
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: 5cDuOp7ljXfAmkU4/bkMIPSlRr+Loz4J3RpsPt7VaXs=
Subject key identifier: 83:DC:08:59:F7:D2:C1:81:C1:8C:61:03:B9:BC:CD:AD:38:5A:17:C7
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0C02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0BEB
Signing time: Wed 22 Jul 2026 19:17:19 +0000
Manifest this update: Wed 22 Jul 2026 19:17:19 +0000
Manifest next update: Wed 29 Jul 2026 19:17:19 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: 8Au2SlNimd92ZilEOj0A2MXUSRg9ERTR9B3fr4OjCD0=)
2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Jul 22 19:17:19 2026 GMT
Not After : Jul 29 19:17:19 2026 GMT
Subject: CN=6a61173f-1f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:93:be:ba:60:52:21:43:fe:0d:5f:e3:1a:
b3:fe:e8:e1:d3:5d:65:96:96:b9:0b:b6:54:fc:91:
e1:7d:6a:2c:e2:e9:aa:83:26:ec:e5:7c:2f:02:88:
98:4b:6d:d7:a3:f3:cd:49:81:41:af:08:34:fe:74:
95:5c:77:10:a6:e9:0e:c0:fd:b1:03:9c:fd:2a:4f:
59:5e:3d:38:ae:7f:13:e5:1c:b2:79:bd:ac:a8:f0:
11:19:fd:d5:5d:fd:b5:d5:86:45:f4:40:ae:b6:ce:
ac:fd:2c:30:10:71:65:5b:0e:1a:7c:6a:8e:2f:44:
a5:ce:c1:e8:56:7e:5b:60:56:27:fe:fd:14:56:50:
0a:5f:4c:53:33:e8:c8:4e:41:09:fa:d8:5a:60:3c:
d6:40:1b:6a:2c:47:89:f1:6a:c8:5d:b2:e5:ed:83:
34:9c:27:ef:9b:6e:3c:a8:54:e2:c5:81:3d:ce:33:
ac:03:fd:31:f6:be:74:07:c8:09:9d:ae:b9:59:75:
82:1d:37:36:78:2c:20:48:ed:89:e8:2d:6d:a4:b4:
79:ed:72:58:d6:32:9c:d3:c6:41:6f:34:f4:b1:7f:
42:68:a0:b6:d4:46:97:ff:2e:f3:41:40:fb:0f:b8:
fa:b2:57:75:12:d5:86:70:d6:02:4c:c4:51:c9:3a:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:08:59:F7:D2:C1:81:C1:8C:61:03:B9:BC:CD:AD:38:5A:17:C7
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:65:1f:89:44:88:02:f1:38:29:28:ef:06:a2:87:51:b3:8d:
b0:fb:2f:70:72:79:f0:87:cd:8e:38:15:a9:03:a6:a0:6e:d5:
49:55:6e:bd:50:b1:12:c5:01:d2:61:3b:6c:87:d1:d5:b9:1a:
7c:9f:48:a3:6d:b4:57:9d:e1:68:3f:01:e4:33:76:c3:3e:b3:
a4:63:82:92:45:28:b6:22:f4:e4:0d:83:e5:19:5e:dc:75:a8:
ee:88:b6:f8:d1:cc:4a:4b:0a:d3:09:0d:0c:7c:d0:c3:13:b5:
cf:4f:36:a1:23:46:ef:92:e3:47:e4:1b:c4:c5:b3:38:4e:ed:
63:6a:cc:f9:fa:4e:49:45:54:f4:8b:ce:6b:47:aa:17:a4:1b:
8f:ef:9a:ea:e4:4d:8a:75:b5:e5:65:4b:81:09:aa:52:5b:52:
6a:96:6b:3f:e7:29:2e:2d:45:c6:c0:16:5b:11:99:1d:02:65:
65:49:db:e7:9e:bf:b0:3a:c6:07:ba:41:71:05:43:68:84:1c:
a7:08:90:9c:2f:cc:f5:f8:91:36:43:52:2c:7f:2a:11:7d:8d:
84:68:09:e6:ad:68:54:79:32:dc:75:3b:52:55:79:8f:fb:49:
dd:52:26:b2:f4:53:b1:0f:d5:cc:9f:da:6c:64:ef:94:3a:f4:
59:32:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:14 2026 by rpki-client