
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier: 8jyZLRAlWkXPN7DH5kuYyTFMKmvE1dS/XlvojAeqSdc=
Subject key identifier: 0E:01:44:9A:2D:CF:07:E3:46:BC:D4:92:B6:70:43:5D:F6:FB:A4:0D
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number: 032F
Signing time: Wed 25 Mar 2026 00:43:13 +0000
Manifest this update: Wed 25 Mar 2026 00:43:12 +0000
Manifest next update: Wed 01 Apr 2026 00:43:12 +0000
Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: scBi8vj+EeGMXBzmrqyCx/Y9ahBFXsa2Nf/Z0mNZ9Yc=)
2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: H+Evm+yHnBSmOexYo7titYsM/D4dZ2Sj/np2eWPGmNY=)
3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: P8/5kr8bHdI9BV8115gmvyOf1Tob/Bbi8osi5OVZzfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Validity
Not Before: Mar 25 00:43:12 2026 GMT
Not After : Apr 1 00:43:12 2026 GMT
Subject: CN=69c32fa1-cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:dd:fc:f2:72:e4:1a:ce:86:5d:5f:61:07:
0d:6f:63:40:f8:5c:bb:ec:cd:4a:05:26:72:03:9c:
e7:b7:11:cc:cc:cc:cf:bb:25:c1:73:c0:ea:5a:5a:
58:45:58:d6:dd:5c:14:2b:36:ae:3e:e7:b9:c1:4a:
de:67:51:af:51:c1:e8:3e:0d:62:29:29:e0:36:71:
ad:41:48:ed:d7:93:2f:88:d4:bd:b8:51:e0:10:4d:
3d:45:31:dc:88:3f:7e:9a:f5:11:3f:7c:9f:6d:61:
2d:bf:6a:0c:1c:8a:80:c9:76:67:91:fe:13:1c:2e:
1c:9e:fa:77:3d:55:ae:73:12:0a:ab:f9:2a:5e:6c:
87:c1:a5:51:74:be:8e:fe:eb:36:db:de:5f:75:7d:
5e:b6:02:82:e2:b1:d4:38:09:74:aa:1a:33:74:99:
5c:b9:69:a2:7b:77:33:c4:d9:2d:10:cd:d8:b2:ac:
ac:3d:c2:a0:cd:31:cf:80:80:bc:c0:97:86:bf:4a:
f2:c8:2c:22:59:45:3f:91:5f:9e:41:52:28:2b:d4:
bd:53:e7:2c:41:e7:59:2c:e5:1d:09:27:b7:e6:36:
e2:90:21:d4:48:91:8e:02:c4:ed:5a:d7:a2:5f:72:
1d:ba:30:07:f3:c0:e8:d6:c5:ec:ec:3b:71:eb:d2:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:44:9A:2D:CF:07:E3:46:BC:D4:92:B6:70:43:5D:F6:FB:A4:0D
X509v3 Authority Key Identifier:
keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:af:0d:bc:20:8d:04:03:b9:b0:ef:cb:fe:86:20:e1:8f:
0e:f9:b5:45:87:c9:4a:6a:48:f8:16:49:5d:2e:cd:3e:99:bc:
53:89:9c:e8:98:6d:96:b1:df:50:99:d2:e6:5c:88:40:f9:c4:
e5:22:59:52:48:83:b7:8f:0f:54:e8:7b:d0:25:ce:4d:7e:e1:
a0:4e:e7:14:50:97:c6:a4:6b:96:ef:45:d2:b4:cb:72:1e:7f:
b0:c7:01:a0:00:db:2c:b2:5c:e8:1e:95:2e:8a:44:70:86:06:
e4:b8:d7:9a:e5:ef:3b:85:c4:e7:94:c2:88:cc:84:86:a9:7a:
f1:d0:8d:a1:1b:d0:d3:d9:84:90:17:8b:2f:ba:b3:7a:35:22:
05:b4:72:8c:cc:9b:f8:92:f9:3d:98:56:a6:1a:8b:71:4a:02:
98:8e:3d:44:5f:d8:fb:d1:8c:a2:0e:22:6f:5d:61:d6:bb:d9:
d1:4f:4c:87:d9:fc:bd:86:21:5c:02:fb:ce:4b:ce:c9:b0:41:
c8:7e:d5:df:b9:73:f2:a4:ad:90:5e:0d:7b:a2:c9:9d:4d:9d:
b2:75:ce:1b:6f:93:c7:fe:79:58:d9:ef:b0:62:7f:0c:c2:e7:
bf:2e:a0:0b:17:26:a6:52:24:24:e0:dd:46:a0:89:2b:8e:03:
07:b1:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:28 2026 by rpki-client