
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier: wlTJi3JfMix8MeR62YvyhYRdjCWgK9qlvuKcpkiiYH0=
Subject key identifier: BF:8F:A2:39:2E:DA:D8:7C:8C:FB:EB:D9:40:D0:6E:05:D3:8D:59:D4
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial: 0EC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number: 0EA5
Signing time: Sun 20 Sep 2026 17:40:59 +0000
Manifest this update: Sun 20 Sep 2026 17:40:59 +0000
Manifest next update: Sun 27 Sep 2026 17:40:59 +0000
Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: OeVqieL++Hu8f1Zrco/4qXSNHEzrYTTOkm745zN6iWE=)
2: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: LK9lFz+9N11fqfPC0jVRHD9FeANyPw0tdvt1fpUzGLQ=)
3: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: I42/yCc2sXng95yV5V9rJYMIeKVTpAqNcLtZHIVHLHg=)
4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: gUZUG0XGqciwniJGSiDxz0DgvPWakTbupjgNjJySVdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Validity
Not Before: Sep 20 17:40:59 2026 GMT
Not After : Sep 27 17:40:59 2026 GMT
Subject: CN=6ab01aab-4878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:a3:22:15:10:30:08:77:ee:00:01:04:b1:
56:5d:e2:0a:e1:92:6c:82:6c:87:02:63:8e:43:fa:
8c:a6:a9:4a:55:52:6b:a6:f8:18:11:19:27:45:fa:
c4:89:cd:58:74:f8:26:fe:e6:7f:9f:c9:40:1e:db:
ca:85:fa:67:79:43:45:af:da:33:a0:f3:b9:96:d2:
61:4e:e0:4e:b5:de:00:8d:2e:3f:3f:e3:30:73:fc:
33:29:18:53:a8:f6:8d:27:d0:3f:9e:6f:06:61:8d:
5f:d8:10:5f:62:7d:41:0f:23:17:1e:81:da:f1:41:
5f:dc:05:83:ec:87:e3:7d:f4:ec:12:cb:e5:9c:41:
b5:d6:e7:06:f9:1b:91:7b:bb:11:63:21:08:6b:7c:
6e:12:e1:7c:d4:86:10:21:28:e8:78:19:21:6f:1f:
c8:a9:d3:8b:06:5f:55:7d:97:b0:c2:59:f4:d5:67:
a9:15:c7:15:d3:17:df:d7:50:45:87:dc:17:ce:a7:
42:8d:cc:ff:c8:00:2f:6f:90:85:b7:99:de:a3:d5:
65:fc:cf:b5:60:26:10:cd:77:ff:31:e9:c0:66:3b:
18:af:f2:3f:c6:47:3c:51:9e:92:d1:81:e6:7d:cf:
e4:2a:b0:44:ce:50:72:0d:6f:09:89:2a:bb:46:14:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:A2:39:2E:DA:D8:7C:8C:FB:EB:D9:40:D0:6E:05:D3:8D:59:D4
X509v3 Authority Key Identifier:
keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:09:4e:cb:f6:77:b3:43:b1:b7:4e:73:fb:20:64:91:81:e3:
ee:38:a7:73:46:5c:d4:d0:0e:93:82:37:03:a4:a2:43:ef:36:
80:1c:aa:ce:13:58:18:ad:de:73:ec:7a:a1:4c:47:de:a9:c7:
d4:d3:c4:68:28:37:49:61:15:04:c6:2f:46:b1:75:0c:df:c3:
31:e2:0e:a3:23:61:d5:d9:12:01:4f:fd:bb:28:b0:ec:ef:cb:
1b:ac:a8:11:67:73:b4:4d:13:3b:db:51:3b:37:ea:db:e5:66:
26:fc:c5:9d:e3:e1:b3:c5:88:7f:6b:fd:1b:fc:04:03:58:f2:
6e:8f:dd:e7:39:2b:f9:5a:9d:82:9b:df:0c:64:e4:d6:75:ac:
07:6e:61:a2:17:4d:fc:6a:31:0f:6f:14:fb:e2:6b:7f:40:88:
71:74:82:1b:2d:4e:bc:dc:da:06:26:12:af:62:c6:a7:c9:4f:
05:95:78:32:83:a4:de:72:01:e5:d0:2a:d6:a5:50:cf:b6:3c:
7d:c5:1d:e7:a0:dc:10:dc:10:71:52:04:83:45:6f:9a:45:47:
65:85:9c:0f:3e:33:5f:3a:26:95:cd:ec:68:7c:a4:cb:b6:ef:
58:aa:aa:a5:c8:a3:99:f9:9d:19:a8:56:f4:fa:75:38:30:6a:
04:be:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:55 2026 by rpki-client