
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: FaysSSJQJvN9xnneINpbtLSRwzG/NALZdEsAYDbyxMI=
Subject key identifier: 1F:5F:F1:41:57:AF:E6:B0:11:36:D6:AB:2D:D9:06:B7:EB:81:77:66
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: 0102
Signing time: Mon 02 Mar 2026 01:00:28 +0000
Manifest this update: Mon 02 Mar 2026 01:00:26 +0000
Manifest next update: Mon 09 Mar 2026 01:00:26 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: 8doSfW/wn6uSWxWY/J7QzmFhh3mCYdkNzO7gjWaJubI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Mar 2 01:00:26 2026 GMT
Not After : Mar 9 01:00:26 2026 GMT
Subject: CN=69a4e12b-3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:f7:bb:1e:a1:1d:c4:00:86:d8:c9:e1:48:
84:71:24:af:ba:07:18:5f:fe:b0:e3:8c:52:ce:14:
78:5c:58:34:a6:7e:ba:ad:e8:b4:3c:70:ce:7c:b5:
9f:d2:95:42:f7:2e:d5:af:29:55:d0:7d:b3:ef:8b:
9b:d2:bc:02:01:0c:1c:89:6d:72:8c:b1:95:0b:b2:
6d:0f:1b:47:29:c9:53:a4:a3:ef:f8:08:39:8f:c5:
c4:eb:67:e6:c4:03:cd:c4:e5:3f:7d:19:f7:84:f1:
5d:ae:cd:28:43:88:f6:c4:0b:5f:c5:43:ff:2a:f1:
d7:98:17:47:af:40:1a:4e:9d:8d:7d:73:ae:22:a0:
8e:99:6e:ee:f7:b6:00:fe:b0:05:d3:88:a5:16:15:
5c:77:c8:b6:72:f5:88:ba:69:87:7e:61:ee:b1:5b:
2e:6a:54:73:6b:39:59:f0:cd:b1:11:56:fe:5d:7a:
ff:04:a3:d6:20:2d:8a:8e:97:6f:8a:88:14:5f:07:
e4:d6:0d:5f:0d:67:00:60:a6:e3:6a:f7:e5:0f:5d:
48:19:42:f1:50:4f:65:9e:2e:75:47:c1:cc:99:3f:
66:ef:c4:6c:f3:7b:fa:36:29:17:c4:3f:14:3b:53:
87:42:45:bd:d5:ce:82:11:d7:0f:04:05:b5:6e:f9:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:F1:41:57:AF:E6:B0:11:36:D6:AB:2D:D9:06:B7:EB:81:77:66
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:f2:ee:06:f3:a4:cb:0f:6b:aa:1f:03:43:d0:82:5a:0c:
97:a0:dd:71:5c:c6:b3:b6:ef:01:31:e9:c7:c7:2b:d0:29:47:
58:3b:b9:8e:e3:8d:2b:38:1a:3a:9a:dc:07:c0:82:6c:6b:f8:
6b:30:50:94:98:2a:6b:61:7d:0d:3b:91:33:e7:ce:6c:aa:83:
f1:ad:0a:e7:8b:88:52:e2:fd:bc:f0:29:f5:40:68:2c:59:85:
26:48:97:02:82:e8:d3:c3:c9:de:1f:eb:f4:1f:9e:c9:17:cc:
b7:6b:bc:a2:89:b0:73:47:e5:de:26:c1:9e:15:ad:ce:6f:3e:
68:83:d2:c4:a8:ac:96:a8:ee:f6:40:b5:15:ef:47:2a:ee:8c:
e0:6d:6d:ae:9d:7e:f3:d2:29:d7:81:05:28:f3:9c:c0:3e:7a:
13:23:65:ec:71:06:e5:d7:7f:d4:e1:b1:35:76:e8:58:10:9b:
9f:96:ff:65:9a:e5:2b:8a:97:a5:cc:90:bd:b6:d8:17:80:44:
c2:9c:9a:5a:66:b3:b1:a2:98:2c:84:21:05:92:a5:e9:f3:3e:
78:28:05:92:5f:2a:a1:f1:68:47:b6:e5:b1:41:ae:7e:f7:c1:
2b:e4:b6:31:44:41:d7:8d:a1:50:df:57:79:21:0e:72:ff:b9:
e7:30:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:00 2026 by rpki-client