
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: 5ym8No/iXqPeTf5eCoQg0Yg+vTd1FwBIvENSRFJ7iYE=
Subject key identifier: B6:36:0A:47:A0:B4:58:F6:8E:AB:56:44:FC:25:68:A3:FC:6D:7C:48
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0BD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0BBA
Signing time: Thu 16 Apr 2026 18:57:24 +0000
Manifest this update: Thu 16 Apr 2026 18:57:24 +0000
Manifest next update: Thu 23 Apr 2026 18:57:24 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: MQixps/7UeugAxdyz5eoqIhKHwecbNf/udmqJNVBEhY=)
2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Apr 16 18:57:24 2026 GMT
Not After : Apr 23 18:57:24 2026 GMT
Subject: CN=69e13114-7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:85:1a:c2:79:a7:6a:3c:00:d1:03:00:bc:
b7:a1:c8:a7:bf:66:1c:15:8c:71:4e:bc:08:8a:25:
22:a0:28:a1:51:e9:d3:d8:0b:bc:88:00:bd:e9:4b:
9c:0d:06:f2:c2:8b:b3:39:93:ba:0c:e2:93:0c:e2:
5f:41:ab:62:b4:ce:85:6d:74:36:8d:24:f4:27:bd:
bb:98:c3:fd:9a:cd:cc:02:d4:51:ec:42:49:fc:40:
14:a9:36:8a:cc:5c:e4:61:53:91:1a:f0:f2:d9:70:
56:da:f6:52:02:4b:12:f2:42:26:1a:e8:c2:ba:0a:
cb:5b:05:77:70:c9:ee:03:36:b9:8f:2c:b8:a6:29:
4c:a6:1f:70:98:e3:13:5c:21:ef:35:ef:e1:ba:f8:
64:a6:68:62:13:55:70:38:13:67:8a:e8:91:38:f8:
09:c8:69:74:e1:09:ac:3a:44:9d:6b:0e:d0:a8:e8:
a9:2f:32:77:cb:27:3b:06:7c:8e:ac:3f:2b:bc:17:
d9:ae:25:b1:35:fd:59:f2:6a:7e:b3:13:80:3a:78:
d5:b4:28:3a:ca:c8:6a:c3:e8:0e:35:8b:84:52:6e:
2d:44:c7:30:34:6d:a2:5c:26:46:29:8c:53:b0:47:
cc:7e:36:c2:7f:5e:2f:37:39:7d:fb:3f:ce:07:4d:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:0A:47:A0:B4:58:F6:8E:AB:56:44:FC:25:68:A3:FC:6D:7C:48
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:63:82:2b:d0:cb:e4:0b:52:eb:bc:f0:0f:6b:e4:a7:00:f9:
20:5b:1c:d3:d0:e0:85:8f:fb:1a:4f:04:06:92:82:75:86:5e:
b4:4f:85:ed:37:25:79:26:1d:aa:c3:bf:f1:28:79:e9:90:7a:
b4:6a:a5:4f:03:64:c2:8f:c1:df:94:9c:36:e8:c6:9d:ad:3f:
73:63:21:53:02:97:dd:8e:df:cc:11:26:c3:e3:af:29:d2:97:
59:8a:41:ec:16:d3:f7:18:e4:0f:92:75:cf:ce:e2:7d:1d:67:
75:36:39:43:2b:f6:32:ab:f0:1f:62:b0:95:26:ce:cd:5f:42:
77:0a:bb:e6:70:54:a6:ae:39:92:8b:4f:20:13:d7:53:30:ef:
30:d5:27:48:f1:2d:2b:bd:e3:06:aa:a9:ab:6b:70:47:f8:2a:
5d:ef:05:d7:13:e1:c1:55:8a:5d:a0:4c:ca:4c:6a:5c:20:f1:
ce:c6:18:86:5b:5f:be:88:65:02:eb:c9:f1:4f:9e:40:db:b9:
ba:a4:80:7c:51:39:85:9a:d6:a7:9a:dc:6a:49:54:02:ea:6e:
b9:52:97:4c:e8:84:76:97:87:48:4d:7f:98:19:3b:a1:df:47:
69:f2:31:ea:6c:b0:47:5d:89:4b:58:34:5e:5a:0f:48:ee:2b:
db:60:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:10 2026 by rpki-client