
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: z/pC98KtkCXeuRfMqpmJj2/XzDpZOhx/Vjih2k0touU=
Subject key identifier: CA:DA:C4:A7:4E:CA:F7:FD:EA:86:60:E5:D6:A0:49:71:82:72:4A:88
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0BEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0BD7
Signing time: Fri 12 Jun 2026 19:01:19 +0000
Manifest this update: Fri 12 Jun 2026 19:01:19 +0000
Manifest next update: Fri 19 Jun 2026 19:01:19 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: XFQGCnVgpT8rfzYQoaXGLAGn/HqyTeYoPAjvuI2qkH0=)
2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3054 (0xbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Jun 12 19:01:19 2026 GMT
Not After : Jun 19 19:01:19 2026 GMT
Subject: CN=6a2c577f-2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:7e:f5:1e:f3:5b:de:38:6d:e6:60:a1:57:
87:a6:46:8a:fe:2f:50:e2:6a:2f:43:da:ea:9e:c2:
48:35:97:1b:39:bc:48:9d:df:bd:2c:b1:1f:bc:76:
10:e3:33:ab:1b:75:f7:4d:c0:86:d7:ff:88:68:60:
94:af:62:2d:8a:68:24:0a:8b:24:09:5e:19:83:b3:
91:da:03:2d:a7:bd:7f:fb:ff:25:6c:aa:28:79:a3:
74:cf:69:ec:a2:b3:54:c3:c9:b7:02:f2:64:76:db:
34:e4:c7:de:fb:e7:77:eb:dd:70:4b:d9:69:b6:af:
0f:bb:c0:57:62:08:3b:11:46:a7:25:ad:56:29:fe:
77:2f:95:ad:29:eb:f2:d6:95:19:cd:dc:fd:f4:ca:
13:b1:7d:9d:68:ae:4c:b9:2f:9d:b1:58:81:74:ad:
29:fd:43:5c:68:c7:f7:4b:a1:7b:87:6d:32:d6:53:
37:a8:b1:31:7a:83:7a:9e:0d:75:8a:75:d9:8b:60:
5c:bd:c3:d5:80:e8:e9:30:f1:83:79:4c:6b:a9:cc:
bc:53:08:fd:0d:58:36:c5:d3:16:58:c8:37:b4:67:
a5:15:ce:af:07:a2:2c:50:df:4a:c9:51:3b:60:b6:
d5:44:f2:1a:93:4d:7c:70:37:3f:21:2f:d8:35:ba:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:C4:A7:4E:CA:F7:FD:EA:86:60:E5:D6:A0:49:71:82:72:4A:88
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:11:3d:45:f4:42:f0:4a:e7:91:52:5d:7d:0e:b0:73:73:
e0:0d:4f:c8:a5:37:ff:53:53:98:ca:65:83:4a:4b:a3:bf:00:
ce:4e:89:84:f1:e7:97:38:88:db:b9:8d:c4:83:df:1a:a9:c4:
ca:1b:21:4f:fa:37:7b:a9:b7:09:1f:3f:0b:01:73:72:f7:d3:
1f:c5:ba:9e:fc:24:d0:f9:df:61:04:a8:4e:38:7b:c9:76:27:
51:09:91:89:6b:52:54:34:eb:53:31:bf:4e:38:18:0d:77:1f:
96:ee:e3:f1:51:5b:f9:15:ac:ba:a0:10:83:90:1f:d6:39:27:
33:63:50:a0:e8:05:33:26:aa:b4:39:79:27:11:bc:73:d2:dc:
5a:ff:d2:80:23:b4:17:e5:9e:67:16:9a:f8:ef:c9:d3:88:8d:
1d:e2:d8:3e:28:6b:93:97:a2:f9:2e:2f:60:22:41:ba:5b:38:
15:dc:f0:45:be:c4:31:9c:78:04:d4:43:33:63:2b:7e:26:ea:
b7:98:cf:e1:ba:72:de:6f:69:3e:2b:ff:92:64:75:cc:9d:4d:
d1:12:55:ec:81:f4:ab:38:6f:cc:9c:13:49:11:20:02:6a:4d:
08:20:ba:3c:63:96:b0:21:8f:bc:a8:ce:34:43:0e:b9:76:c8:
87:8b:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:34 2026 by rpki-client