
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier: fkqiW8VumxltA/0gzOsfS7lgF11NmS6m2CPh38a2oyc=
Subject key identifier: 8C:01:34:3A:CE:0A:2C:CB:BD:88:2A:72:71:4A:BD:82:5E:06:AB:5D
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number: 03D6
Signing time: Fri 17 Apr 2026 00:27:57 +0000
Manifest this update: Fri 17 Apr 2026 00:27:57 +0000
Manifest next update: Fri 24 Apr 2026 00:27:57 +0000
Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: 5vVbNjmv+bazfPFTKefbKSw94acWwNTKu2f3hy1xQ2Q=)
2: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
3: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Validity
Not Before: Apr 17 00:27:57 2026 GMT
Not After : Apr 24 00:27:57 2026 GMT
Subject: CN=69e17e8d-8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:eb:1b:4d:d2:9a:3d:8d:fd:fe:2b:8a:da:
c1:73:b1:0a:2e:99:3f:92:96:61:71:f7:b7:e4:1e:
89:94:25:92:98:40:3c:d4:21:f5:3e:4b:b5:2a:5b:
51:68:26:6f:58:4d:b9:83:31:ca:6b:f9:c7:80:98:
bd:d3:f4:80:76:c0:c1:c3:aa:1f:5b:1f:54:6c:c6:
15:1e:14:73:ef:4f:c2:cc:e2:5e:6f:ce:13:42:f7:
1c:1d:6c:af:17:e2:e6:fd:96:37:c1:5e:aa:5b:ee:
3d:71:24:86:e8:fa:4d:89:51:13:9b:cb:c2:e9:2c:
49:ec:ed:8d:bd:83:53:06:29:bc:95:13:eb:ad:de:
f3:9a:95:14:8d:bc:de:d8:1c:76:c3:9e:af:57:1f:
12:ef:38:c6:b4:b8:ef:70:f4:31:11:01:34:1d:bf:
a1:53:64:78:40:a8:f5:49:1c:e1:ee:ef:1c:bb:1f:
57:cb:ca:f2:31:89:02:f6:1b:58:d4:0a:ea:a8:c5:
d1:51:3d:e1:18:fa:c4:4d:58:9e:af:77:cf:80:c4:
24:72:01:04:e8:c3:a0:3b:17:db:ee:1e:a7:e3:4b:
1f:07:60:9d:b3:d2:1c:56:06:1c:9b:13:57:8b:cc:
5c:bc:c8:54:e6:6d:3a:49:55:58:d4:f5:c3:94:3d:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:34:3A:CE:0A:2C:CB:BD:88:2A:72:71:4A:BD:82:5E:06:AB:5D
X509v3 Authority Key Identifier:
keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:3f:fa:70:ab:4e:24:12:f4:42:33:d3:ff:86:a7:44:d6:
5e:b3:26:e1:89:a6:3e:6f:cd:af:89:03:af:c3:92:c7:ea:f3:
ad:23:ed:b8:5b:f1:6f:3a:29:b1:49:29:29:ac:90:e4:20:61:
93:38:3e:d0:af:cc:33:05:1c:db:0a:d7:fe:b9:29:4d:e0:29:
ca:64:8e:56:82:34:78:9c:5c:36:e8:02:a8:20:10:12:80:2e:
f4:74:e4:60:48:56:56:d1:9b:ba:1a:b6:1d:d0:d2:9a:ac:8a:
cd:1a:ac:68:1e:b6:b9:59:f9:56:e9:9a:93:23:97:92:1e:b6:
c7:1d:13:99:45:c4:ad:b4:4b:5e:14:76:a9:7c:76:85:c8:ef:
06:b0:3b:35:65:31:e4:67:e6:eb:d9:57:8d:e8:76:35:d6:c2:
df:c4:1c:a2:65:7b:2b:d3:5b:d4:96:59:b5:14:72:bd:04:41:
f8:52:d2:a9:59:a0:00:80:25:aa:91:69:be:a8:78:84:9b:77:
62:b6:13:60:ed:f0:1e:f0:48:0e:b6:3d:66:63:dd:35:5a:3c:
2a:81:e1:3d:65:18:0e:76:fd:e3:46:56:71:3c:51:61:bf:23:
84:36:d1:64:bc:de:c0:24:6e:e9:b2:c0:ad:76:1d:2e:13:fc:
a6:58:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:58 2026 by rpki-client