
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json)
Hash identifier: ANAP6xyvB+7ekDmttS3FnTB/lYj2byElHdKV2HdZVkc=
Subject key identifier: 92:F6:42:E6:6D:97:A3:01:F6:4A:B0:84:FE:C8:A9:6D:66:73:AD:45
Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
Manifest number: 05DB
Signing time: Wed 13 May 2026 00:15:55 +0000
Manifest this update: Wed 13 May 2026 00:15:55 +0000
Manifest next update: Wed 20 May 2026 00:15:55 +0000
Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: VAihdC8uBCuK67N+9FC8CYuxul/iuyX3IZz8Vv9UWaI=)
2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: kTVaejTylU6jn5BZ5dLXFlr8dJ5NzR00FEXTio7feKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Validity
Not Before: May 13 00:15:55 2026 GMT
Not After : May 20 00:15:55 2026 GMT
Subject: CN=6a03c2bb-ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:f0:76:a9:f2:68:ec:fb:f5:8d:d6:ba:91:
66:1c:f1:12:d1:6d:9f:06:2c:c7:cd:f3:e5:77:da:
89:cd:a3:c7:c1:eb:1d:55:d2:4a:49:64:3f:79:03:
17:01:92:d4:dd:22:95:ed:0a:06:a1:8f:1f:b2:23:
26:08:d1:2c:7a:cc:20:33:3c:3a:89:d3:ea:ca:6f:
54:25:6b:2e:b8:81:b2:92:93:75:e4:bd:77:e3:6e:
d1:16:bc:05:ef:bc:27:64:29:62:dd:8a:69:16:ec:
6f:22:4a:67:45:3d:35:df:f8:e0:9d:44:59:8e:10:
93:c5:7a:e4:99:cb:94:72:08:66:78:6e:2f:54:3d:
b8:a5:71:c7:68:0a:b9:a5:f1:5e:07:ff:65:7d:1c:
65:a1:84:19:5b:7b:80:bc:46:93:ec:43:ec:a6:03:
76:20:09:fd:f3:83:da:45:29:b2:15:d0:4b:0b:2f:
ee:0b:8f:ac:12:a4:a8:0c:7d:2c:a1:78:26:e0:c1:
45:2e:04:d8:80:3b:91:68:67:1b:2f:94:86:dc:28:
25:1c:ff:19:ed:88:d3:81:c9:35:1a:4f:d9:46:d1:
2b:4e:22:38:33:54:70:79:aa:0e:ab:ef:96:96:1a:
63:ea:64:17:ce:f9:23:02:db:ba:f5:08:6b:f8:bb:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:42:E6:6D:97:A3:01:F6:4A:B0:84:FE:C8:A9:6D:66:73:AD:45
X509v3 Authority Key Identifier:
keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:49:2d:f3:80:d9:a4:fc:5a:d0:2e:7c:3d:0b:ca:9a:f0:52:
b8:d8:b2:ef:87:c4:6c:f8:02:d6:d0:f6:4c:d9:a2:ff:6f:28:
b0:af:96:c7:bc:9e:3f:86:15:94:76:3a:10:0b:49:6f:78:9c:
ba:80:2b:2e:76:5a:8c:af:46:e3:29:8a:e5:3b:2f:07:68:78:
39:8c:f3:2b:26:b8:72:be:33:06:98:d7:e1:2d:4c:eb:78:11:
83:46:55:46:d3:be:1c:66:87:85:81:ce:b5:04:87:37:24:ab:
58:87:82:99:b4:a1:ea:a3:4e:e7:82:50:b3:02:fe:0e:8d:82:
50:84:b5:4e:a2:86:17:6d:25:bb:f8:d6:fa:c0:d3:43:d0:a4:
52:67:2d:7b:d2:18:19:a4:b1:ba:9e:01:9b:7a:80:de:bf:da:
a3:54:48:5b:c1:56:50:3a:41:b6:99:ea:b7:3f:b2:66:88:3f:
ff:7d:d2:cc:9f:1b:3a:8a:d3:a6:0d:36:0c:42:e2:68:04:dc:
05:52:7e:1b:b2:6e:11:24:56:b1:41:99:33:aa:8d:4d:e3:0d:
72:39:14:f0:17:7b:2d:5a:4f:cc:8d:78:9f:2a:70:49:d2:7c:
4b:f1:cc:d3:c4:ab:51:f3:72:7a:87:a0:2b:17:43:2a:22:34:
ed:9f:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:58 2026 by rpki-client