
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: uCvElXRBEaNn8fEP3zvm5U6+UN+Q/ltgZYJ3rR/0wdo=
Subject key identifier: 2E:84:2E:9E:F2:E1:7E:3B:AE:B8:C5:1D:98:FA:03:75:1B:CE:3A:E7
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0C10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0BF9
Signing time: Tue 18 Aug 2026 19:13:14 +0000
Manifest this update: Tue 18 Aug 2026 19:13:13 +0000
Manifest next update: Tue 25 Aug 2026 19:13:13 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: kkCKgDklzqx/QZJKmP0JHSqI/5SlhGE/jvXIxOHT68Q=)
2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Aug 18 19:13:13 2026 GMT
Not After : Aug 25 19:13:13 2026 GMT
Subject: CN=6a84aeca-87d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a7:22:09:72:df:82:1d:05:39:bf:55:04:
b6:c7:0c:1e:2b:6d:54:ee:02:b7:57:c7:29:78:6a:
09:02:86:b9:4c:59:60:82:c0:a5:ea:29:0e:11:33:
95:5d:04:15:49:0b:ca:96:41:f7:db:c4:30:ba:9a:
09:a3:46:30:cc:9a:d4:0f:ab:52:b9:94:39:32:18:
dc:2e:b9:ea:0a:fa:8f:7b:cc:6c:22:0d:91:d2:da:
6d:8e:ad:ec:54:1d:92:94:16:2b:16:90:2d:57:8b:
33:c6:ba:5e:6b:a1:35:a1:cb:07:b9:34:4f:e7:de:
7b:90:c3:9f:7f:4d:45:8c:22:ec:b1:22:38:5e:3a:
d6:61:c9:07:c9:d2:ed:77:a0:2d:f0:11:96:41:7e:
b4:c2:44:f6:9d:26:90:e5:00:52:b1:c2:f5:6c:a3:
13:75:a0:5b:28:16:bf:1b:43:6d:56:d8:a7:1e:1d:
66:20:1b:c3:a0:94:8d:10:8b:06:56:0d:a6:a4:a2:
f2:94:06:13:8d:93:b7:fb:d2:17:d0:57:91:14:9f:
bb:eb:1e:64:12:b4:11:65:72:30:e5:f3:48:f6:d8:
fa:81:99:99:cd:16:57:05:83:9e:49:44:4b:bd:6d:
e5:6f:a3:98:8a:ce:e7:53:a6:0f:08:e6:53:1e:4a:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:2E:9E:F2:E1:7E:3B:AE:B8:C5:1D:98:FA:03:75:1B:CE:3A:E7
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:2d:a5:9e:aa:6a:25:40:0a:bb:1f:08:63:1c:aa:ac:f1:
b5:20:e1:0b:9a:18:11:48:1e:93:7e:89:b3:32:48:0d:6d:1f:
7f:fe:17:36:a0:83:a6:9c:f5:72:bc:5a:b3:d2:8c:3f:db:f7:
a3:98:6f:66:a7:f0:eb:c4:6d:63:58:92:b3:07:3b:81:83:a3:
53:3d:ad:d6:31:86:2c:22:b7:88:2c:c8:0a:2f:34:ed:0c:bc:
1e:65:2f:31:e6:9c:62:06:6e:5f:d3:58:f2:ce:d4:06:10:9f:
d7:68:2a:8a:7a:93:c4:4e:6e:93:d1:f9:24:b7:31:24:78:37:
d9:02:92:2e:9c:b6:79:8f:c6:29:7e:1e:fc:56:20:f9:e1:1a:
79:a7:07:8d:19:1a:3b:33:c4:83:a3:b9:d1:c0:8b:a0:14:4b:
39:f1:fc:e3:01:44:22:98:0d:75:eb:b4:2f:0e:d7:ab:0c:79:
fd:d8:33:58:e8:fd:e0:93:96:1a:1a:aa:33:7e:ce:5e:ef:6b:
db:88:52:4f:38:02:7c:1b:cc:13:b1:7c:c2:d8:58:a2:42:36:
b7:38:73:c3:24:a5:41:00:d3:c1:29:7f:69:44:ae:cd:e2:e3:
cb:f8:39:49:d1:d3:c3:b8:6b:fc:66:5d:97:1c:8d:1d:7a:30:
02:4d:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 23:13:25 2026 by rpki-client