
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: mk71ZcdrnaQq6zodbqExPIuPTXRd1uzKx6l9ZCRrX/0=
Subject key identifier: 59:11:AD:B0:D6:D0:8E:68:14:81:F1:67:8E:BC:0B:DD:72:6A:86:C2
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: 0114
Signing time: Sun 05 Apr 2026 05:16:17 +0000
Manifest this update: Sun 05 Apr 2026 05:16:17 +0000
Manifest next update: Sun 12 Apr 2026 05:16:17 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: jayVKtobaslbey3Za/76mqAmoy2jzN8fHKMCqINMr28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Apr 5 05:16:17 2026 GMT
Not After : Apr 12 05:16:17 2026 GMT
Subject: CN=69d1f021-c089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:6e:79:51:12:8d:16:c5:c4:98:ea:e6:91:
cc:0d:83:f5:36:f5:37:78:bf:2d:92:e7:c9:26:9d:
a1:67:39:df:7e:d8:e5:ac:fb:42:95:a1:8f:11:a8:
5d:73:4d:c2:b8:26:b1:a1:7a:35:2f:84:6f:8e:56:
49:8b:7e:6c:c6:72:d8:a6:5c:f8:d6:41:cb:55:4e:
ac:10:c3:93:4a:d2:76:8e:47:01:fa:cb:a1:d7:86:
a0:34:2f:cf:9a:6d:f8:fd:c0:74:75:69:aa:15:95:
b9:9c:3d:40:9a:92:6a:27:4b:59:1a:0e:9f:61:fa:
f6:3c:df:be:72:ad:2f:e9:79:10:eb:8a:53:d4:af:
af:0b:2d:11:eb:bd:3e:c2:ae:72:a5:51:b9:34:b5:
29:f2:d7:16:f3:dc:3a:6e:6d:06:59:62:18:e9:34:
46:bb:dd:14:01:fe:4f:74:7e:e5:6b:d9:eb:0a:cc:
91:fd:a0:fe:8b:1b:ce:93:62:92:b1:8f:0b:a5:93:
72:f9:43:be:7f:2a:7e:e9:c2:b7:78:a0:13:e8:45:
d9:bb:ca:6d:df:13:50:15:32:a8:98:71:37:72:77:
3c:be:76:3f:9c:d4:b4:03:e7:b6:e7:cb:da:14:3d:
1c:fe:f3:da:0e:09:06:18:1d:3f:7b:66:8c:e5:39:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:AD:B0:D6:D0:8E:68:14:81:F1:67:8E:BC:0B:DD:72:6A:86:C2
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:4d:36:bd:c8:09:10:08:25:a4:86:9b:da:f1:97:a7:73:
eb:02:59:bc:25:94:91:71:f2:01:1b:7e:04:dd:0e:c0:4f:1d:
c2:2b:f3:7a:db:9d:ce:a2:79:61:33:43:69:76:b2:f3:ea:07:
44:f3:9f:f2:09:82:89:c6:70:cf:17:2f:36:e9:87:1e:cc:a5:
03:3b:bd:35:c2:5e:ef:34:a4:13:e6:fc:ad:86:7c:a2:1e:ac:
be:b3:b7:4d:dd:cb:33:49:b6:03:cc:0a:aa:5d:15:77:7b:a7:
53:ef:26:90:44:36:b9:1b:2c:7e:c8:8e:4c:f2:9e:e2:df:8b:
04:99:63:e2:d8:a4:bb:b2:df:0d:32:d7:04:8c:d6:b3:3e:b1:
a0:17:11:88:27:de:68:fd:14:8b:2e:4e:3a:23:39:da:fb:b3:
ef:79:de:28:83:16:77:9a:fa:1d:c7:a3:f3:6e:f9:66:15:e0:
b5:a5:ba:77:b1:d6:d8:14:29:c0:e4:9c:91:15:7f:03:af:0d:
79:31:58:c2:5a:8e:3a:cf:d4:21:0b:0d:bb:28:57:dd:2d:fe:
aa:a0:d9:04:32:ae:e9:14:63:aa:17:8a:e0:9d:d6:f5:4e:61:
50:02:48:03:ad:a4:fc:cb:b0:1b:10:5b:4c:e2:26:cb:27:c7:
76:78:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:36 2026 by rpki-client