
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: LBCAaBxzHB/3ojtr1Vqvn6wgCYbRBDhipCqKW+ve9o8=
Subject key identifier: 1B:CF:23:14:2A:19:D8:5A:18:E1:23:35:F8:97:2B:C5:A3:28:91:AD
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0F8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0CFD
Signing time: Sun 01 Mar 2026 23:39:33 +0000
Manifest this update: Sun 01 Mar 2026 23:39:31 +0000
Manifest next update: Sun 08 Mar 2026 23:39:31 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: XJhpvm+RtCJ48uYka1WxISwaKjWNUlwPXLCn63tYgjo=)
2: F85564DA127711F18BE24F01353D8C67.roa (hash: hCAu6pcHWUIMyWaWGyNp3NtigxEvvU3L+2b0LrIvarc=)
3: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: eHsRFH/bLv4gjbtZ7GXuT+W88qnXkMZhcFm90YMJUzA=)
4: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
5: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
6: 655D9E3814AF11F19E8FAB69053D8C67.roa (hash: bAnf+YGfOymSQ6bYXuYNXm5+jKcl2Liy69AgWtK+w+k=)
7: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
8: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: vOc2GN7BlG8x5tEhIxLgdZI4bPOuE3Gwg9XoqF77HhU=)
9: 0774AB26097511F1BFBC3642103D8C67.roa (hash: 3VrV9cB6a9atWpktyrIaABSGlTKrMyHuOp6Mhvj+V9M=)
10: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
11: 6650EE4E14AF11F19E8FAB69053D8C67.roa (hash: O/VBCxcCNg7C75ttr8PxJ0JKGhwI8UDY8/DrT6whbMo=)
12: ABBC6CB0DFE911F0B906DA90576F56BC.roa (hash: 3a7PQ6lyOoiobx+AtdA+8zINlW7AfK9JYNIOekVrOGI=)
13: CB1C9052127611F1A98F9398343D8C67.roa (hash: S7ABZJUx+P6tHVs60+ta8zguoVa/9/cwSl1M2y/NVaA=)
14: 0244D9C20F0711F1954D90AA0F3D8C67.roa (hash: 29ZM+zz7Rf0QrNyuAlTFLnG0pSxDdwm6ot94EaHWCsg=)
15: DEF62968097411F1AD902940103D8C67.roa (hash: Gpl14BaVa4OImyk8OzEHEthTNuCD8CQIUTVJng6Jd+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3981 (0xf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Mar 1 23:39:31 2026 GMT
Not After : Mar 8 23:39:31 2026 GMT
Subject: CN=69a4ce34-8a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:5f:ed:92:75:82:cf:eb:e8:7d:88:8c:0c:
9b:63:b9:a8:d0:51:77:ff:5d:6c:45:db:78:1e:5d:
df:8c:b9:31:89:80:35:69:a6:d6:1e:40:16:d3:f8:
39:30:e0:41:1f:a9:b8:2a:6a:41:32:8a:56:e6:bd:
04:80:18:8f:43:63:51:ef:77:32:d4:7d:89:ae:0e:
01:5d:42:7f:52:ac:94:17:f8:3a:3d:80:19:8e:f0:
e4:b1:56:21:0c:23:83:de:f1:6e:7d:4e:c6:24:b4:
4b:a2:ff:84:5d:0f:0d:ad:8f:30:d0:1a:f1:c5:a6:
ca:03:45:4f:3e:83:f5:29:cc:9b:70:d2:37:67:d6:
fc:6f:a0:cf:b6:ca:e7:90:b8:75:a5:28:35:a0:30:
3e:c2:a4:4b:e0:fa:5d:9e:aa:38:2b:f4:f1:f2:58:
6f:de:82:77:b0:27:ed:1a:ab:01:d0:a1:6e:67:6e:
c7:eb:e6:a9:18:7d:8b:ec:9b:1e:4c:e2:bc:dd:8b:
6a:2e:cf:e2:9d:7b:3b:7c:04:34:e4:ff:fc:16:7d:
4d:fc:8a:dc:eb:d3:6c:fe:31:06:85:cc:59:c3:7e:
16:e2:0b:b8:1b:87:9c:3d:00:5d:9c:8b:b4:3b:33:
61:cd:f7:34:13:62:1d:b9:a5:ce:2d:5e:53:37:73:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:23:14:2A:19:D8:5A:18:E1:23:35:F8:97:2B:C5:A3:28:91:AD
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:cb:77:0e:74:bd:64:b1:ea:07:cd:f7:bb:e7:dc:d8:ef:
61:46:e3:cc:8b:e2:41:d1:2b:86:22:9a:1d:5a:c2:23:44:49:
53:7d:25:fe:13:bd:2d:a9:29:cc:da:a1:9a:3d:91:8e:cc:b9:
54:cf:e6:bf:eb:5d:3f:f6:0a:2c:07:e0:00:1f:16:b7:7b:aa:
53:84:06:b5:e1:06:a8:64:af:8f:26:52:31:4a:5b:67:8d:47:
26:e1:95:60:65:fb:23:ea:b1:f5:9d:2b:d4:08:c4:12:aa:3a:
94:5e:ac:b9:65:c6:ec:5e:05:cf:34:11:a4:34:7d:02:60:03:
db:bd:38:69:bb:fd:e1:dd:17:94:a7:ae:08:3e:9b:5b:a6:28:
2c:31:8c:cd:55:54:65:10:6a:59:20:87:72:46:3e:dd:34:2c:
33:0b:97:68:f0:73:4e:b1:aa:df:3b:79:33:2e:bb:90:ba:13:
3a:0b:f2:ec:5a:81:ed:0d:b9:e9:8f:8d:d5:86:04:1a:25:28:
54:b2:60:d0:45:00:7c:a5:8d:2b:22:e4:d1:a2:46:5b:5c:0c:
27:be:93:b6:88:fa:48:8d:f9:5f:3d:3d:e2:18:11:92:c8:9e:
f6:7b:d0:75:57:5d:27:d0:f6:23:8e:01:b7:36:13:37:e8:0a:
e3:88:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:54 2026 by rpki-client