
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier: CyD1zBOv7WLFUh3tBOeMX/B3Chb0Kt3RFSzf+fLWCnU=
Subject key identifier: 88:1D:12:F7:79:1D:03:31:1E:51:44:28:A8:FC:75:12:D3:BF:11:F1
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number: 0321
Signing time: Sun 01 Mar 2026 01:57:17 +0000
Manifest this update: Sun 01 Mar 2026 01:57:17 +0000
Manifest next update: Sun 08 Mar 2026 01:57:17 +0000
Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: eN4ZLlivXSqhWIjRdgzaJ8T0Cq7wHWrzEJbWMGcmv9M=)
2: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=)
3: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Validity
Not Before: Mar 1 01:57:17 2026 GMT
Not After : Mar 8 01:57:17 2026 GMT
Subject: CN=69a39cfd-e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:d4:2d:fa:fd:73:61:48:62:22:3a:b7:9c:
54:d9:44:cc:e6:59:c4:34:e4:70:42:38:6e:ae:6a:
41:ff:28:46:87:32:3e:52:ea:5f:d5:8c:e1:75:52:
9b:cd:3c:1b:99:b0:ce:55:ef:af:39:9c:83:29:08:
bb:c6:12:5d:6b:70:a4:dd:45:8e:ff:d6:5b:11:7c:
da:d7:13:93:3c:38:ff:a9:72:3e:5b:81:dc:ab:26:
e2:dd:57:54:b5:6d:c5:c1:72:4e:52:09:6e:37:94:
df:91:e5:18:e7:3f:fb:e8:93:5f:15:51:2f:af:33:
39:ba:4f:59:b9:97:96:8a:0c:22:c5:5a:87:96:eb:
07:c8:81:ba:1b:74:a7:5f:86:2d:68:50:aa:0b:77:
dd:32:7f:38:5d:1f:20:bc:a9:c9:f4:b0:2a:e3:6b:
4d:20:7d:36:1c:8f:f1:c7:6e:11:6a:72:13:14:7b:
63:f1:e7:f4:c9:02:16:46:d7:ad:46:3e:c0:34:1e:
6f:c9:aa:9f:8a:6e:b5:b7:f8:a6:8f:20:14:c1:a3:
7a:41:40:79:47:55:bf:4f:2c:6f:e5:c2:cc:c0:bf:
ad:84:4b:29:4f:cf:34:83:b4:6b:af:12:14:70:44:
2c:ff:5d:18:62:71:15:69:d9:c8:9f:b8:ba:25:c6:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:12:F7:79:1D:03:31:1E:51:44:28:A8:FC:75:12:D3:BF:11:F1
X509v3 Authority Key Identifier:
keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:30:9c:36:86:2b:af:70:ed:8b:60:a0:57:9f:e1:7d:13:c0:
dc:8a:70:4c:14:9a:82:c0:6f:f3:f4:c3:4c:af:73:a3:76:71:
f4:95:0f:d5:6a:73:55:70:43:00:83:47:87:8a:72:eb:97:47:
cd:85:b7:7a:1c:19:25:d5:8c:90:49:35:8c:d5:25:ce:f9:b1:
14:d1:84:fa:69:66:ec:5f:cd:3c:b9:8e:1b:4f:71:6a:67:70:
b5:e8:73:a0:c4:57:b9:7d:91:29:9f:6e:cf:f9:be:88:fd:65:
a1:3d:93:c4:62:d4:da:2a:d2:b1:dc:23:7e:fb:e8:07:34:46:
02:f7:ca:a0:34:91:e1:a2:83:03:ee:50:e2:08:ca:da:c3:2a:
1e:2f:6c:bc:ab:f7:63:b3:af:a2:9c:11:81:16:47:8d:dd:b5:
27:42:a6:96:5e:41:54:68:aa:55:b4:f3:2e:b9:a2:94:e0:56:
4e:ef:02:39:3a:d6:d4:74:43:fd:b1:f3:2b:79:a0:23:ba:e8:
6a:22:67:5f:70:70:96:02:18:fc:4e:b4:be:ad:f7:92:79:bd:
b8:8e:eb:dc:bb:03:29:44:7c:fe:fd:6f:5f:93:79:35:cb:c2:
95:a3:83:8e:6c:66:e9:c3:96:ee:58:0b:03:b5:5f:ad:ab:73:
89:5b:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:56 2026 by rpki-client