
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
File: O3lhBfUQkckLRwQth4bfaJmS6jk.mft (raw, json)
Hash identifier: pBCS1b5169Xe9bDhPLYrJZuQ++cNiNpnrRcX4d0O7MA=
Subject key identifier: A8:C5:C6:0C:05:E0:DC:8C:9F:D3:D5:E4:F4:BF:46:D3:04:60:95:47
Authority key identifier: 3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39
Certificate issuer: /CN=A91E1C3D/serialNumber=3B796105F51091C90B47042D8786DF689992EA39
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
Manifest number: 05
Signing time: Sat 03 Oct 2026 10:01:44 +0000
Manifest this update: Sat 03 Oct 2026 10:01:43 +0000
Manifest next update: Sat 10 Oct 2026 10:01:43 +0000
Files and hashes: 1: O3lhBfUQkckLRwQth4bfaJmS6jk.crl (hash: 9eGRUmcz4cG0B6Yam4M0eBNLEs/2Z42IqtE6Fuprz4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl
rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C3D, serialNumber=3B796105F51091C90B47042D8786DF689992EA39
Validity
Not Before: Oct 3 10:01:43 2026 GMT
Not After : Oct 10 10:01:43 2026 GMT
Subject: CN=6ac0d287-e0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:8e:af:38:4f:17:e8:4b:83:fd:be:29:d7:
92:55:00:dd:f8:21:55:95:e1:cb:30:e6:84:b5:6a:
24:1f:b2:9c:cf:2e:ee:69:b4:2a:05:05:43:36:3c:
f9:66:7f:15:52:54:dd:8c:c6:1a:9a:62:35:86:3f:
ff:58:e8:2b:ed:96:ec:fa:be:db:4f:2e:a0:06:67:
93:da:97:75:d7:a7:e1:e9:32:6b:98:23:28:ba:ef:
cf:c3:26:7f:09:e1:3c:5b:74:89:19:34:76:e9:1a:
9a:63:76:b7:90:59:71:25:72:9f:28:9f:a2:92:8d:
4a:bf:34:47:5e:5a:24:da:e5:87:cb:48:b5:24:71:
95:e0:a9:29:a7:08:84:98:bc:40:84:1e:a5:4b:74:
c5:13:e5:dd:b7:72:79:7f:d8:c1:39:25:2e:6c:cb:
01:7a:32:cc:d8:e4:bd:a8:eb:4f:bb:24:1a:bb:b8:
81:8d:87:9a:8f:15:fb:dd:f1:5e:4e:d4:1d:a7:5c:
52:5f:58:9e:37:ad:42:2d:00:63:e2:b9:b9:a3:22:
89:b6:ec:8e:fa:76:73:26:fa:0e:68:8f:73:31:d5:
da:b1:4c:ed:31:7f:f6:ab:7e:80:ed:bc:54:e0:1f:
84:7c:2c:20:be:04:66:5b:86:54:93:f9:57:4a:c8:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:C6:0C:05:E0:DC:8C:9F:D3:D5:E4:F4:BF:46:D3:04:60:95:47
X509v3 Authority Key Identifier:
keyid:3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:ba:c5:c3:49:65:51:d0:ad:f6:b6:5d:7a:7e:fb:7b:9d:
37:d1:2e:5c:cd:54:b6:77:46:ca:e5:00:aa:e8:d7:b0:03:57:
f0:e3:c8:78:0f:38:c2:9e:0d:08:44:58:99:90:30:ab:1d:b5:
0e:8b:52:81:97:11:59:b2:2d:56:d8:5e:33:20:43:13:08:1a:
39:88:22:23:8b:44:af:e0:c0:45:c5:cb:0c:8a:9a:a0:8e:10:
69:75:97:79:36:7a:18:df:e4:d4:dc:f0:57:2b:74:19:a8:3b:
81:32:ea:16:8b:d5:d3:98:b8:9b:49:7f:da:64:c4:2e:31:8d:
33:9f:9e:c9:0d:0b:51:99:89:4c:ed:ec:55:5e:f2:e4:c2:55:
65:64:02:75:45:14:cf:b9:ec:eb:f3:70:17:81:2e:a7:b3:e6:
70:c8:4e:39:81:4d:0e:35:8c:f2:2f:94:ea:85:ce:7b:57:ac:
50:b4:89:be:9a:43:cb:68:6b:8c:37:ae:a6:7b:b6:f2:56:4a:
2b:26:55:1f:98:2f:98:2b:db:18:30:d3:b7:4b:f2:f8:2c:46:
dc:fd:3a:90:9f:6c:ec:bb:1f:8a:c7:75:75:54:2d:e7:f5:c2:
21:d7:c8:c4:f2:f1:ab:74:51:89:29:40:86:92:80:c9:9d:d1:
a6:c7:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:26 2026 by rpki-client