
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json)
Hash identifier: 6jEEKdrpcvk1hwQ5PMdIlZJ+HOZg01Wn2cpmkq4R9Ko=
Subject key identifier: 0A:DC:52:E6:BD:D8:12:88:8C:56:05:49:4B:41:4C:90:A8:6E:D6:83
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
Manifest number: 94
Signing time: Sun 27 Sep 2026 08:00:36 +0000
Manifest this update: Sun 27 Sep 2026 08:00:35 +0000
Manifest next update: Sun 04 Oct 2026 08:00:35 +0000
Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: z+l1wXosFGd8bYubvFdnMO1H7Y5U4a95V5iNgO8eKCU=)
2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=)
3: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Validity
Not Before: Sep 27 08:00:35 2026 GMT
Not After : Oct 4 08:00:35 2026 GMT
Subject: CN=6ab8cd24-9b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:d6:a7:ca:2a:fc:f5:59:37:64:b9:44:57:
40:99:21:5d:bb:a5:14:ad:73:81:5e:98:10:4a:36:
73:91:16:9c:8e:39:bd:70:82:5e:58:4d:25:5c:c6:
ac:57:ce:9d:5a:c1:47:a1:36:d2:ac:50:23:89:63:
e0:bd:13:7f:a6:b4:eb:bf:dd:99:59:1f:41:20:6e:
5d:ab:10:87:ae:2d:71:9e:b5:53:db:b4:aa:cc:9f:
6e:69:d8:fe:3d:3e:aa:4d:22:5d:c3:1b:de:af:bb:
4e:aa:97:da:95:de:4b:16:92:47:89:3a:aa:49:b0:
9c:f3:d4:cc:ab:c2:e2:63:0a:0f:28:60:3a:9d:e6:
b2:41:ff:d0:b2:de:2e:4c:d1:1a:48:8d:7b:61:94:
1f:ae:a4:af:50:7d:4e:da:2e:4d:50:95:9d:94:58:
80:1e:c3:fd:85:1d:67:9e:59:92:4b:2e:3c:73:04:
24:60:f0:80:d2:ac:e4:c6:2e:36:a7:07:fa:f0:06:
0c:dd:ac:d4:dd:b3:29:d9:c8:0c:01:41:9d:b1:4f:
b0:f3:2a:a3:fe:9e:19:c9:8a:84:85:83:f8:4a:b9:
9f:1a:a6:29:2c:f0:01:8e:b6:50:8a:dc:a3:7e:e1:
1e:76:c4:21:99:5e:7f:57:5e:70:4b:dd:d7:9f:03:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:52:E6:BD:D8:12:88:8C:56:05:49:4B:41:4C:90:A8:6E:D6:83
X509v3 Authority Key Identifier:
keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:d0:b5:92:11:25:b6:22:65:ad:11:41:e3:64:2e:76:e9:
c7:74:ae:53:c7:1f:e6:ee:83:8b:45:80:92:90:c4:39:06:99:
15:e9:ed:d4:16:85:cb:61:2a:6e:ee:9e:7c:36:b1:93:dc:a8:
b5:d3:59:f2:20:62:c6:bb:71:3f:6c:4f:d6:01:c5:a8:b2:36:
71:58:00:1d:82:90:2e:eb:8f:9b:7f:53:dc:f8:52:14:70:f7:
8d:8e:cb:bb:0d:4a:85:5c:07:c1:3c:ce:d7:2a:6c:c1:fd:42:
59:f1:76:be:1f:a2:a9:0b:04:4f:7c:57:9b:d7:97:c3:50:35:
53:7d:fe:d0:d3:89:b3:a1:ad:1f:4e:66:bc:86:65:c0:23:e4:
40:de:4b:54:03:dd:6e:be:c9:5c:18:51:32:e2:5f:2e:90:4a:
c4:f2:23:ca:e1:2b:67:79:7d:68:2f:bc:d7:40:0c:87:b5:34:
9e:31:b8:ce:c8:b9:91:70:27:e4:00:03:44:2d:a8:fd:fe:a4:
b7:28:e9:ff:21:96:ce:f5:e5:fa:22:98:ad:1f:06:33:2c:17:
3d:88:f4:81:ae:39:a6:ff:6d:10:f2:31:bb:d4:5a:fc:e0:e4:
32:93:51:dd:62:5f:71:55:af:9c:f2:69:c1:da:bc:f3:4e:3a:
6b:c3:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:03:26 2026 by rpki-client