
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier: Rq7NteixBFzByRtaUdPsk1ixOempXrqz08x8U2imwTo=
Subject key identifier: F8:46:F5:82:DA:77:A3:E5:77:A1:D7:96:18:9E:F6:1C:3C:4A:79:71
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 0AE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number: 0AC6
Signing time: Sun 26 Apr 2026 19:22:41 +0000
Manifest this update: Sun 26 Apr 2026 19:22:41 +0000
Manifest next update: Sun 03 May 2026 19:22:41 +0000
Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: LiBmrqpByWe8j4JWQBj339Scl2fcX/HOlxkq0HNcdeE=)
2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: mOy9DmAYzZsYbEQhE2U9Un7tfVf8mtaB1bU3ox64k7k=)
3: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: V0PmmwgVntdjWwqgOyfzApLR6YpbY/HvQB4HeE20/PU=)
4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: gy8HkzaIVkMxQWo5W1rlovO0xcxrRwNFB9e9LFzD4L4=)
5: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: 69Hh0J+L+6D5El7B0qbhyv5Br90p9YiCbQw2deQTNhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Validity
Not Before: Apr 26 19:22:41 2026 GMT
Not After : May 3 19:22:41 2026 GMT
Subject: CN=69ee6601-7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:4b:37:0d:c4:ec:96:a4:52:04:af:50:3a:
85:e6:ee:37:1b:d5:85:b1:5d:cf:44:a1:9c:a0:f5:
d7:64:ad:e9:43:79:c4:68:ba:1e:59:ca:da:f8:dc:
14:55:75:20:65:f0:ee:66:9f:be:80:e5:a1:a1:fd:
bd:ac:b3:5c:f4:4d:70:1e:86:fe:d2:da:73:81:8d:
ea:25:87:64:21:28:26:5a:7b:1a:06:4b:a9:27:5f:
db:81:da:63:87:8c:9d:53:09:63:e7:61:17:53:8c:
7f:40:5d:00:4d:5d:a9:90:88:0f:38:52:eb:5a:7a:
a8:36:d0:32:01:13:42:0d:1d:bc:41:e3:7e:ad:9a:
7f:d8:d7:0e:8b:43:34:5a:4c:39:fe:58:ef:6b:4c:
fe:6e:72:d9:e9:36:47:d5:f2:ac:f5:b5:fe:09:b0:
1d:8d:41:ee:f2:05:4d:7b:f6:d6:1b:eb:45:17:ab:
4e:a1:47:93:c4:ae:ee:ce:1a:ff:36:7b:a2:de:44:
89:67:2e:6d:cb:c7:56:42:6c:d8:bf:57:f4:5d:0a:
38:f9:6d:32:ff:bc:61:50:bd:08:c4:d0:f2:f8:c4:
e5:0b:0b:f9:59:09:d8:5d:e1:18:3b:91:13:15:0b:
74:c7:90:9a:33:02:5d:8d:cf:b0:97:4d:8e:e5:e0:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:F5:82:DA:77:A3:E5:77:A1:D7:96:18:9E:F6:1C:3C:4A:79:71
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:2e:d4:ea:07:1f:06:99:b7:01:51:bd:8e:b7:f8:70:b5:
1c:80:f4:6b:b3:76:ec:21:4c:95:15:65:e1:e9:62:82:ea:11:
d0:7b:69:98:52:1a:a5:99:37:12:d7:99:8c:93:fc:b0:3f:c2:
0f:74:e5:d6:4e:e9:9b:98:a1:bf:98:f5:79:1d:c8:fc:c4:28:
7f:fe:c5:c5:0b:10:dc:0c:3d:d7:84:28:4d:c0:12:b8:a1:e3:
91:6f:8f:a8:e3:21:d9:13:55:1b:84:67:8c:88:0e:9b:3b:c4:
eb:da:a6:b1:f4:a9:4e:a3:5f:32:17:9b:fc:e6:14:d8:a6:76:
cf:3c:79:4a:bf:c1:03:bb:f0:a7:f6:b3:58:7e:6b:46:a7:60:
b3:c2:cc:9f:3b:76:d9:68:b1:13:53:0f:57:40:0a:4f:a0:43:
c3:42:d8:1a:16:92:36:53:62:b7:c5:27:d8:ac:76:0b:af:2f:
82:ff:e0:2f:f2:12:3d:cf:8d:27:ac:0c:42:b8:12:8e:40:3c:
3e:5d:3f:f3:87:92:fc:53:fa:34:0c:8e:1b:3d:5a:d8:e4:0b:
bd:fb:41:c5:42:6b:a9:fe:86:a8:dc:c0:3f:af:40:5a:46:17:
f1:86:0d:99:08:66:1a:9a:93:bd:fe:df:98:fe:6a:f0:94:a9:
77:9c:aa:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1
M0EwM0FCODYwHhcNMjYwNDI2MTkyMjQxWhcNMjYwNTAzMTkyMjQxWjAYMRYwFAYD
VQQDEw02OWVlNjYwMS03YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjL5LNw3E7JakUgSvUDqF5u43G9WFsV3PRKGcoPXXZK3pQ3nEaLoeWcra+NwU
VXUgZfDuZp++gOWhof29rLNc9E1wHob+0tpzgY3qJYdkISgmWnsaBkupJ1/bgdpj
h4ydUwlj52EXU4x/QF0ATV2pkIgPOFLrWnqoNtAyARNCDR28QeN+rZp/2NcOi0M0
Wkw5/ljva0z+bnLZ6TZH1fKs9bX+CbAdjUHu8gVNe/bWG+tFF6tOoUeTxK7uzhr/
Nnui3kSJZy5ty8dWQmzYv1f0XQo4+W0y/7xhUL0IxNDy+MTlCwv5WQnYXeEYO5ET
FQt0x5CaMwJdjc+wl02O5eBa2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhG9YLa
d6Pld6HXlhie9hw8SnlxMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz
RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht
cG5teHRnbHR0blJUb0RxNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUBou1OoHHwaZtwFRvY63+HC1HID0a7N27CFMlRVl4eliguoR0HtpmFIapZk3
EteZjJP8sD/CD3Tl1k7pm5ihv5j1eR3I/MQof/7FxQsQ3Aw914QoTcASuKHjkW+P
qOMh2RNVG4RnjIgOmzvE69qmsfSpTqNfMheb/OYU2KZ2zzx5Sr/BA7vwp/azWH5r
Rqdgs8LMnzt22WixE1MPV0AKT6BDw0LYGhaSNlNit8Un2Kx2C68vgv/gL/ISPc+N
J6wMQrgSjkA8Pl0/84eS/FP6NAyOGz1a2OQLvftBxUJrqf6GqNzAP69AWkYX8YYN
mQhmGpqTvf7fmP5q8JSpd5yq7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:16:08 2026 by rpki-client