
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier: Hl6KxQICht3M6mPG9Wr52z2CkH7g4LUlmFKt/xu7jH0=
Subject key identifier: 4D:C1:A4:12:FB:D6:14:3A:21:21:38:43:67:AE:19:F3:8F:5B:13:01
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial: 0EB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number: 0E95
Signing time: Thu 20 Aug 2026 17:42:11 +0000
Manifest this update: Thu 20 Aug 2026 17:42:11 +0000
Manifest next update: Thu 27 Aug 2026 17:42:11 +0000
Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: JAgFLxS/4rjrXGZ4Z5DmpkClLoBJMAGbqNGZdvliF4s=)
2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: I42/yCc2sXng95yV5V9rJYMIeKVTpAqNcLtZHIVHLHg=)
3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: LK9lFz+9N11fqfPC0jVRHD9FeANyPw0tdvt1fpUzGLQ=)
4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: gUZUG0XGqciwniJGSiDxz0DgvPWakTbupjgNjJySVdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3763 (0xeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Validity
Not Before: Aug 20 17:42:11 2026 GMT
Not After : Aug 27 17:42:11 2026 GMT
Subject: CN=6a873c73-193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:e0:cc:26:8f:ab:7c:47:58:1b:84:00:6b:
18:12:a4:55:ba:43:b0:5e:0a:46:50:c4:ae:67:29:
66:06:a4:93:5e:b5:4c:5e:b7:45:0f:aa:bc:5e:ac:
4f:18:12:65:4e:19:18:1a:75:9d:3f:99:2f:4f:6d:
06:1a:83:b4:7a:01:94:43:5d:9c:cd:f1:6d:d7:3f:
fd:d8:8a:9a:bc:d4:06:8c:fc:3a:78:68:72:8d:31:
7f:20:c8:fd:98:d0:a1:07:41:d9:8f:68:07:e3:11:
72:91:52:c0:64:a5:fd:78:cd:f4:ff:53:04:ba:7b:
18:62:9d:cb:7d:61:92:03:c8:ce:74:5e:60:8e:a0:
36:ad:1b:9e:f5:a2:88:90:7b:e5:b5:2d:b9:de:b4:
3a:6a:2b:62:27:ae:11:7f:66:ee:59:af:8a:85:80:
b1:97:1d:49:39:58:0b:4c:0a:91:c8:93:7b:e0:08:
62:01:54:4f:1d:6e:0b:8b:9d:94:ca:2b:3f:d9:f7:
16:e2:99:a3:9d:f4:c9:d8:32:84:27:e3:07:82:01:
80:b8:6f:36:63:6d:bb:1e:c1:eb:7d:7f:d0:b9:4a:
33:31:31:12:e5:61:15:09:c2:8d:e7:46:80:a3:b9:
49:97:a3:b5:7e:aa:37:7d:ef:67:06:52:21:b5:fc:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:A4:12:FB:D6:14:3A:21:21:38:43:67:AE:19:F3:8F:5B:13:01
X509v3 Authority Key Identifier:
keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:da:a3:24:e2:3b:7a:01:57:0b:eb:02:67:e9:84:8a:82:ba:
57:94:d2:dd:33:50:bf:83:6f:fe:6f:07:bc:a3:0c:d7:c0:8b:
a7:35:4d:9d:cc:f6:a2:f4:e6:1f:ae:46:57:63:e3:6f:38:53:
29:4f:23:cc:8b:25:a6:6e:c8:99:20:8c:8a:e7:e7:9d:79:db:
a1:80:c1:82:fc:95:5c:a1:59:e0:05:3e:58:3d:b8:1a:c4:c8:
c1:41:04:be:b7:16:94:83:84:82:31:66:8e:dd:c0:1d:14:4f:
62:30:b1:ec:29:92:72:87:4b:19:28:f3:30:53:df:c8:5b:a1:
c5:99:3c:ab:76:d6:5f:6b:e6:50:83:f0:0a:6c:9b:2c:fe:3d:
82:75:e1:c1:65:c1:b9:fb:c6:81:cd:15:51:0f:0d:24:72:15:
76:91:00:c2:93:4d:32:87:8f:d0:d1:4e:94:28:b9:6f:b3:f9:
43:ed:b1:7a:6e:ed:db:c5:11:5a:43:1b:f8:d8:23:a5:e4:0e:
e2:8d:83:64:7c:fc:f4:fd:5b:2a:88:b3:ab:d9:f4:a9:dc:58:
2b:1f:12:77:1c:8b:a4:47:ae:f2:12:24:9d:21:f2:d1:25:19:
32:ff:4c:f7:ef:26:d8:7a:2b:27:48:d7:c6:c3:24:dc:6c:b4:
a0:36:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:23 2026 by rpki-client