
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: I4uoBauHCWKHuss6Tejuf2bxMjiXrdTq4Du/R+rRhPw=
Subject key identifier: D7:EC:E1:65:E1:CA:E2:D5:9F:47:57:58:90:6D:65:DB:9E:98:69:E4
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 115C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0DFC
Signing time: Mon 21 Sep 2026 14:39:11 +0000
Manifest this update: Mon 21 Sep 2026 14:39:11 +0000
Manifest next update: Mon 28 Sep 2026 14:39:11 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: o9Bw/UMxSYvj4+OfznkkqK5xmHwGI7gj6deq1SXdSSw=)
2: B35BC30CB53211F1B42F37F15011F970.roa (hash: KSzj0LdTLAiz1FUtjk9h/u0XDwsyNspF5msQCwgzr/o=)
3: 0F75123EB42411F19F202BBB3E11F970.roa (hash: JNL6WqomlW19XznMLYXyyQo8z6bj0pJRq0tJqCedMSI=)
4: DC75E9A4B4E511F1A38ADEFD3811F970.roa (hash: /JW9Vk0apJhTZwFqw6P9ComNZ+dwVYIIOxiI0EsMVuY=)
5: 33253220B5CA11F19A00DBF44311F970.roa (hash: sKLVgopa7iD7VB18ZJtMNmaTxumSLt54Q49L9FE+4sc=)
6: 5A0CB6A2B4E811F1854CDF493911F970.roa (hash: LcwdNHZ8xt+068DDbraScihxciGm/JNMucUMjF6oTj0=)
7: 90DF5EC4B4E711F18624952E3911F970.roa (hash: X0rwSD+HZbPZY8h7R2w+ZV104yI5jo7fwpbe6qSeuYY=)
8: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
9: 8dGmB_rjCduiA5gacvFfz-CchFQ.asa (hash: zt1aa+pxSfuL6A44R86Qov6zVJzYPeS7hFwUUgZgyf0=)
10: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0zLruqLd1y3E26SuAUI5s7BI64FwkLMd9kXmrMpepI8=)
11: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
12: 387CFC8CB53211F1A3F79FC95011F970.roa (hash: 9RU4NC4GOwe0MSqyLPNSykxJNhzsYTqRRIbYRGwrGLY=)
13: 4F892B3E79E211F186F7A31866A30FBC.roa (hash: Grkkrl99VNi5MICWLKTFyVceKxzaNnh3d7iazSAthD0=)
14: 59103346B4E811F1854CDF493911F970.roa (hash: NNEMwnDF6sfToB41gHzDn96KDua5tOSoYN5KtgYQOME=)
15: F85564DA127711F18BE24F01353D8C67.roa (hash: W4FJg9h2yD393Ffa6VXVJzFyZbTn5L3T36PgxiREF00=)
16: 1E66F094B5CA11F1A1E2B0F14311F970.roa (hash: yWjDQdYNQhUx5r9jrComjavaquGimA0SlIdJ0UPL5Po=)
17: 849E45A839B811F1B2456B00AE833773.roa (hash: NIopzKgjt4Tj6l5DHK6hyouyjYzBxpc2yEAWeW/rLjM=)
18: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4444 (0x115c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 21 14:39:11 2026 GMT
Not After : Sep 28 14:39:11 2026 GMT
Subject: CN=6ab1418f-4b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:65:78:cb:bd:70:63:95:8d:a4:8f:1d:a3:
e5:34:35:d8:06:9f:db:ee:1b:4f:ec:b6:13:94:e4:
c2:b6:c5:d1:a2:e4:30:df:37:6e:2a:2b:6e:de:31:
0b:ff:bb:6c:0e:a7:a5:ec:b3:f1:5f:09:e3:77:1a:
79:8c:38:7c:ec:9c:7c:20:95:ad:5f:c4:e0:33:e1:
d8:bf:cf:db:c0:85:6a:f2:a8:5a:06:d8:99:ad:e6:
2e:d2:ed:36:41:cf:d2:2f:17:26:4e:e8:a0:b2:66:
2b:69:c9:6f:e0:d2:41:3c:c2:b2:97:6b:a1:4f:5c:
05:bf:5c:58:76:27:3c:1c:50:7c:72:e8:5b:1f:2e:
5a:cf:5e:51:12:68:2d:ec:17:ce:bd:38:16:4f:de:
72:5d:18:60:1b:4e:52:db:e4:d5:f9:89:2a:09:43:
5b:41:47:a6:3a:ad:34:1e:23:38:f8:ca:9e:44:0d:
47:a0:25:e5:81:4d:9e:e6:e7:b6:8e:a2:70:e6:e0:
d7:d9:03:dc:6e:40:db:ef:86:e1:93:7b:b0:ed:a6:
04:18:b6:b4:0c:b1:50:8d:1c:16:4e:ad:de:72:63:
8d:1f:5c:54:4e:d5:fe:3c:e9:41:02:79:04:69:4d:
47:a6:2c:6b:a4:a1:dd:90:cd:c3:ce:0b:d9:4b:c2:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:E1:65:E1:CA:E2:D5:9F:47:57:58:90:6D:65:DB:9E:98:69:E4
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:ba:3d:1c:00:7d:6d:a7:dd:ab:b8:20:92:7f:a4:d7:40:
5f:e8:9f:9e:cb:74:0f:02:40:f2:69:46:fd:76:97:4c:69:a1:
88:f6:26:ef:80:a3:5a:92:f7:b0:11:c6:1c:b5:e6:cc:96:b0:
2c:49:ed:94:1e:da:47:cb:a5:f9:de:76:e7:d6:18:98:a7:ed:
21:3e:8d:2a:77:16:e5:eb:51:f7:f7:ab:1f:ae:30:1b:1b:8d:
03:55:86:33:a2:92:1f:00:6d:6f:08:34:ed:59:72:a0:56:42:
dc:db:e8:6f:20:9b:c9:4d:96:85:d7:f6:be:ab:e0:93:22:0a:
21:6d:a4:f5:dd:f3:3c:9e:df:35:0c:92:26:98:8e:96:9b:a4:
48:2e:e8:b0:ca:78:e1:a2:2d:50:ec:c0:57:ec:b7:9e:cb:08:
ce:96:25:d2:79:a9:78:9a:c9:12:30:3e:9e:63:90:84:06:b7:
16:7a:cd:55:c6:38:b5:7c:c2:b1:5f:7b:d1:97:59:ec:dd:d7:
0c:b5:74:9d:9f:bf:d7:62:08:e9:29:6d:00:bb:8f:8d:b7:7c:
2e:d5:49:da:01:ee:90:c5:94:35:57:1b:79:d4:61:5b:4a:cb:
6d:2a:28:3f:78:51:3a:f3:c9:2d:cd:86:11:b5:72:f6:8e:f5:
9e:14:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:25:12 2026 by rpki-client