
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier: 8elG/PqWF/R0GucfmOhUnazROudTNT9vsdfpxac+qpQ=
Subject key identifier: DF:85:DD:44:1E:17:C4:7A:2B:01:CB:34:23:88:F7:64:8E:6E:B9:87
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial: 08D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number: 08C1
Signing time: Tue 02 Jun 2026 20:28:23 +0000
Manifest this update: Tue 02 Jun 2026 20:28:23 +0000
Manifest next update: Tue 09 Jun 2026 20:28:23 +0000
Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: BgKBKyA55L+kdaKBukK5INTNg6zk01+mvYJi+hBH/xc=)
2: B019C596499E11EBA61D7146C4F9AE02.roa (hash: vmFeCCqd0p+xBwwBiH862ux9Uk8d+Hb/Tq8YBNVAOrY=)
3: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: t3r3ct1v62CkRoqbDTfbFNF8KY0PM5gtyGYmsu7VXes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Validity
Not Before: Jun 2 20:28:23 2026 GMT
Not After : Jun 9 20:28:23 2026 GMT
Subject: CN=6a1f3ce7-8e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:d8:be:2d:2a:a0:7b:ce:12:8f:ac:a0:d0:
99:44:98:3a:e3:c2:16:21:a3:0b:f2:50:52:2f:e0:
e4:0f:85:d8:60:2f:88:24:7b:ba:ea:6f:98:b3:dd:
60:3d:17:49:80:16:91:26:f7:96:63:25:a2:57:07:
8c:75:b1:f4:46:38:22:9b:d8:f6:26:d8:a1:c9:87:
99:d8:19:f8:b6:9e:20:00:bc:99:0f:1b:56:9c:ba:
ca:e4:50:03:57:77:9c:59:ed:b6:24:5c:a4:6e:30:
2e:95:a7:c0:e3:23:71:d7:30:7c:2e:af:f8:11:6f:
f8:c2:ae:65:7f:8e:2c:b9:7e:35:65:fc:c7:f0:6c:
8f:12:97:a5:eb:7a:80:dd:2f:19:ea:b0:13:71:ca:
2e:a6:d0:40:d1:fd:a8:dd:e3:4b:51:a3:5a:f9:11:
94:2b:66:11:1f:2f:d2:10:a9:f7:5e:e2:26:9d:5a:
dc:54:35:ad:f6:72:18:fd:54:7b:6b:8e:c4:8e:6f:
54:3e:cc:d3:d7:02:28:24:2d:f0:57:17:9a:50:97:
69:96:f3:6a:4e:f8:e5:84:df:a7:0e:c9:ad:c6:e4:
99:d9:ab:76:e7:1c:74:c6:9e:49:0d:6c:b3:dd:80:
bf:4d:48:a5:44:cb:cc:be:25:0e:20:8b:84:08:17:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:DD:44:1E:17:C4:7A:2B:01:CB:34:23:88:F7:64:8E:6E:B9:87
X509v3 Authority Key Identifier:
keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:c8:fc:c0:d4:75:5e:2c:79:42:ad:a2:b0:3d:41:ea:2f:
be:63:e6:42:99:57:3f:23:2d:fb:fb:f3:86:e1:b4:10:2e:e2:
6b:5b:d4:90:13:72:7c:24:43:c8:54:f9:a3:d5:ce:f5:7f:7a:
3a:fd:39:78:0b:9f:e0:03:72:5a:29:48:8d:ea:e5:5b:b6:dd:
60:51:90:76:cc:a7:32:76:74:56:53:89:ae:15:0a:84:6a:02:
7c:24:65:00:c9:a4:0a:f1:50:a7:5e:b1:e9:b3:40:e3:51:42:
cd:06:35:c9:23:81:13:5d:b8:74:dd:3c:25:fd:8d:ee:90:19:
69:7c:c5:28:73:d4:8a:b0:15:c9:2f:8b:69:5e:d7:eb:dd:0a:
96:98:49:c0:13:17:8c:53:45:85:5e:5f:3b:4e:53:f3:6c:ad:
83:9e:9a:01:0b:76:3e:8a:73:76:12:b3:3b:a8:b1:17:50:a3:
9c:81:2d:d2:f3:82:29:7c:36:d0:26:7b:c1:11:69:f3:cd:46:
88:28:1f:77:90:8c:b9:3e:9d:25:c1:85:4d:d9:5a:fb:9f:7e:
67:0f:8f:88:26:a9:4e:ca:03:88:a4:ac:da:97:4c:b2:bf:5e:
d3:86:14:5a:cf:c0:3a:94:f2:db:c7:3b:8f:ba:77:ba:60:cf:
63:b9:8c:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5
OTAwRjc3ODAwHhcNMjYwNjAyMjAyODIzWhcNMjYwNjA5MjAyODIzWjAYMRYwFAYD
VQQDEw02YTFmM2NlNy04ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuo7Yvi0qoHvOEo+soNCZRJg648IWIaML8lBSL+DkD4XYYC+IJHu66m+Ys91g
PRdJgBaRJveWYyWiVweMdbH0Rjgim9j2JtihyYeZ2Bn4tp4gALyZDxtWnLrK5FAD
V3ecWe22JFykbjAulafA4yNx1zB8Lq/4EW/4wq5lf44suX41ZfzH8GyPEpel63qA
3S8Z6rATccouptBA0f2o3eNLUaNa+RGUK2YRHy/SEKn3XuImnVrcVDWt9nIY/VR7
a47Ejm9UPszT1wIoJC3wVxeaUJdplvNqTvjlhN+nDsmtxuSZ2at25xx0xp5JDWyz
3YC/TUilRMvMviUOIIuECBd6qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+F3UQe
F8R6KwHLNCOI92SObrmHMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx
MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R
LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIP3I/MDUdV4seUKtorA9QeovvmPmQplXPyMt+/vzhuG0EC7ia1vUkBNyfCRD
yFT5o9XO9X96Ov05eAuf4ANyWilIjerlW7bdYFGQdsynMnZ0VlOJrhUKhGoCfCRl
AMmkCvFQp16x6bNA41FCzQY1ySOBE124dN08Jf2N7pAZaXzFKHPUirAVyS+LaV7X
690KlphJwBMXjFNFhV5fO05T82ytg56aAQt2PopzdhKzO6ixF1CjnIEt0vOCKXw2
0CZ7wRFp881GiCgfd5CMuT6dJcGFTdla+59+Zw+PiCapTsoDiKSs2pdMsr9e04YU
Ws/AOpTy28c7j7p3umDPY7mMqg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:23:15 2026 by rpki-client