
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
File: Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft (raw, json)
Hash identifier: W/kMMw/QdDHU2mZRiIHcuf6OWV7RMk7baBLxwVD0Tls=
Subject key identifier: FC:2E:43:0D:41:11:C4:A4:E5:D4:9E:FD:57:23:42:7A:13:90:76:D1
Authority key identifier: 39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
Certificate issuer: /CN=A9129F26/serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
Manifest number: 21
Signing time: Sun 27 Sep 2026 09:27:28 +0000
Manifest this update: Sun 27 Sep 2026 09:27:27 +0000
Manifest next update: Sun 04 Oct 2026 09:27:27 +0000
Files and hashes: 1: Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl (hash: CFbIxut3Q74TmilPwWUs35gjLBPs2R8Tu2NIW9XsVKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl
rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F26, serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
Validity
Not Before: Sep 27 09:27:27 2026 GMT
Not After : Oct 4 09:27:27 2026 GMT
Subject: CN=6ab8e17f-4745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:ec:e9:3c:92:b2:67:bd:f9:c3:da:21:12:
fc:af:c3:d4:f6:ec:d2:f2:c3:0e:5b:76:3f:69:a9:
2b:b9:2b:82:df:20:47:6d:3f:46:8d:e6:48:9c:4f:
af:c5:f8:3f:b0:e2:fa:8b:a5:11:6a:b8:32:a8:f3:
da:27:07:1b:db:b3:9a:c4:0d:46:62:3e:d3:39:3c:
de:10:31:c5:38:f8:bf:97:dc:18:0f:1a:02:59:89:
ac:d7:ba:7f:0d:5b:f4:81:4a:c2:9e:16:e6:a6:7c:
d0:05:8c:95:ef:d8:1a:f1:23:b2:bc:ac:b1:eb:05:
bb:c9:37:29:8f:f1:db:dc:cd:55:87:76:ce:9d:ae:
4f:44:fd:fe:53:a4:84:ff:38:fc:10:b4:07:5d:94:
8c:96:f4:f2:86:55:23:e6:04:f4:9e:f6:73:bf:dc:
e1:f8:03:c3:3c:47:92:10:f8:ff:3f:03:e5:28:62:
62:da:7a:40:64:0b:3d:26:20:e9:fc:e4:04:59:0e:
1f:8d:31:a2:4f:03:29:4c:85:ef:7b:44:27:a3:92:
96:0e:e5:e6:e6:a0:08:33:a3:5e:e9:3d:54:6c:9c:
5e:de:4d:00:71:23:39:0f:17:3d:54:65:5e:bf:b3:
2b:4a:a5:d1:56:dd:00:bc:5e:1a:ba:f0:76:e7:a7:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2E:43:0D:41:11:C4:A4:E5:D4:9E:FD:57:23:42:7A:13:90:76:D1
X509v3 Authority Key Identifier:
keyid:39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:32:93:a7:9b:85:c9:42:5e:f1:ce:90:2a:d2:d9:92:e5:
0b:ec:a0:cd:0e:f0:04:8f:af:ba:13:d2:8b:89:4c:b6:8c:69:
35:02:40:2f:2f:73:69:61:2b:49:98:75:06:e3:2f:5b:0c:fe:
23:3e:9b:d0:c6:0b:dd:f0:22:4a:c1:97:36:17:f9:45:36:ff:
96:6e:b3:44:1a:47:c3:10:5b:59:cf:f1:b3:5f:db:cd:e0:32:
6a:d9:34:54:b0:7f:62:a0:ce:e8:2e:a1:98:e8:29:f8:6c:29:
d2:9d:64:26:0c:6e:f4:59:15:d5:64:79:87:d5:90:1b:4a:29:
cc:ba:46:7d:39:6f:45:05:91:38:4c:57:48:2b:5d:28:f6:f3:
3f:8a:5d:f3:d2:ec:7e:39:36:50:f5:79:1d:de:10:de:a1:3f:
e9:74:ef:af:f7:53:6c:21:77:a4:8e:0c:a2:2d:2c:fe:d8:99:
ce:0a:6c:61:f9:c9:cc:a8:e2:03:d2:26:bc:51:1a:18:f0:97:
c3:34:26:d4:9a:b9:90:3c:25:b9:61:c5:06:d1:ee:bc:06:c6:
a4:68:60:68:88:b4:b3:04:53:e5:7e:66:5b:9f:33:39:cb:a2:
29:ad:49:6d:c6:2c:9b:39:6f:f3:44:01:f5:c5:f5:f2:49:d4:
bd:59:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:59 2026 by rpki-client