:a7:bf:17:50:e5:bf:5c:b3:43:9f:6b:ff:09:d4:
df:19:db:0a:0f:b0:84:6b:42:07:1e:5f:72:c7:6e:
1c:56:ac:2e:93:81:d1:79:5a:f1:2b:f4:2d:5e:0c:
b4:b6:95:74:26:32:48:78:a3:03:23:4c:16:35:9b:
c9:ad:31:e9:68:27:39:51:80:ff:05:31:fc:30:15:
64:f3:2e:dd:23:02:6f:e1:f2:8d:9e:9f:11:6c:cd:
53:72:d0:59:c0:26:d5:f7:6b:e8:f8:ec:15:c5:57:
d2:3d:2d:f9:66:16:8b:d0:ee:03:79:c3:2f:54:05:
29:7a:01:b9:05:d7:dd:f5:91:a8:ad:8b:a8:c7:f2:
83:1c:a5:47:11:49:89:8e:84:8a:0f:04:15:ac:7a:
c7:1e:f7:31:0d:54:91:9c:8e:43:da:90:c4:27:15:
60:4b:16:6b:5e:c9:36:b5:87:c5:d7:2f:ad:8a:3a:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:F2:E7:CB:57:65:E8:CF:A3:88:B8:D4:C0:54:FA:DE:DE:64:50
X509v3 Authority Key Identifier:
keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:1c:d1:3a:0c:70:a8:38:ef:39:8c:d6:38:82:b5:b8:ce:
c4:3e:11:f3:77:b3:f7:4d:bd:16:22:33:5b:08:bf:bd:68:ed:
e5:95:8e:4c:6b:0b:87:87:b2:19:16:f0:9f:9b:07:fc:bb:94:
d3:12:66:46:e6:ba:8a:0f:7b:72:4c:84:47:6d:92:c4:d6:f0:
ee:ae:96:d3:cf:8d:44:dd:d1:2b:fc:46:59:b9:68:87:1f:25:
b0:97:91:f5:da:34:d4:07:71:4b:72:a7:15:94:c3:a1:e8:79:
b6:5c:13:8c:67:d5:eb:66:5f:0c:11:82:db:90:00:2f:e7:81:
ef:87:ad:96:2e:83:37:9c:ad:d2:1b:e3:26:68:18:dc:bb:eb:
35:1b:11:b2:93:82:67:a7:de:af:ca:47:f4:1e:7b:8c:ff:0f:
74:e9:90:2e:dc:ec:5e:2c:80:9d:6e:74:6c:ed:45:35:97:78:
28:1e:71:97:cf:55:38:79:0a:83:8b:a1:c6:b3:a2:36:0a:17:
50:cc:7e:92:88:58:f0:70:06:39:70:fc:31:fa:fc:d0:92:03:
ad:dd:02:47:1c:55:3a:d9:85:66:67:6e:0c:68:83:63:67:4d:
3c:14:12:d2:fc:b0:d0:79:2b:e0:6f:77:d9:b1:64:86:85:f6:
70:16:5f:91
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzhFMjExMC8GA1UEBRMoQTM0NjY0OEI0QURGNEZDNUI0NzdDN0RBMkNGMDVCMTY4
NDM3REI1RDAeFw0yNjA2MDUwODU2NDNaFw0yNjA2MTIwODU2NDNaMBgxFjAUBgNV
BAMTDTZhMjI4ZjRjLWU2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8M9/URGA4LpZ/zwoz6RTJOym/ml1YoUs9l/woXIYAx1oh10xhp/9GYN6OL9jn
Z8tnxc7OjBfwni4SImO/OPgGo1+STWbNBUFOcTWnvxdQ5b9cs0Ofa/8J1N8Z2woP
sIRrQgceX3LHbhxWrC6TgdF5WvEr9C1eDLS2lXQmMkh4owMjTBY1m8mtMeloJzlR
gP8FMfwwFWTzLt0jAm/h8o2enxFszVNy0FnAJtX3a+j47BXFV9I9LflmFovQ7gN5
wy9UBSl6AbkF1931kaiti6jH8oMcpUcRSYmOhIoPBBWsesce9zENVJGcjkPakMQn
FWBLFmteyTa1h8XXL62KOjrHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXBXy58tX
ZejPo4i41MBU+t7eZFAwHwYDVR0jBBgwFoAUo0Zki0rfT8W0d8faLPBbFoQ3210w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OEUyL0M4RjRBOEUyMDc5
OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhXMGQ4ZmFMUEJiRm9RMzIx
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbzBaa2kwcmZUOFcwZDhmYUxQQmJGb1EzMjEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
OEUyL0M4RjRBOEUyMDc5OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhX
MGQ4ZmFMUEJiRm9RMzIxMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgIRzROgxwqDjvOYzWOIK1uM7EPhHzd7P3Tb0WIjNbCL+9aO3llY5MawuHh7IZ
FvCfmwf8u5TTEmZG5rqKD3tyTIRHbZLE1vDurpbTz41E3dEr/EZZuWiHHyWwl5H1
2jTUB3FLcqcVlMOh6Hm2XBOMZ9XrZl8MEYLbkAAv54Hvh62WLoM3nK3SG+MmaBjc
u+s1GxGyk4Jnp96vykf0HnuM/w906ZAu3OxeLICdbnRs7UU1l3goHnGXz1U4eQqD
i6HGs6I2ChdQzH6SiFjwcAY5cPwx+vzQkgOt3QJHHFU62YVmZ24MaINjZ008FBLS
/LDQeSvgb3fZsWSGhfZwFl+R
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:27:57 2026 by rpki-client