
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json)
Hash identifier: Yoqk2lxj/z/B3j36qhk3Nxxj5PhbVT2mTO32q/xBuPE=
Subject key identifier: BB:12:EC:45:B3:5D:B4:EE:4E:80:CA:F9:C6:2F:A9:B6:0F:F2:72:2C
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
Manifest number: 0233
Signing time: Wed 25 Mar 2026 02:01:01 +0000
Manifest this update: Wed 25 Mar 2026 02:01:00 +0000
Manifest next update: Wed 01 Apr 2026 02:01:00 +0000
Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: JCUgN5q+4JhCECimRutAlX+co45CQo5O6vTPxgabqbo=)
2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: brmnMqqLb85ku5z8lFkSDWkJ/T1282J3h23lCyVPP78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Validity
Not Before: Mar 25 02:01:00 2026 GMT
Not After : Apr 1 02:01:00 2026 GMT
Subject: CN=69c341dd-29ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ed:da:2a:32:ea:38:de:8a:13:22:bf:3a:76:
b3:db:fd:61:54:eb:6b:6f:30:0e:14:ee:11:58:30:
38:17:21:dc:3f:dc:a9:c3:17:d9:f0:87:8b:7b:24:
fd:44:bf:ae:54:5a:cf:4b:82:c6:f2:44:e2:10:c5:
a8:af:b0:e5:d8:97:50:09:7c:68:63:78:3e:c8:94:
f4:a7:69:f0:85:be:75:29:47:f1:48:10:1f:e3:05:
eb:7f:61:33:57:0e:85:1d:3b:4f:b7:b4:b5:b5:ce:
d9:07:9e:2e:21:78:c2:54:82:f3:47:e8:7a:5e:fb:
91:06:13:77:b3:fd:de:ad:fb:63:25:7a:45:04:b2:
31:f8:9c:0b:9d:32:80:b2:f3:cf:d3:c4:bd:0a:b6:
67:f0:df:44:09:53:cd:f9:df:b6:14:81:86:77:76:
00:87:6c:9c:36:46:72:85:f4:21:69:0d:de:35:37:
ad:2e:a8:2a:e3:cb:c0:51:e5:de:75:33:7a:dc:ec:
c5:f3:c7:c0:e5:41:dc:a5:0b:30:c9:1c:78:f0:20:
06:2c:07:b2:3e:e5:40:6a:d2:87:ed:69:33:1f:e9:
a9:d8:85:29:05:ad:28:0c:c1:14:50:21:15:cf:02:
a8:b3:e9:b3:b6:e7:19:e7:53:c7:59:c0:c3:48:77:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:EC:45:B3:5D:B4:EE:4E:80:CA:F9:C6:2F:A9:B6:0F:F2:72:2C
X509v3 Authority Key Identifier:
keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cd:1e:89:14:c6:b0:0b:af:cd:07:b6:a9:a3:1e:48:9d:7f:
71:97:41:c7:a5:46:db:ec:26:19:bc:a0:e9:76:fe:c2:28:3b:
28:e8:bf:aa:70:ed:94:70:7e:b2:d2:be:8a:36:26:0c:92:17:
f2:3f:59:ad:a1:7a:38:57:01:91:1e:10:5c:d8:ae:d0:ad:04:
5c:a2:16:c6:de:c5:20:46:e2:49:ad:e0:2a:b6:31:25:d3:a0:
1c:77:93:4c:76:92:70:12:30:00:16:52:f7:e9:31:85:5a:9f:
d1:66:b7:3e:fd:3d:95:39:62:92:6e:7c:8e:32:e8:e8:7b:50:
98:1c:a8:b6:50:63:0a:9b:f1:df:35:e9:23:95:1d:5a:9c:8f:
ea:bd:bc:cc:6c:b8:3b:01:a4:98:6f:83:1b:52:0c:2c:16:35:
a0:8d:4b:7a:9a:08:3f:ba:52:bd:c4:aa:a1:2a:31:c9:d5:38:
74:a1:af:cc:e1:2a:a8:33:fe:9e:ef:87:29:8a:9b:c3:05:b9:
b0:dd:91:71:83:57:60:fe:e7:98:8e:6d:eb:85:e5:10:51:ba:
01:45:c6:81:14:a7:6d:d7:3f:b7:d0:59:a0:86:e7:e6:34:43:
be:aa:85:04:1c:18:b1:0e:ce:1a:77:4f:90:b5:62:00:ce:33:
9f:5a:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:25:08 2026 by rpki-client