
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: W4yA2upXgQ6GYHwekPTz455xzACrXtAMkreZqh38+i8=
Subject key identifier: 50:54:C3:14:27:81:D5:75:BE:71:4C:2B:D1:F2:33:75:F6:27:DA:15
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0BEE
Signing time: Tue 28 Jul 2026 19:11:50 +0000
Manifest this update: Tue 28 Jul 2026 19:11:49 +0000
Manifest next update: Tue 04 Aug 2026 19:11:49 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: wr1GbqQ03PPr2jaiuvybBub0O4AD2oX+mYgIggPcrDo=)
2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Jul 28 19:11:49 2026 GMT
Not After : Aug 4 19:11:49 2026 GMT
Subject: CN=6a68fef6-bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:3a:06:ef:45:c6:b1:f9:d7:d1:26:cc:4b:
d9:54:39:02:ea:e8:b3:66:ef:7f:52:f3:99:66:8a:
79:cc:2e:5f:90:20:0b:b8:ee:25:a1:38:f6:68:bc:
f3:86:84:15:e9:f0:bc:c5:b9:7d:d0:1e:8a:f5:d4:
48:8e:69:8c:24:58:69:c8:bc:d6:be:12:39:7f:40:
bf:ef:15:ed:0d:0a:89:35:50:08:6b:72:46:5b:3c:
4a:02:bb:23:ca:b7:1b:2e:fb:f9:c7:f6:74:4b:1d:
c5:ee:46:e5:2b:e4:07:74:ed:f0:21:ec:07:09:43:
c5:c7:67:51:fa:27:c6:be:6d:81:b8:cd:a5:1b:d6:
4e:ac:38:cb:9a:e6:ed:06:89:ff:fe:bb:db:17:e8:
a1:04:6e:65:a4:bf:38:e6:7d:3f:fb:81:29:f6:04:
5f:be:3f:b9:61:47:77:9e:80:bb:85:3e:2b:c9:41:
5a:3a:2c:db:93:66:c6:66:a1:01:e4:75:5f:37:87:
2c:1d:6a:a6:b1:f0:1f:d2:c0:63:be:b6:e1:f7:84:
69:11:e2:d2:0e:03:b3:64:56:48:e4:4b:a8:44:cb:
6e:69:c3:a6:d8:99:a4:98:51:05:9b:4f:e6:71:c9:
f8:11:99:cf:15:9b:26:be:ce:18:d1:21:40:11:c5:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:C3:14:27:81:D5:75:BE:71:4C:2B:D1:F2:33:75:F6:27:DA:15
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:47:fd:1d:d3:44:46:77:38:8f:fb:ca:c9:dc:0e:b8:61:
b4:04:36:0b:f8:b7:84:d0:c8:36:ca:35:c3:8d:11:a1:95:a5:
de:80:bf:cb:63:87:cb:32:1b:d9:36:1b:9b:4e:e6:f6:e8:40:
63:b7:95:85:75:50:a4:8a:95:e4:57:c2:5e:2a:7f:85:1c:d7:
01:d2:bb:94:b9:a1:ab:d0:04:7f:9a:2a:2f:fc:71:88:ef:17:
f5:52:45:fe:93:54:64:81:b1:fe:7f:4d:a8:4f:19:6c:9f:14:
24:bc:ab:e7:26:10:bc:ae:ef:db:a8:1a:68:2b:a9:e0:c2:94:
19:82:54:6f:ea:6e:50:10:a7:16:12:b3:3a:ed:45:03:82:0a:
c7:a4:e7:1b:93:4d:d4:b9:79:6e:6c:11:ea:1b:39:d5:6d:b3:
5f:bb:06:90:b7:3b:77:c0:5c:05:e5:c9:77:ac:fc:a9:4c:a8:
25:4e:e7:6d:69:f3:93:07:58:b1:67:c0:e9:ec:16:7c:97:e8:
a3:cf:75:c2:59:3c:ac:22:ff:70:a1:19:35:ab:c4:8f:ba:8d:
98:64:94:8d:60:4f:df:6e:cb:64:1d:44:00:2e:18:fd:fa:cf:
56:39:27:0d:c6:d5:70:01:74:cb:92:91:03:5f:ab:2d:d5:ca:
20:5a:48:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF
NzNDMkYyMzAwHhcNMjYwNzI4MTkxMTQ5WhcNMjYwODA0MTkxMTQ5WjAYMRYwFAYD
VQQDEw02YTY4ZmVmNi1iYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoc6Bu9FxrH519EmzEvZVDkC6uizZu9/UvOZZop5zC5fkCALuO4loTj2aLzz
hoQV6fC8xbl90B6K9dRIjmmMJFhpyLzWvhI5f0C/7xXtDQqJNVAIa3JGWzxKArsj
yrcbLvv5x/Z0Sx3F7kblK+QHdO3wIewHCUPFx2dR+ifGvm2BuM2lG9ZOrDjLmubt
Bon//rvbF+ihBG5lpL845n0/+4Ep9gRfvj+5YUd3noC7hT4ryUFaOizbk2bGZqEB
5HVfN4csHWqmsfAf0sBjvrbh94RpEeLSDgOzZFZI5EuoRMtuacOm2JmkmFEFm0/m
ccn4EZnPFZsmvs4Y0SFAEcWlmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBUwxQn
gdV1vnFMK9HyM3X2J9oVMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz
MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4
MjQxX1JNYnh6UlBuUEM4akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAay5H/R3TREZ3OI/7ysncDrhhtAQ2C/i3hNDINso1w40RoZWl3oC/y2OHyzIb
2TYbm07m9uhAY7eVhXVQpIqV5FfCXip/hRzXAdK7lLmhq9AEf5oqL/xxiO8X9VJF
/pNUZIGx/n9NqE8ZbJ8UJLyr5yYQvK7v26gaaCup4MKUGYJUb+puUBCnFhKzOu1F
A4IKx6TnG5NN1Ll5bmwR6hs51W2zX7sGkLc7d8BcBeXJd6z8qUyoJU7nbWnzkwdY
sWfA6ewWfJfoo891wlk8rCL/cKEZNavEj7qNmGSUjWBP327LZB1EAC4Y/frPVjkn
DcbVcAF0y5KRA1+rLdXKIFpINw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:14 2026 by rpki-client