
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier: L3ERQ4Q5ZpaGWFTcWLM1gbnQO0ew74VFD/dVkX3TctQ=
Subject key identifier: 66:B0:86:F2:64:61:06:9D:2C:5F:2D:12:97:73:19:56:89:61:0D:95
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial: 0E68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number: 0E4D
Signing time: Sat 04 Apr 2026 17:39:48 +0000
Manifest this update: Sat 04 Apr 2026 17:39:47 +0000
Manifest next update: Sat 11 Apr 2026 17:39:47 +0000
Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: ZEMAcZiNZqHQSZ8ned6Mc49eqYHs1efCtmtqtB5V43U=)
2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: rCv4VZFxlM5Jq4C3j2l3PuKDpBe2qyl52Dmb9dWtw1M=)
3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: 0lV+81b9RxF3wcx4IicrWRetZXK3VtJEDFXrSkR6osQ=)
4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: Eedt5weKXhob6WahAhHqHEFNYr+gasvFvblJrgH9PEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Validity
Not Before: Apr 4 17:39:47 2026 GMT
Not After : Apr 11 17:39:47 2026 GMT
Subject: CN=69d14ce4-da84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:b9:34:a5:6b:e4:b1:0f:a9:18:89:f1:74:
8a:92:6d:7b:c2:78:4a:dc:6a:e5:db:71:46:51:61:
b8:65:48:91:4f:29:5b:be:e5:dc:59:d9:61:8f:31:
22:f8:e7:91:af:d3:11:4a:0e:92:ea:57:b4:41:5e:
8d:32:66:ab:06:41:0a:d0:f0:72:98:0b:39:2a:80:
a2:24:61:31:11:51:3d:19:5a:68:bf:58:c5:f2:d7:
4f:cc:e5:88:0d:c3:e0:7e:69:25:17:20:9a:44:76:
86:3a:a5:5b:9d:13:9f:b4:9d:3f:8e:83:15:79:73:
69:6b:8f:b2:dc:cf:4c:39:4a:ba:22:93:a0:7a:ba:
8a:b7:2a:2b:52:2b:f8:2d:18:40:58:f3:a8:b4:fd:
12:d0:0e:c9:2f:5c:b5:6a:9c:70:7d:7a:30:78:f0:
6d:9d:6a:d8:ce:66:4f:00:29:9c:7a:3d:27:83:3e:
d6:2f:6e:cc:53:86:cb:3a:7d:cf:47:d1:97:d1:52:
35:55:1c:8d:d3:a3:00:9f:55:50:2c:3e:c1:0a:d4:
75:c8:2f:40:1c:19:fa:c1:b6:5e:57:4d:c5:6d:97:
36:bf:a9:5e:38:95:73:54:ba:82:66:4c:ad:98:a6:
e7:96:96:72:ce:21:d5:9b:5e:ba:b1:f2:c3:ec:be:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:86:F2:64:61:06:9D:2C:5F:2D:12:97:73:19:56:89:61:0D:95
X509v3 Authority Key Identifier:
keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d7:df:74:fd:fc:34:a4:77:7e:6b:c7:ed:e6:29:fa:74:17:
a7:66:a4:1a:a2:c1:cd:ef:62:94:05:43:b1:84:70:98:1e:bf:
8c:0c:37:e8:ed:22:ac:26:5f:bb:39:a8:3d:aa:72:b5:db:25:
12:2d:e3:53:4c:8d:39:cc:d7:97:3b:90:9e:e6:58:25:db:49:
3a:64:1e:bc:52:17:06:80:c0:ff:3c:74:cd:38:30:a4:ca:1d:
81:ad:cb:72:26:23:3c:0c:13:09:af:5c:c9:4c:88:35:63:73:
bc:35:c7:37:cb:55:e0:87:0c:cb:2c:77:83:4e:25:db:ad:e1:
72:74:e6:b3:60:3b:61:f7:4a:dd:a1:4e:c1:78:ff:c2:0d:3d:
71:b7:7e:3a:f0:13:3a:80:f8:b8:17:55:7c:3b:b8:ed:5f:38:
e9:a9:81:71:86:31:c0:25:d1:5d:ac:a6:b6:85:5e:40:f9:81:
13:bc:bc:d1:4f:0b:20:c8:ee:28:fb:6c:d5:13:7e:02:c4:89:
87:7f:1b:cf:f9:ee:e0:16:f6:4b:7c:e7:46:4b:85:54:fb:d8:
86:30:98:09:05:91:18:0d:b9:6e:83:b9:c9:f7:53:ae:a8:c2:
c7:a3:a8:98:b6:fb:98:38:bf:de:50:4e:99:48:17:66:f3:ae:
af:7c:6e:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0
QzA4OUZDNTMwHhcNMjYwNDA0MTczOTQ3WhcNMjYwNDExMTczOTQ3WjAYMRYwFAYD
VQQDEw02OWQxNGNlNC1kYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJO5NKVr5LEPqRiJ8XSKkm17wnhK3Grl23FGUWG4ZUiRTylbvuXcWdlhjzEi
+OeRr9MRSg6S6le0QV6NMmarBkEK0PBymAs5KoCiJGExEVE9GVpov1jF8tdPzOWI
DcPgfmklFyCaRHaGOqVbnROftJ0/joMVeXNpa4+y3M9MOUq6IpOgerqKtyorUiv4
LRhAWPOotP0S0A7JL1y1apxwfXowePBtnWrYzmZPACmcej0ngz7WL27MU4bLOn3P
R9GX0VI1VRyN06MAn1VQLD7BCtR1yC9AHBn6wbZeV03FbZc2v6leOJVzVLqCZkyt
mKbnlpZyziHVm166sfLD7L6LSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGawhvJk
YQadLF8tEpdzGVaJYQ2VMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF
ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR
eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqtffdP38NKR3fmvH7eYp+nQXp2akGqLBze9ilAVDsYRwmB6/jAw36O0irCZf
uzmoPapytdslEi3jU0yNOczXlzuQnuZYJdtJOmQevFIXBoDA/zx0zTgwpModga3L
ciYjPAwTCa9cyUyINWNzvDXHN8tV4IcMyyx3g04l263hcnTms2A7YfdK3aFOwXj/
wg09cbd+OvATOoD4uBdVfDu47V846amBcYYxwCXRXaymtoVeQPmBE7y80U8LIMju
KPts1RN+AsSJh38bz/nu4Bb2S3znRkuFVPvYhjCYCQWRGA25boO5yfdTrqjCx6Oo
mLb7mDi/3lBOmUgXZvOur3xuIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:33 2026 by rpki-client