
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier: CaiA85Q/Oy3T3V0rw6M6unImEBWReomhNs2YZlu4PTc=
Subject key identifier: 53:C4:77:B8:F4:C7:11:5B:26:14:8E:DC:38:BF:5B:BD:F8:24:1F:F4
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 1464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number: 1458
Signing time: Sat 02 May 2026 16:54:46 +0000
Manifest this update: Sat 02 May 2026 16:54:45 +0000
Manifest next update: Sat 09 May 2026 16:54:45 +0000
Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: HFMfC3EjEm/ePiVJ2zk2j/KAE970RwkjPJERvBiFqxE=)
2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: T0Ym6/qSYZ8bInetk9oWjUHQlgplGzQpxO5OFOEk2VM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 16:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5220 (0x1464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: May 2 16:54:45 2026 GMT
Not After : May 9 16:54:45 2026 GMT
Subject: CN=69f62c56-b166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:44:2d:4b:44:4d:91:bf:0c:02:c7:90:8a:
55:f3:3e:74:ae:86:06:6a:44:35:08:c8:3d:5e:12:
f9:0d:e4:eb:5b:2c:06:eb:9b:c5:e6:9c:9f:0a:9f:
b3:e9:23:92:67:5a:a3:9c:e0:f8:11:a5:ba:b5:0b:
60:1b:d7:24:52:a7:6e:c2:b0:e6:1c:d4:76:e4:47:
26:ba:55:3c:c9:4c:d1:53:a7:ba:80:a6:42:8b:be:
c5:9d:36:d7:2f:33:97:ad:2d:c3:6d:d7:2a:31:c1:
b8:7d:f3:45:35:f5:1c:2a:45:9f:d6:f0:2c:b0:1d:
45:79:6a:c6:77:d7:f4:60:f3:6e:a2:e3:91:33:c0:
8e:6b:c7:23:6d:35:14:43:19:d8:62:86:5b:f5:c4:
8e:8a:68:c3:c6:e6:0c:99:00:75:7a:a3:1d:4a:5b:
77:da:b3:a7:74:77:e3:24:2e:cb:83:4a:92:4e:7d:
a0:8e:f4:e5:de:25:c4:67:7a:5a:a0:36:79:c0:4d:
a3:41:12:af:f2:75:03:eb:5f:b5:f3:63:77:58:54:
d5:28:c7:60:72:3d:1f:20:ca:7e:16:23:e5:c7:cf:
8e:31:98:78:34:17:49:04:ef:8a:16:d2:62:f0:e4:
e6:48:18:bc:d2:cf:eb:b0:e3:d8:67:83:be:97:1d:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:77:B8:F4:C7:11:5B:26:14:8E:DC:38:BF:5B:BD:F8:24:1F:F4
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:09:f4:58:f2:9c:40:d2:03:e7:ec:ec:e9:2e:5c:c1:ae:
0b:73:23:4b:6d:c2:08:04:b5:83:67:6a:a8:fc:cf:48:45:a8:
c6:ab:8b:e2:36:ab:be:34:bf:80:0d:f9:23:c6:3e:1b:94:65:
8a:06:9f:d5:3b:06:7e:1e:ab:6f:80:e8:6d:52:d6:78:ca:6c:
b4:7d:77:07:94:ce:6b:73:1b:64:1b:9e:60:ed:0e:09:1c:85:
ac:e5:7b:f7:dd:ad:40:81:35:5c:af:cd:0e:f0:21:40:d3:3d:
e2:2d:1b:75:12:1d:08:b7:b4:21:8e:d0:fa:70:2b:7b:b1:5b:
c5:b9:99:1f:2f:ee:e4:67:b9:ed:87:b9:53:7a:4b:88:7c:0e:
a2:fe:16:7e:02:5b:80:97:73:5e:e9:c2:83:2b:eb:f5:a2:10:
3e:a1:08:85:7f:dd:bd:15:4a:78:ad:97:11:e5:ce:98:91:52:
97:f7:41:61:d4:29:74:2a:2f:8d:14:63:59:15:42:17:61:ed:
4b:55:48:c9:88:c3:be:df:f2:40:32:7f:76:8d:3c:aa:d5:e3:
cf:8c:25:a7:31:47:77:b5:b3:d8:16:cc:42:0a:71:63:c2:98:
7d:50:2d:e8:d7:41:f0:c8:ea:d2:d1:1a:ac:6b:48:72:fb:26:
26:87:13:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx
ODVGMjkwMTQwHhcNMjYwNTAyMTY1NDQ1WhcNMjYwNTA5MTY1NDQ1WjAYMRYwFAYD
VQQDEw02OWY2MmM1Ni1iMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkNELUtETZG/DALHkIpV8z50roYGakQ1CMg9XhL5DeTrWywG65vF5pyfCp+z
6SOSZ1qjnOD4EaW6tQtgG9ckUqduwrDmHNR25EcmulU8yUzRU6e6gKZCi77FnTbX
LzOXrS3DbdcqMcG4ffNFNfUcKkWf1vAssB1FeWrGd9f0YPNuouORM8COa8cjbTUU
QxnYYoZb9cSOimjDxuYMmQB1eqMdSlt32rOndHfjJC7Lg0qSTn2gjvTl3iXEZ3pa
oDZ5wE2jQRKv8nUD61+182N3WFTVKMdgcj0fIMp+FiPlx8+OMZh4NBdJBO+KFtJi
8OTmSBi80s/rsOPYZ4O+lx3TQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPEd7j0
xxFbJhSO3Di/W734JB/0MB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw
RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2
d2FZMEVwaGxYYWdZWHlrQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGREJ9FjynEDSA+fs7OkuXMGuC3MjS23CCAS1g2dqqPzPSEWoxquL4jarvjS/
gA35I8Y+G5Rligaf1TsGfh6rb4DobVLWeMpstH13B5TOa3MbZBueYO0OCRyFrOV7
992tQIE1XK/NDvAhQNM94i0bdRIdCLe0IY7Q+nAre7FbxbmZHy/u5Ge57Ye5U3pL
iHwOov4WfgJbgJdzXunCgyvr9aIQPqEIhX/dvRVKeK2XEeXOmJFSl/dBYdQpdCov
jRRjWRVCF2HtS1VIyYjDvt/yQDJ/do08qtXjz4wlpzFHd7Wz2BbMQgpxY8KYfVAt
6NdB8Mjq0tEarGtIcvsmJocTUw==
-----END CERTIFICATE-----
Generated at Sun May 3 02:00:18 2026 by rpki-client