
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier: 56pTkoWaYpEO+AcQXi8DWrXNeUoEb0ZthD5zi4iUEk8=
Subject key identifier: 1F:20:E3:67:2D:34:75:8A:E3:04:4E:E6:F0:8C:0F:E0:D3:BF:A3:F1
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 15E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number: 15CB
Signing time: Fri 12 Jun 2026 16:42:07 +0000
Manifest this update: Fri 12 Jun 2026 16:42:07 +0000
Manifest next update: Fri 19 Jun 2026 16:42:07 +0000
Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: shs0236PjBnwzOznJ8+eZzVwK9JOYgCsBQEfeOfGfyY=)
2: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=)
3: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5600 (0x15e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: Jun 12 16:42:07 2026 GMT
Not After : Jun 19 16:42:07 2026 GMT
Subject: CN=6a2c36df-34cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:16:72:89:60:30:27:e7:81:7e:e8:81:52:
94:3b:9a:82:17:e1:1a:e6:9f:40:ac:86:ff:eb:69:
fe:5f:f8:a1:38:a5:ae:60:ed:e0:a4:9a:28:21:b6:
25:30:a2:3e:33:82:8b:81:e8:f7:f6:6c:b3:6a:66:
a7:44:a2:07:3d:ea:e7:19:a5:48:27:0e:3c:6d:38:
30:4f:a2:89:a6:60:1f:45:5b:8d:3d:27:b1:1f:e5:
1c:4a:21:19:4a:1d:05:dc:26:61:83:65:da:79:35:
1c:2f:4a:f2:fa:f0:c4:70:34:3f:15:3f:d0:94:66:
70:45:9c:54:8c:99:c3:97:97:da:96:aa:aa:09:a2:
fe:09:42:39:fd:ce:12:dd:6f:f2:1d:62:9e:6f:3a:
fe:a5:7d:65:d4:9d:2a:b5:cf:95:58:74:66:c2:0d:
eb:ae:bd:03:f6:7f:5f:44:d0:6d:9c:ca:1c:df:85:
a7:11:76:47:27:01:c7:96:c2:f8:b9:34:8f:26:73:
8c:15:57:38:0e:c5:53:47:87:da:3e:ea:9c:ec:9c:
e3:02:c2:84:87:41:5b:0a:b6:68:b7:a9:ff:d9:9b:
d8:83:46:03:90:cf:ee:90:e3:91:d8:e9:1a:d7:93:
02:22:66:28:10:b5:15:c5:a9:7b:a4:b9:1e:b1:f7:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:E3:67:2D:34:75:8A:E3:04:4E:E6:F0:8C:0F:E0:D3:BF:A3:F1
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:26:49:b7:d4:90:20:d0:db:8a:d8:26:e2:27:01:d9:ed:67:
c4:d7:fa:a7:97:9f:28:fb:f9:f6:48:73:f9:59:98:81:ac:05:
f1:5c:82:77:32:79:8a:82:37:dd:3e:6e:94:b9:34:b7:e8:66:
a5:ab:2d:3d:be:f8:74:20:0d:f6:81:e0:a3:0d:39:3f:07:9c:
51:18:d2:86:0b:59:a9:f5:23:d0:23:be:e5:c8:f2:39:9c:7a:
da:95:ce:f8:84:d7:a9:6f:7c:af:cf:b7:86:b9:12:00:69:62:
c5:b9:9c:46:e1:32:32:cd:2a:22:26:2f:e8:0e:18:b6:b4:89:
5d:ae:aa:74:cf:a6:24:64:4e:13:5c:fc:c2:a9:8c:d2:40:94:
c3:bf:7e:7d:32:54:5b:ae:e5:2e:f0:fb:dc:d6:bd:20:29:16:
84:34:58:35:60:0a:38:c4:d1:4f:d8:4f:25:d8:f7:cd:94:2d:
fa:1b:21:92:87:b1:f1:da:3d:5e:f7:26:99:4c:2b:50:c2:72:
f5:36:ad:ff:20:28:45:d8:81:0f:4e:f7:4b:18:17:98:6e:a5:
93:95:30:eb:a7:ed:9e:a0:d3:26:00:02:e3:9a:d7:76:e4:31:
e9:18:45:b3:ad:12:6f:c8:ed:fd:f8:39:ea:51:38:8a:d1:1f:
c9:98:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:51 2026 by rpki-client