
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: jg9gnHSwGH3LIQsTpPwKYzpoSJqw0LYzoWV95tz0BzI=
Subject key identifier: 97:BE:09:66:09:20:0D:94:07:02:C2:53:69:89:D7:25:31:FF:92:16
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1038
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0D59
Signing time: Thu 16 Apr 2026 19:37:14 +0000
Manifest this update: Thu 16 Apr 2026 19:37:13 +0000
Manifest next update: Thu 23 Apr 2026 19:37:13 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: LN5ufNN7nqA1vfIL3eFukY7kGpdOID7ccaqrJasBlBc=)
2: D9419C8A39B911F1AC578A42AE833773.roa (hash: u0+vsuHh2tpscXLT4XmSu2xYWvHdbQ4hrrNQI4gBsL8=)
3: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
4: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
5: 0774AB26097511F1BFBC3642103D8C67.roa (hash: oaFE8k3gTxI2O5pWpYuOiN1BF0ZHPJb6jXRple8GvF0=)
6: 849E45A839B811F1B2456B00AE833773.roa (hash: rkGl/IChEpjbeZ5opw0yCmPuYzYLmWhbVDtR3KAapys=)
7: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: TEd4/aWDB1KLW6JK30VIuFWcMe+qda12gGy9MUlfqhE=)
8: 1BF6F174375D11F1989107E49E833773.roa (hash: H4nK09o1+82H4RngiTNEjazgOSGqKXL41P0ZFND+8js=)
9: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
10: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
11: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
12: 21C1E9C834ED11F1B3F8D4F794833773.roa (hash: XmEmU8xpSSRc2YK37j1T2ZZ21j9GH7+KqciCi6ag1jY=)
13: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
14: 1FFC18AC34ED11F1B3F8D4F794833773.roa (hash: DprVbdSlK6AE+WHK3J1hEBE2QlapEHkVAmTqFSXVgn0=)
15: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
16: F85564DA127711F18BE24F01353D8C67.roa (hash: hCAu6pcHWUIMyWaWGyNp3NtigxEvvU3L+2b0LrIvarc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4152 (0x1038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 16 19:37:13 2026 GMT
Not After : Apr 23 19:37:13 2026 GMT
Subject: CN=69e13a6a-1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:f6:63:d4:7c:88:b8:06:fe:e0:a1:e2:76:
10:cc:a9:16:72:32:39:4b:58:e2:16:3f:fd:21:ad:
47:cc:f7:4a:45:86:00:c5:df:ff:88:58:a7:48:19:
de:91:c0:86:e9:e9:7c:a1:69:73:62:ed:4b:36:55:
9f:18:92:52:3a:ac:48:0f:1d:5a:0a:9e:37:56:56:
51:71:5c:84:4b:c7:1c:74:f6:f0:70:a2:a3:bc:53:
59:87:94:14:33:49:0a:9e:58:b7:47:ab:e8:74:12:
9e:96:0e:e1:0e:0e:ff:14:af:d1:a5:0b:78:19:e0:
04:6e:7e:aa:6e:0f:53:91:7f:e2:3d:70:b6:74:79:
00:a2:57:55:18:c9:e4:89:14:65:16:e8:d7:75:af:
7d:86:ce:f5:18:b6:ca:24:51:e9:8a:6e:e4:7a:19:
96:0a:df:c8:d0:84:c4:db:6f:79:df:27:38:b0:3c:
b1:50:05:3f:72:20:e3:3a:74:09:4c:bd:b5:3a:bc:
40:4e:d8:47:6d:3b:f8:b1:42:6c:f1:e0:50:2c:3a:
46:f6:b0:3b:82:e6:c5:a0:9a:d9:40:be:a0:df:26:
c3:e7:72:04:e8:bb:b9:18:64:ba:9e:c7:6d:d3:e9:
b5:2a:58:39:14:08:48:25:59:d5:26:8f:4f:2b:24:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:09:66:09:20:0D:94:07:02:C2:53:69:89:D7:25:31:FF:92:16
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:46:02:81:9e:13:13:ee:c7:f8:2e:31:e6:25:80:c7:ac:
9f:90:90:a3:ed:0a:a8:70:6e:fa:90:ec:be:32:43:15:98:f2:
49:9e:7e:e6:6d:c8:39:62:3f:a9:1b:96:25:01:25:7c:a2:10:
6a:2c:be:8e:dd:41:f4:45:7f:8c:c4:6a:94:d0:18:fa:08:c4:
bb:f7:4e:c2:09:e1:31:33:f5:cf:06:85:57:1d:1d:c4:ee:ec:
a7:c2:d8:99:a8:be:c2:11:53:cd:f9:fd:60:38:1f:b1:87:55:
9e:dd:65:66:51:5d:9a:d4:64:80:03:e6:d3:45:bf:ff:7f:a4:
b2:23:db:a3:3a:18:c6:be:2e:8f:16:fb:d5:62:b7:20:f4:95:
5e:f5:9c:2f:ff:00:f8:fb:65:f6:83:0e:ad:11:bf:b8:2b:55:
ca:79:f7:53:2d:d7:e5:7c:cf:77:16:92:fd:b2:b5:f7:66:5d:
d0:21:fd:03:e5:18:e7:39:f6:27:a0:34:05:e2:66:d2:05:24:
2c:71:6d:87:31:13:86:cd:08:db:75:80:5e:72:73:d6:ea:a1:
b1:6b:9a:59:38:56:66:b8:65:5b:81:b2:d1:f4:62:c9:91:11:
e2:6c:4c:72:10:72:66:26:c1:52:e9:a2:9b:10:5c:73:06:40:
18:77:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:42 2026 by rpki-client