
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
File: o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json)
Hash identifier: P6tJYL/CDjDrw9TUn37Ubk7+OSukQNvdAuQBinV5Py8=
Subject key identifier: 68:4A:4A:58:7C:FA:5A:03:C6:B2:44:AE:7D:FD:08:AE:DA:7F:C0:61
Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3
Certificate issuer: /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
Manifest number: 048F
Signing time: Sat 18 Apr 2026 23:54:04 +0000
Manifest this update: Sat 18 Apr 2026 23:54:03 +0000
Manifest next update: Sat 25 Apr 2026 23:54:03 +0000
Files and hashes: 1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: nEyuxbXyVuo5M9cnUZ5zAXdyrShFbnd0mWUVf7q2Qno=)
2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 3dvCT2gOB8rQbKwOX6TGGzUBoVEiCpk9IxITGxHj+Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl
rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
Validity
Not Before: Apr 18 23:54:03 2026 GMT
Not After : Apr 25 23:54:03 2026 GMT
Subject: CN=69e4199c-a9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:0f:1f:49:d7:fb:ec:81:76:33:ee:fc:bd:
df:07:c0:4c:8c:39:24:20:6b:4b:43:c5:a7:6e:9d:
68:67:e7:8f:81:05:6f:11:1a:f4:f0:17:ad:20:28:
08:a7:ed:26:5a:a8:fe:d3:9a:f5:cc:4b:3e:72:a0:
28:71:d2:e6:ef:e2:97:86:a3:8a:79:b8:31:0f:c2:
9c:1c:55:b6:72:a3:55:03:20:69:f5:8b:37:09:17:
6e:e5:b4:15:b8:4c:7b:cd:fb:92:08:37:04:a2:09:
d2:63:d2:df:74:ae:97:ef:70:c7:c6:7d:d4:53:ff:
ed:45:59:64:39:3a:c9:dd:27:92:fa:7c:7a:ad:49:
c2:9e:5c:6d:d8:0f:ad:a1:34:18:38:97:b4:c4:32:
3f:6b:47:84:68:9b:25:9e:7f:8a:6a:d6:86:62:eb:
dd:a3:9c:c0:ad:ff:29:58:29:7f:c8:de:c2:9f:8b:
14:ae:31:8c:cf:6b:66:5a:17:9a:39:0f:2c:09:2c:
75:7a:06:94:65:30:cb:d6:b6:30:62:d0:f9:14:f0:
35:ab:7a:2b:ef:bd:3c:b2:60:f4:61:75:0c:62:43:
8a:bc:9a:f9:56:0a:99:4e:34:1a:7b:d9:e1:43:d1:
cb:c1:fa:d3:fd:ff:a5:69:7d:6c:65:30:eb:50:bf:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4A:4A:58:7C:FA:5A:03:C6:B2:44:AE:7D:FD:08:AE:DA:7F:C0:61
X509v3 Authority Key Identifier:
keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:73:f7:fb:77:6e:d8:88:3b:a3:7e:65:e7:4c:f7:05:ae:01:
45:10:92:7d:ce:b4:59:96:7a:b7:47:0d:19:1f:64:2d:35:91:
52:ff:a4:6e:5d:49:0b:b4:5e:48:56:c9:50:7f:b0:ac:ee:a3:
36:e5:3b:27:eb:c8:2a:f9:5d:d6:1e:28:87:d7:90:ed:84:a7:
b6:dc:b5:ac:3e:09:a1:78:6a:68:d8:3a:4f:0e:8c:31:ed:e5:
b8:ae:4d:57:dc:48:90:cf:76:8d:ea:f3:82:38:35:6f:78:55:
72:16:3d:95:05:9d:0b:5b:31:f0:6a:9e:ed:ea:17:88:63:f0:
9d:81:c7:98:25:60:0a:9e:58:21:e4:6f:34:16:07:9f:57:58:
b0:9b:bf:ba:35:90:4f:d6:f3:db:24:2b:fb:48:0b:24:4f:79:
12:08:9a:a1:11:9f:00:62:94:cd:59:b4:c9:36:8d:63:d5:b1:
71:90:8d:3b:d4:87:1f:59:b0:16:0a:63:49:86:fa:1d:8e:32:
a1:60:b9:0d:e5:32:e2:22:bd:9b:1f:5a:ee:00:17:c6:ae:7b:
0a:6a:20:e7:12:27:c2:74:9e:62:c1:d6:85:f8:6b:53:22:e0:
de:87:e8:26:e0:31:29:07:54:45:3d:99:d2:e6:8e:e1:41:26:
5e:2d:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:59 2026 by rpki-client