
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier: bHux35wI5hRqqDHHNmUcWuo8Rsc9CGAVcc+uw1lyUJc=
Subject key identifier: 4B:5E:0F:3C:DD:FB:FE:70:98:96:AA:01:C7:17:50:8F:67:00:0A:F3
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial: 0382
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number: 0371
Signing time: Wed 29 Jul 2026 01:39:15 +0000
Manifest this update: Wed 29 Jul 2026 01:39:14 +0000
Manifest next update: Wed 05 Aug 2026 01:39:14 +0000
Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: lKLUkaCMP5f67RVSpgz20kNrJ67FUIziUe9w6nVn3T8=)
2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=)
3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Validity
Not Before: Jul 29 01:39:14 2026 GMT
Not After : Aug 5 01:39:14 2026 GMT
Subject: CN=6a6959c3-7b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:ed:fa:3c:18:42:9c:e6:49:f7:8c:af:84:
9c:bd:43:9c:49:41:b8:f9:fe:3b:6e:68:9c:19:31:
17:8f:34:64:01:24:10:e0:3e:85:0c:09:40:80:95:
a3:19:72:a0:11:d5:49:1b:c9:a6:74:26:11:0f:0b:
10:4f:73:0b:d2:e4:f7:79:bd:c2:25:6d:ee:7f:08:
25:b1:18:ff:77:72:1e:bf:aa:22:8a:a8:82:3e:9e:
b8:8b:3b:81:2c:1c:ae:2d:71:47:41:ea:c8:d5:08:
03:90:02:8b:45:c6:71:a8:38:4e:95:ac:00:85:11:
18:79:03:1a:01:8e:08:dd:46:8a:a4:f6:f4:0f:37:
93:1d:c6:47:7b:a1:89:ab:50:7c:f8:fa:6e:0d:7e:
5b:6f:24:6d:a8:ec:44:0f:7f:9f:69:92:55:b2:2a:
24:8e:86:12:97:d3:30:a5:b7:4a:3e:3e:13:10:f7:
c8:4c:36:c4:2a:78:de:00:f5:12:14:90:42:4c:b8:
3f:b6:53:97:5d:d8:d3:c3:58:9f:73:59:3e:55:fb:
f8:8f:0b:28:f8:4f:e7:c0:54:41:3a:7f:c4:ee:27:
bc:b3:10:aa:fa:1f:19:d3:e0:f4:8f:36:50:45:95:
57:88:41:e4:c7:e7:f7:3b:b0:8e:e6:e2:83:2c:bc:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:0F:3C:DD:FB:FE:70:98:96:AA:01:C7:17:50:8F:67:00:0A:F3
X509v3 Authority Key Identifier:
keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:86:b0:5d:fa:c2:68:f9:fd:4e:39:c7:0d:51:ab:6f:1b:11:
11:f7:72:de:a9:85:56:45:cf:46:4c:65:ef:f7:ef:73:77:07:
5e:78:ba:f0:17:af:c6:a3:bc:e8:28:f5:54:0e:6e:cb:65:c6:
48:cc:d7:12:8e:71:9d:78:ee:3c:77:34:1e:33:ab:34:b9:de:
66:b9:22:c7:48:81:f9:73:53:c9:f0:e7:dd:40:cd:47:58:d0:
64:88:45:47:ec:af:f0:87:63:2f:88:d4:7e:59:e2:3d:29:5b:
de:9a:fe:2d:8f:2b:fc:8f:e0:88:88:cc:b8:73:52:89:65:29:
be:1a:20:79:79:0b:6e:bb:fa:c6:06:aa:4c:ef:e3:6f:0b:79:
8d:45:ab:43:bd:1b:32:fa:a0:a7:da:42:85:65:16:06:3c:46:
5e:d1:d3:4e:16:16:87:fe:58:1d:26:01:e7:15:c8:63:03:92:
46:54:37:7b:89:fc:3e:9c:15:1d:d1:51:1b:ab:05:53:d0:0a:
b8:cf:98:eb:cf:2b:cd:b3:9b:e1:47:cd:06:b5:40:9e:d9:4b:
fd:90:d2:18:0a:19:b5:01:77:f3:4e:86:2d:e6:74:45:10:8e:
a6:6a:50:73:d2:9b:35:52:d0:12:c1:40:58:21:e8:b5:35:fa:
f3:5d:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:36 2026 by rpki-client