
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier: iXhoS8c+BxW2itHksn+564igBb9P4hQZCQeL7XffzCI=
Subject key identifier: 52:2F:16:50:4B:CD:0B:11:D4:C5:67:10:93:8C:B8:AF:F8:76:69:76
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number: 030E
Signing time: Fri 21 Aug 2026 00:59:58 +0000
Manifest this update: Fri 21 Aug 2026 00:59:58 +0000
Manifest next update: Fri 28 Aug 2026 00:59:58 +0000
Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: ejeNemxDKXWSt9mTfol+aOMdFBjCKcnJ+HDTZ75J054=)
2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=)
3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: 4SMwt+gACInnRK5OGYg5pUcdCWuk0YqF9HQ/Xt+IzcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Validity
Not Before: Aug 21 00:59:58 2026 GMT
Not After : Aug 28 00:59:58 2026 GMT
Subject: CN=6a87a30e-cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:65:ac:19:08:1d:e6:43:93:33:3f:69:f8:
88:69:d2:e1:ff:a7:29:58:1e:e8:64:65:d0:2c:06:
90:fb:32:99:cb:c7:01:cc:1f:d9:06:df:73:aa:47:
6f:7f:be:73:e8:6f:3b:6c:1f:ca:72:08:95:9c:32:
b8:c3:2c:21:41:09:6f:7c:27:d8:4d:31:7e:18:2e:
ab:4a:4e:92:5e:c9:a0:bb:7a:c0:9e:a5:83:f4:a1:
51:ca:3f:5c:bc:3e:4c:b4:06:ee:ba:5c:dc:d7:69:
62:1b:d8:c3:55:0d:52:0f:8e:dc:6f:36:12:fd:f6:
0d:a7:3e:eb:a1:2f:fe:fb:46:a8:88:dd:4c:ab:55:
c8:c1:8b:8c:ff:41:d1:5b:2a:63:89:2a:00:38:06:
b8:e1:6a:e0:49:ee:1d:66:ee:90:3a:05:22:e4:32:
8d:f8:2b:c4:0b:29:7d:65:1c:d2:ae:26:fa:f4:b9:
a4:c8:3e:8c:44:d8:00:d8:9f:6d:a3:14:96:ce:fe:
54:1d:fb:3b:1c:65:fd:10:c7:8a:3b:dd:2f:d1:92:
53:a4:35:33:02:09:2d:d0:f6:b8:ee:cf:fa:5b:5e:
10:98:8d:41:f4:fa:cb:c4:9e:09:b4:40:bb:3c:59:
09:de:dd:c8:4e:74:6b:fa:63:35:70:4a:cc:66:ad:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:16:50:4B:CD:0B:11:D4:C5:67:10:93:8C:B8:AF:F8:76:69:76
X509v3 Authority Key Identifier:
keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1a:0e:08:73:4f:18:18:c5:a3:ba:d6:2e:a5:d1:48:64:e7:
3b:31:f3:47:83:28:f7:1e:c9:85:1c:94:de:9e:bd:d7:45:f8:
4c:d7:d1:e8:2a:7a:d3:20:57:60:7d:d0:1f:3c:24:c8:5c:b5:
db:ff:31:f5:df:ca:47:4c:04:79:42:78:61:b8:62:02:27:72:
27:d8:e4:be:6a:5a:16:ab:1f:94:96:18:ac:ba:82:1a:13:43:
6d:72:dc:5b:75:0d:23:5a:f8:15:1e:eb:22:1b:c5:01:e2:2b:
30:f8:66:33:c6:8e:85:89:95:6e:d5:57:08:39:8c:d1:8a:b1:
f9:fa:73:12:30:8f:0e:71:aa:4f:02:d9:c0:41:73:5f:3d:c7:
b1:4d:56:9f:12:29:c8:c9:c3:f4:db:dd:26:a1:ec:5e:f0:68:
47:e7:2d:23:82:d4:e6:af:e1:d7:d5:91:13:05:11:8c:f6:07:
a7:83:62:4d:5f:c9:21:dc:59:84:50:e9:a2:70:df:b9:f2:23:
ca:e4:5c:12:bc:c9:23:40:ae:88:47:c0:53:71:9d:ed:d5:ca:
d2:90:48:89:ca:f7:aa:45:45:2c:05:47:13:bd:0e:49:23:80:
be:2d:2d:42:39:d3:7b:9e:aa:5f:96:3b:06:a4:78:0e:1f:90:
1c:bc:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:06 2026 by rpki-client