
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: xwPG9WE9SRutC4bE3N0FPGq77DwV6IZ77SwmkE7A+0Q=
Subject key identifier: B2:78:D9:5E:CC:2F:90:BB:68:05:D5:EC:58:C0:FB:40:6D:D6:13:BB
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: 010E
Signing time: Wed 25 Mar 2026 05:08:43 +0000
Manifest this update: Wed 25 Mar 2026 05:08:43 +0000
Manifest next update: Wed 01 Apr 2026 05:08:43 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: HwPf2AA9HvcG08jQSP8K0peghMXokpWdvHC7yEPak+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Mar 25 05:08:43 2026 GMT
Not After : Apr 1 05:08:43 2026 GMT
Subject: CN=69c36ddb-00c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:f6:15:5b:1a:f7:bd:ef:0b:16:c5:24:8c:
9b:17:e6:ee:8b:aa:73:10:42:8a:d6:c6:9d:6d:ce:
ab:f8:a7:ec:c4:0f:e8:4c:c0:81:f7:c1:34:0d:e7:
a6:bc:1d:99:10:e6:b9:a7:58:ab:de:dc:5a:74:fa:
2e:1b:3c:5f:de:45:a9:09:cc:dc:af:4a:40:a8:f0:
1e:3d:5d:f5:e6:57:92:31:22:58:48:4b:6f:10:44:
91:49:c0:f2:00:6d:33:81:88:d9:6c:8d:4b:4a:17:
59:c3:2d:f4:80:28:73:a2:96:44:79:c7:7b:1f:18:
13:c1:d4:2a:3b:9c:79:49:10:0b:28:ae:44:88:ac:
73:72:e8:24:a9:07:94:a2:43:c9:ac:3d:ad:4e:dc:
73:c5:6c:3d:c5:24:35:2b:83:dc:47:69:97:ef:bd:
d8:14:2e:ee:9d:2d:9f:f6:6c:87:d3:ae:82:99:bf:
d9:a2:4b:5a:b8:33:34:3a:28:5d:64:7a:d6:f6:8f:
f4:5d:40:e5:bb:88:2f:68:a8:c3:12:e1:1b:7c:c4:
69:dd:ae:94:f6:e3:37:d0:7e:fa:05:c6:51:2d:d3:
ed:bb:1f:d4:cb:81:1c:bd:ae:8e:cd:64:01:98:4d:
b5:c6:5a:4a:cc:bc:e1:13:cd:e1:ff:96:11:cb:ba:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:D9:5E:CC:2F:90:BB:68:05:D5:EC:58:C0:FB:40:6D:D6:13:BB
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:28:b8:59:be:1f:98:6a:8b:3d:3c:c1:00:f7:b0:1e:98:
d7:3a:2f:73:37:c7:98:91:ac:29:97:36:1f:13:7b:53:3c:ae:
77:bb:af:01:ee:f4:07:64:19:89:7e:72:c6:c9:c7:57:e6:85:
c5:08:d3:76:99:b2:8b:a4:28:53:9b:41:a1:0c:85:a5:bd:c7:
08:c3:55:92:1d:04:b5:99:5c:bc:51:99:b2:82:2d:1a:0b:0c:
3e:2c:a7:34:ab:fb:77:d9:73:0f:aa:73:c5:b3:b7:6c:07:ee:
77:58:b0:51:8d:21:b4:8a:c4:ef:73:ae:06:0e:2c:c7:b1:6f:
cb:aa:59:9a:c9:b4:01:9b:83:95:6b:1a:5d:66:ed:9a:e3:c9:
19:0e:2e:ce:2f:dd:40:bc:78:91:f4:d9:c6:ee:51:4c:5b:3f:
4d:04:a6:a4:81:6d:d9:51:4a:79:90:83:f8:87:bb:50:c3:34:
76:30:e9:d7:ac:47:9b:fc:f1:0e:ed:00:18:8d:85:36:a1:de:
f0:de:92:fa:79:44:fc:e5:cd:28:79:b5:44:43:9d:4f:7a:ab:
c5:19:f5:8d:d6:dc:9c:80:eb:db:89:80:5c:58:e8:f7:d9:6d:
9e:31:a0:7d:51:5e:a2:60:bf:ac:b0:f8:42:e8:da:80:05:10:
3c:26:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:21 2026 by rpki-client