
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier: Yys0fdsGiLE8aFcVM/G+s8gQJ+FdimTI6KqxGFQEYrE=
Subject key identifier: 91:A1:7C:78:F0:48:4B:81:CF:0F:D1:3F:C3:47:07:F2:80:BB:5F:C1
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number: 56
Signing time: Sun 29 Mar 2026 07:46:40 +0000
Manifest this update: Sun 29 Mar 2026 07:46:39 +0000
Manifest next update: Sun 05 Apr 2026 07:46:39 +0000
Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: u2FBaepeNz3nmoSvpOutIChFuHpr84QjoEe2cgufNS4=)
2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 07:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Validity
Not Before: Mar 29 07:46:39 2026 GMT
Not After : Apr 5 07:46:39 2026 GMT
Subject: CN=69c8d8e0-ee78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:b4:7a:fe:53:83:b8:9f:33:81:a4:f5:88:
b4:8e:4e:ca:eb:20:61:42:97:4a:7b:bb:51:b5:35:
9a:5d:12:c5:26:0f:7d:f8:58:43:45:d3:b8:fa:98:
34:b5:c0:f1:71:a0:24:86:19:c7:2e:0f:65:04:a5:
34:50:dd:d5:8d:79:dc:e8:4e:6d:91:98:3e:7c:a8:
13:3d:63:6a:25:52:7a:a9:fc:05:88:cb:13:ac:2d:
68:85:ed:e1:17:d0:29:c7:ba:aa:f0:af:e5:06:91:
19:0c:87:35:67:e0:bc:39:cf:bc:c6:62:c2:b6:72:
de:cd:2c:c5:9f:20:3f:0b:41:cc:44:ce:de:38:cf:
f1:5a:5e:f9:e1:69:28:fd:a4:a1:34:1f:1f:58:0c:
84:45:a2:eb:80:a1:f0:a3:7e:48:25:a7:59:10:ac:
f5:62:dc:44:b2:83:68:6a:cd:58:29:8d:ce:56:bd:
e2:53:73:d8:62:71:7d:b7:60:d0:0e:bf:dc:ab:0a:
22:e2:1a:bf:49:e8:a0:c5:dd:3f:a1:d3:d1:b6:ab:
17:b0:d6:5a:3a:bb:32:b5:0d:b6:91:12:11:c0:90:
c9:55:6f:1e:a8:85:91:b2:68:f6:ef:74:7c:3b:ec:
1f:c3:b6:1a:a4:33:16:dc:2f:f5:eb:a3:74:56:ec:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:7C:78:F0:48:4B:81:CF:0F:D1:3F:C3:47:07:F2:80:BB:5F:C1
X509v3 Authority Key Identifier:
keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:68:bf:bb:12:5f:12:71:65:0c:c1:f6:6e:2c:a0:9f:31:
55:21:22:69:d9:a4:d8:e7:44:2e:3f:24:83:de:b3:4c:6d:86:
bf:66:f9:42:d8:4e:bf:fd:a9:d4:33:c1:51:23:b9:7b:72:65:
97:53:94:3c:ee:87:26:07:6e:8d:c0:fb:0c:22:80:da:29:9d:
c4:15:ec:db:94:ab:f3:ab:9b:98:3f:3a:76:01:b0:f6:d2:aa:
c6:77:e9:f9:05:16:f2:7d:64:01:15:14:92:9e:7b:cd:6f:f0:
7e:c9:ed:8a:d1:89:59:93:39:ed:f9:4f:ff:7d:15:3f:a2:b0:
39:81:b6:fc:df:9a:5f:e9:62:28:e5:3d:7e:09:6a:c5:d2:2a:
14:2e:bb:3e:6a:d0:47:72:16:9b:7d:bd:0e:0e:75:74:d2:dc:
9a:e3:55:42:32:2a:9e:35:c0:52:e2:44:91:42:31:b6:04:d9:
a5:bd:cd:56:b8:f1:3c:75:b8:63:8f:57:c1:16:2b:c7:bb:91:
b4:f2:f0:dc:4a:ea:d4:b3:d4:3d:9b:34:51:40:94:67:0f:b8:
4a:b4:05:b6:c0:e4:12:c1:66:ee:5f:26:10:cc:49:5b:ed:bd:
87:64:c4:9a:cf:a2:67:e2:4c:ae:83:18:f1:f5:4b:86:0d:ae:
d6:49:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:30 2026 by rpki-client