
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: tc4Ell8xzIIhp8UqsBP4uXwrlQn0jCTq7S1y9WZ25Ts=
Subject key identifier: 44:67:C1:42:B8:00:79:AC:8C:2E:0C:6F:61:DF:79:85:E6:F6:8B:94
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 0131
Signing time: Wed 25 Mar 2026 04:46:33 +0000
Manifest this update: Wed 25 Mar 2026 04:46:32 +0000
Manifest next update: Wed 01 Apr 2026 04:46:32 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: w2hcJ+ZHdaqdW/rOGLU11QDzAt+G8NEljZdWVRb+zVU=)
2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Validity
Not Before: Mar 25 04:46:32 2026 GMT
Not After : Apr 1 04:46:32 2026 GMT
Subject: CN=69c368a9-1a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:15:a4:d5:88:3e:20:53:94:13:c1:66:ed:
20:2c:62:40:27:bc:f4:b1:b4:85:4a:25:da:6a:9d:
70:ee:0d:ad:0b:4b:e9:11:f7:40:8c:9f:2e:ad:fc:
6d:b2:68:fd:82:1a:2c:b4:6c:35:8c:d0:e9:12:67:
f7:3f:44:c7:f6:3c:5a:64:ee:91:53:10:9a:0d:3c:
42:a6:68:ca:8d:6c:3d:87:0a:d3:16:75:ab:e8:65:
46:96:ce:ca:3b:9f:20:b4:08:df:8b:df:de:84:ec:
fd:af:0c:25:59:41:00:25:77:21:40:df:f2:b2:e0:
b4:42:d1:92:78:62:ee:5b:69:ad:71:8e:6c:c3:8b:
a0:b8:db:c2:26:9d:0b:25:46:e8:50:39:b5:14:28:
2b:5e:d6:32:08:b8:f0:8f:ec:d7:7a:62:cc:1a:57:
a2:11:1a:ee:6a:c7:8c:19:5f:9a:eb:e8:f8:46:d3:
30:76:4f:82:d8:2e:0b:31:bb:3e:2f:7c:00:a3:e8:
d1:95:28:e4:ee:33:de:1a:ee:0d:bd:95:77:80:01:
22:8a:c1:66:07:db:f8:4a:8e:b7:12:71:b5:5d:7b:
7c:1e:c5:db:46:1b:51:1e:c7:41:e3:a8:8a:0c:3f:
ac:4f:1b:e1:eb:42:43:1b:f5:38:30:32:88:88:02:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:C1:42:B8:00:79:AC:8C:2E:0C:6F:61:DF:79:85:E6:F6:8B:94
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:e1:72:7c:fe:08:d3:18:af:e4:2d:a2:21:a3:6f:dc:9b:
53:7e:3e:c8:59:d4:1e:20:0d:22:88:60:af:55:11:b9:21:e5:
7f:94:57:4c:6d:6e:e6:98:1f:c9:79:ab:30:c6:30:2c:f0:b6:
25:28:0b:f7:e1:e0:bb:a4:20:11:06:57:6a:5b:d7:79:f4:57:
db:33:cc:bd:9a:56:be:30:16:24:fa:98:71:c0:a9:38:cd:95:
80:7d:fd:d7:2c:34:41:0a:c9:62:e8:0a:f2:40:91:52:15:9f:
fb:43:0e:77:9e:3c:0d:a8:22:2e:91:66:5b:74:fd:39:05:b9:
90:3b:fe:c0:cd:64:85:45:92:1b:1b:2a:05:5d:7b:1a:f3:8e:
48:e5:12:c5:89:cd:45:09:b0:19:bb:b8:57:11:97:89:29:f0:
ef:f2:ad:a8:56:28:1b:62:a0:a2:3b:d4:42:da:83:0b:58:b2:
6f:62:b1:f3:18:46:21:6b:12:29:78:30:7e:73:3f:16:0b:2a:
11:dc:f4:e3:34:a7:69:0b:96:c7:3a:be:c8:38:45:34:59:96:
61:b9:bc:73:43:29:de:71:8b:c7:c4:01:e7:99:6d:ec:24:bf:
e9:ae:82:68:0d:87:96:e6:3d:52:5d:3b:85:fd:57:90:08:cd:
0e:25:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:23 2026 by rpki-client