
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: gjKz1hgvqgryBbn13R9yFqQlvzIa/hmXvjnKEgVBN98=
Subject key identifier: E0:7B:7E:4F:A7:92:57:D4:2E:BA:81:65:2F:19:59:03:FF:CF:72:7F
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: 0158
Signing time: Wed 19 Aug 2026 05:41:35 +0000
Manifest this update: Wed 19 Aug 2026 05:41:35 +0000
Manifest next update: Wed 26 Aug 2026 05:41:35 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: t8MjzpU9Gky+aLKsVTYHHV5VmJpLtRXqWpF24Ov2Ijw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Aug 19 05:41:35 2026 GMT
Not After : Aug 26 05:41:35 2026 GMT
Subject: CN=6a85420f-a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:d7:f7:de:9c:a6:1d:ee:8a:95:16:20:df:
7a:09:66:ab:45:7d:53:63:fb:96:69:88:e9:54:5a:
c8:ee:a4:45:2c:89:b9:8f:f7:a6:d8:84:af:8f:11:
2f:3b:75:88:a7:a4:13:d3:97:b5:67:54:ee:23:5a:
a1:ce:b2:e3:80:c3:38:8d:80:5e:1b:40:24:97:f3:
f2:8e:59:09:9d:a0:99:cf:70:39:57:8b:c6:c3:4a:
01:da:ee:33:e7:05:1a:4b:84:cb:d8:67:30:e6:11:
a0:15:7d:f8:66:e6:14:6d:2f:16:e8:1d:06:f1:e9:
fa:af:4e:37:d5:70:d9:56:59:ea:5d:a0:ba:68:5e:
a5:a7:2a:2b:f9:44:ea:95:f4:73:9b:3e:b3:c2:1f:
4e:87:96:eb:2a:77:bc:78:ac:d9:5f:ad:87:d7:4e:
29:d6:42:01:b4:b3:37:8e:3a:f2:8d:48:96:35:b9:
42:70:f1:38:a7:74:06:7c:13:8d:2f:f3:ae:81:2a:
f8:6f:7e:9d:fd:98:98:84:d9:9e:81:31:91:e8:8a:
98:d9:9b:88:3c:ee:42:d4:e8:35:9c:ab:b3:31:aa:
c6:45:ef:13:84:a0:2b:77:3e:52:f2:62:c3:3c:a7:
2b:6c:c8:04:54:9c:bf:c4:4b:4e:76:ca:3f:4c:c7:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7B:7E:4F:A7:92:57:D4:2E:BA:81:65:2F:19:59:03:FF:CF:72:7F
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e5:2e:96:d6:4f:05:a0:7e:4f:75:74:2b:92:73:84:b3:42:
dd:ef:28:2f:06:12:40:0f:37:6b:b4:b5:02:a0:84:bb:a9:78:
9f:d3:bd:c2:7b:51:e4:16:7e:24:5b:63:ab:55:eb:f1:da:05:
85:52:af:ae:ee:64:0e:02:39:fa:ac:4f:91:51:8c:83:bf:ea:
e0:3e:b9:69:1e:8f:78:41:20:12:36:9d:00:de:3f:6c:9c:c3:
29:6a:be:43:03:79:53:e5:54:4a:a7:29:37:84:06:25:19:1b:
d3:cd:08:84:74:7f:ff:25:33:50:97:d2:ce:66:d7:41:30:17:
bf:77:a4:d2:bb:aa:14:77:ca:20:68:be:c5:4c:34:1e:09:be:
0d:ba:8d:84:c4:86:81:61:e3:3c:ce:21:77:ec:35:a2:41:89:
3e:15:bc:c4:20:aa:dc:b3:db:96:a8:1b:d6:5d:a4:2e:d7:b7:
01:ad:8b:37:be:c3:c8:c9:f0:f2:4d:87:9b:7d:74:bf:98:35:
ff:64:8e:5a:d0:ad:57:fb:14:29:05:67:94:ca:1b:5b:41:aa:
34:f5:fa:70:3d:05:41:84:79:05:14:10:0c:b1:44:f3:d4:3e:
0e:99:62:a0:2e:82:bb:8a:7a:78:44:4e:16:fc:12:1c:a5:d2:
49:98:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:43 2026 by rpki-client