
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: o6iFILUd5g9rUk3IQC4q99Yz9GicSZUHOsZrSsldApU=
Subject key identifier: BB:57:31:AB:F9:3E:A9:F6:05:D8:37:78:D7:5C:8C:B7:35:FC:D0:ED
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0E5D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0E48
Signing time: Sat 28 Feb 2026 14:43:12 +0000
Manifest this update: Sat 28 Feb 2026 14:43:12 +0000
Manifest next update: Sat 07 Mar 2026 14:43:12 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: MqiYKVtwiMHAIptNhpQHmXD+Fca+3jpjTnzhjn4A14A=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VLsVnxxlVtlgcvP3UYgj2e5kasbUoQl98RO4NGwLI8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Feb 28 14:43:12 2026 GMT
Not After : Mar 7 14:43:12 2026 GMT
Subject: CN=69a2ff00-1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:b1:ab:14:8f:f7:2c:8b:42:b9:e1:9b:a7:
97:d1:77:e5:28:90:fd:34:90:6b:6e:53:e6:2f:3c:
86:98:f1:f9:c7:08:95:ec:ea:c1:cd:fe:b5:81:ac:
81:af:6b:97:bd:1c:68:85:78:06:a8:12:3b:22:ed:
e7:38:d0:15:b8:fb:e2:5d:fd:82:36:10:3f:a8:8b:
9a:02:b4:f5:1e:44:39:30:76:ca:ab:d3:83:f9:96:
96:db:18:3b:2f:29:3d:23:82:4a:36:88:02:cf:5b:
29:a4:16:b5:c0:26:05:98:06:b9:77:91:c5:cc:ef:
bf:78:4f:80:bf:29:3c:a2:49:56:8e:26:5b:9d:7a:
75:31:be:b8:0e:63:dd:0d:1b:cb:ba:94:18:3c:0e:
d9:f6:20:f0:f1:76:42:08:9c:ff:ca:44:e8:cb:ad:
cf:67:98:63:db:a2:47:46:06:de:7d:d5:fd:60:95:
6e:62:6d:0f:80:d4:ff:5a:2b:12:4d:ca:88:2c:30:
5d:1c:ef:63:b7:bf:6e:7a:bb:fc:0f:55:a2:ab:5b:
b6:8d:0e:5e:44:89:40:78:79:e8:7a:74:8b:7d:53:
1d:f6:cc:4e:98:be:df:d4:26:95:41:38:1d:6b:69:
7c:0e:eb:ee:f6:46:c6:40:2b:fb:5b:fc:d5:ae:c8:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:31:AB:F9:3E:A9:F6:05:D8:37:78:D7:5C:8C:B7:35:FC:D0:ED
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:28:0b:41:bd:50:b7:0d:a4:b6:b0:ae:2b:c0:4a:e5:98:f2:
6e:27:68:4b:b7:ac:76:a1:7b:ac:f9:9c:78:47:b6:9c:5e:28:
89:b3:b7:4b:ca:31:c4:a1:6b:4a:6c:7b:50:0e:f2:e8:55:d4:
f9:ac:7a:35:18:ba:b3:f7:e5:ba:83:cd:f5:03:2a:34:02:af:
6d:42:27:ae:cf:95:f0:9a:06:45:7b:ae:96:28:46:35:01:8c:
3f:12:a2:e4:86:4d:48:9f:4f:72:df:7f:04:39:51:16:49:7b:
dd:6e:8f:f4:57:42:cd:c5:55:9e:64:40:c0:b4:f4:95:34:fb:
d3:5f:af:bf:55:d3:70:db:05:a6:30:e4:bf:51:2d:e8:24:92:
15:2b:8c:2a:ed:a6:da:cf:35:c9:f6:01:b8:cc:b1:94:de:0f:
80:22:58:82:7a:51:a1:3b:7b:22:6c:69:9c:a5:81:f5:1d:32:
ac:34:84:ff:58:bf:4b:59:f4:ed:fa:5f:9e:6b:ff:3b:0b:17:
ff:27:50:de:e1:90:c9:ff:fa:73:f8:44:a6:13:fd:fb:46:1e:
84:0b:c3:d9:5e:45:ee:0e:7f:e5:bc:70:1d:81:02:0e:1d:1f:
13:ef:b1:91:43:4a:1d:ea:c9:de:6a:88:16:24:1a:36:d2:6f:
4e:a8:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:24 2026 by rpki-client