
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json)
Hash identifier: cDrHVgjb4XEc/lM8qbW5DoeyXpIIx/0OFkpg1Wc18OU=
Subject key identifier: 8A:95:D3:A1:26:FB:61:C0:7E:85:D6:99:04:23:30:CF:B2:B9:26:22
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
Manifest number: 2A
Signing time: Sun 01 Mar 2026 10:13:42 +0000
Manifest this update: Sun 01 Mar 2026 10:13:41 +0000
Manifest next update: Sun 08 Mar 2026 10:13:41 +0000
Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: 8cM5fg4dAz8nNFnUR3YKqlccpwTLdaFqNF+tjzXTeoQ=)
2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=)
3: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Validity
Not Before: Mar 1 10:13:41 2026 GMT
Not After : Mar 8 10:13:41 2026 GMT
Subject: CN=69a41155-8ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:cc:2a:ea:4a:fc:89:15:8f:f7:6c:95:90:
66:84:53:1d:20:78:32:1f:85:dc:3e:dc:ef:15:cc:
ea:65:fc:f7:f0:f3:a9:49:43:aa:be:b1:a7:59:63:
38:32:5c:c7:9c:8f:d8:e7:51:6d:48:92:c2:18:61:
ce:bc:e4:bf:c1:d5:d7:b2:4b:59:67:ba:23:38:74:
0d:42:8a:9d:46:de:2e:c2:4d:2d:55:cc:73:92:02:
bb:82:3f:40:58:24:98:3f:44:ae:40:35:e6:82:6d:
7d:c3:5a:44:89:dc:45:22:2d:91:7e:0b:e3:9c:c6:
db:1e:23:7e:45:8b:44:54:4b:73:9a:c7:ac:47:6c:
29:ff:b0:a4:1b:c1:7b:c6:fa:f5:ba:54:3b:2d:9c:
e0:cc:c3:c9:17:d7:4f:0f:df:c8:fd:60:e5:59:a6:
88:06:9c:3f:12:22:c5:58:39:82:29:e4:19:fb:28:
e8:35:76:f5:88:98:27:99:f4:01:b2:e2:f3:36:86:
5e:ea:19:82:06:56:6c:0a:70:34:55:68:9c:c2:b9:
c3:48:74:21:a3:f5:89:8b:8f:af:9c:3d:3e:0d:29:
d4:3b:67:74:46:30:fc:ee:9c:f9:0b:39:46:ff:35:
35:18:7e:bb:d4:80:61:0a:14:0f:1e:f1:75:48:43:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:D3:A1:26:FB:61:C0:7E:85:D6:99:04:23:30:CF:B2:B9:26:22
X509v3 Authority Key Identifier:
keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:5f:09:dc:88:73:fc:7f:bd:3d:eb:77:2a:13:a1:8a:18:
8d:45:96:01:12:71:60:28:9c:ec:1d:43:b9:a6:55:c8:c3:28:
28:bc:3b:9e:b1:7f:9c:89:a5:91:f7:41:55:ac:11:71:5f:4c:
bf:09:5d:a9:12:ea:ed:e1:bc:9d:44:dd:81:03:4b:1e:6a:50:
ae:7c:0a:98:5d:be:2d:55:80:10:88:4f:1c:72:6d:e6:84:8f:
24:43:3c:27:36:f0:62:3e:96:27:92:72:7c:18:9c:d8:3b:6f:
da:35:e9:ae:b8:d5:de:ea:5e:98:84:51:5c:58:4f:9f:eb:0b:
16:6d:f3:2d:7a:02:7d:c3:4e:e5:c1:09:ed:ab:1b:74:ea:56:
ee:f7:b2:75:32:cc:c1:58:4b:66:36:5e:62:c5:95:c9:eb:de:
88:a2:54:92:be:8c:4d:1f:5b:55:3d:ee:4a:d5:38:a3:7d:f4:
c3:d9:d6:ac:fc:73:13:cf:6d:96:dd:97:f1:9f:50:6a:02:a3:
8a:c6:66:d0:a4:a6:3d:01:17:bb:5b:7d:a4:28:24:07:57:7d:
51:7f:ee:45:c6:a8:85:91:0e:04:1c:74:98:55:e5:72:7c:73:
1f:86:4c:6e:63:c6:6f:9f:ef:9b:69:52:ef:69:3a:fe:0b:16:
ab:04:fb:d4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF
M0JGRDQ1RjAeFw0yNjAzMDExMDEzNDFaFw0yNjAzMDgxMDEzNDFaMBgxFjAUBgNV
BAMTDTY5YTQxMTU1LThiYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC18swq6kr8iRWP92yVkGaEUx0geDIfhdw+3O8VzOpl/Pfw86lJQ6q+sadZYzgy
XMecj9jnUW1IksIYYc685L/B1deyS1lnuiM4dA1Cip1G3i7CTS1VzHOSAruCP0BY
JJg/RK5ANeaCbX3DWkSJ3EUiLZF+C+OcxtseI35Fi0RUS3Oax6xHbCn/sKQbwXvG
+vW6VDstnODMw8kX108P38j9YOVZpogGnD8SIsVYOYIp5Bn7KOg1dvWImCeZ9AGy
4vM2hl7qGYIGVmwKcDRVaJzCucNIdCGj9YmLj6+cPT4NKdQ7Z3RGMPzunPkLOUb/
NTUYfrvUgGEKFA8e8XVIQ3uLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUipXToSb7
YcB+hdaZBCMwz7K5JiIwHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz
MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
OTQ2L0I2NzEwMTMwREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVH
LU9aMDd4NzRxNC1PXzFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6SF8J3Ihz/H+9Pet3KhOhihiNRZYBEnFgKJzsHUO5plXIwygovDuesX+ciaWR
90FVrBFxX0y/CV2pEurt4bydRN2BA0sealCufAqYXb4tVYAQiE8ccm3mhI8kQzwn
NvBiPpYnknJ8GJzYO2/aNemuuNXe6l6YhFFcWE+f6wsWbfMtegJ9w07lwQntqxt0
6lbu97J1MszBWEtmNl5ixZXJ696IolSSvoxNH1tVPe5K1TijffTD2das/HMTz22W
3Zfxn1BqAqOKxmbQpKY9ARe7W32kKCQHV31Rf+5FxqiFkQ4EHHSYVeVyfHMfhkxu
Y8Zvn++baVLvaTr+CxarBPvU
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:30 2026 by rpki-client