
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: fANLOBhv/ATXOJ4IdMCaEr8KuOp3P2G+Zw5icLvC1zE=
Subject key identifier: 3F:05:7E:1A:66:AF:F1:84:E0:E3:3D:04:C1:6A:76:34:C9:03:47:54
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: 013B
Signing time: Tue 23 Jun 2026 05:36:32 +0000
Manifest this update: Tue 23 Jun 2026 05:36:32 +0000
Manifest next update: Tue 30 Jun 2026 05:36:32 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: tIK2+KCZTsbHk3OVq56LBqMWWNfVBGqGmOgy6lbU0qo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Jun 23 05:36:32 2026 GMT
Not After : Jun 30 05:36:32 2026 GMT
Subject: CN=6a3a1b60-e62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:e0:be:11:b3:92:bc:0f:9f:2a:ff:c0:68:
c6:13:d9:20:05:05:8f:bc:95:9e:99:5a:97:2c:fe:
86:1d:63:45:34:e2:cb:a3:f2:86:fc:03:fd:e4:b9:
29:6a:41:93:a4:27:35:e9:5a:f7:96:49:c0:fd:ee:
0c:23:f2:e5:a6:ef:90:23:ef:82:9c:33:dc:9a:ce:
f4:67:bb:2b:3e:76:de:97:8f:cf:cf:b4:33:41:32:
c5:16:27:f3:ba:d5:c8:b4:9b:9b:89:13:db:f0:c6:
41:f7:15:2d:39:e6:ea:7e:0c:98:6e:15:85:94:be:
fe:39:70:89:a7:cf:2b:f6:94:e8:87:41:00:70:4d:
b7:00:27:95:d8:86:45:a4:34:9f:bb:41:58:fb:92:
61:b7:3a:0d:28:c6:a0:d3:90:d5:17:e7:8f:6c:f6:
90:09:9b:5e:21:61:5d:fa:c2:b2:c3:7d:9e:1a:bb:
38:41:ad:ba:58:b2:b3:36:43:48:7c:41:c5:eb:3f:
b0:60:85:47:f2:02:1a:36:30:dc:a8:cf:5b:35:e8:
0e:a9:01:bd:16:2c:fd:5d:c1:c4:68:87:66:06:48:
7a:0a:d3:71:64:e9:c0:b6:68:c8:47:9f:ec:25:1f:
23:76:40:ca:c1:54:89:10:e9:d0:cf:6d:c6:c8:d8:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:7E:1A:66:AF:F1:84:E0:E3:3D:04:C1:6A:76:34:C9:03:47:54
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:c2:71:6d:1a:73:33:27:97:5f:cd:20:32:8f:55:f6:16:
70:4e:62:85:b6:9b:c2:f6:a2:10:11:51:bf:e5:43:13:62:d0:
52:c1:5e:cd:ab:6e:63:7d:3d:a1:8b:59:b0:67:e3:a1:da:cf:
90:50:f6:b3:b9:0e:f1:3a:f9:28:29:dd:3e:0a:99:e3:67:03:
0f:71:7f:a9:64:cb:da:d8:c0:7f:1f:ec:f1:7a:7c:0e:a2:f1:
03:52:e6:50:bb:f7:55:bb:45:e7:31:14:25:43:8a:3c:20:92:
bd:65:fe:6f:64:52:4b:ac:36:06:82:3f:21:69:a1:2f:65:53:
44:e2:40:35:46:10:2c:96:26:12:56:ca:ac:98:48:6b:f5:fd:
2c:69:78:71:ad:42:87:b1:ab:2f:f1:99:78:65:8c:1e:81:e0:
1b:2a:8d:a9:98:16:12:2a:6c:e4:ee:d5:37:9a:7d:c4:b4:68:
0b:8d:94:79:9e:ba:56:89:50:5f:4a:af:54:45:ba:49:76:a3:
5a:e8:7a:c0:67:dd:78:ba:ba:26:f7:bc:59:f0:ba:4e:78:52:
ca:83:02:3b:bf:3d:ae:ef:25:11:30:76:b9:9f:e3:92:05:ad:
51:cc:b8:c5:d3:ff:8b:69:4f:20:cd:3b:00:a4:73:03:6e:c9:
75:97:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:31 2026 by rpki-client