
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier: qCUL8mKqsMCJWwsD3a1aNxq5Fux578KOjRIjYWvfpSY=
Subject key identifier: 93:58:95:91:A5:84:C9:98:C5:E6:6A:1D:E5:89:E9:06:AF:6F:B1:5F
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number: 014B
Signing time: Mon 27 Jul 2026 07:09:32 +0000
Manifest this update: Mon 27 Jul 2026 07:09:32 +0000
Manifest next update: Mon 03 Aug 2026 07:09:32 +0000
Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: HLX1mYRY318KQOfly5pXCbppt61G6IRnnnc2e61HRRg=)
2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Validity
Not Before: Jul 27 07:09:32 2026 GMT
Not After : Aug 3 07:09:32 2026 GMT
Subject: CN=6a67042c-57a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:8e:69:f0:b3:7d:f2:1f:49:cb:95:0d:3f:
73:e4:7c:ce:a5:7b:ab:8a:15:cc:09:a8:57:3f:f9:
73:ec:30:c8:23:d4:51:f9:e0:a2:8d:cd:cc:2a:33:
e8:e1:16:93:d3:20:e7:2f:a8:b1:d9:b0:fa:cd:03:
1c:c5:b8:2f:a7:33:4e:6e:96:88:16:21:12:e0:30:
d2:b4:12:90:2b:f0:b8:3e:c2:3c:4e:4f:c0:3e:2b:
d6:9b:af:c7:a9:17:df:44:44:e1:6e:53:ad:3e:ab:
3d:dd:5c:5e:90:b8:71:ce:b4:d2:3c:c8:78:d4:16:
20:0f:d4:13:9b:31:4e:05:5a:b3:90:2c:65:a0:52:
98:47:a5:9f:a0:6c:3b:9d:82:67:00:90:ad:6c:5f:
6a:cf:0f:26:a7:e6:af:2f:69:55:68:f3:9f:af:e4:
c8:41:be:0f:12:78:bd:16:1b:70:87:df:68:4f:dd:
39:75:1e:a5:10:de:c4:76:39:c9:de:10:a3:c8:1f:
43:b3:da:7e:23:f6:ae:95:3d:b8:62:2e:fb:a3:67:
c6:84:03:7d:e7:d1:7b:aa:fb:d0:c2:e7:a2:29:5d:
e5:53:7f:87:1e:b4:9a:04:25:30:9a:d9:e3:26:63:
f5:a7:1d:68:e8:99:c1:e8:64:e5:59:92:ec:59:2e:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:95:91:A5:84:C9:98:C5:E6:6A:1D:E5:89:E9:06:AF:6F:B1:5F
X509v3 Authority Key Identifier:
keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e6:72:75:8f:08:dd:0f:b5:d0:76:de:b9:3e:74:39:b8:a5:
a6:85:10:84:f7:bf:6a:4a:e3:82:2d:68:75:82:4a:0c:d4:99:
c6:c5:46:93:6f:c9:dc:a8:eb:0a:70:d0:90:71:4d:f8:19:d9:
af:5f:bf:3f:93:0b:c7:27:57:15:e3:46:81:bc:3b:a4:cc:4d:
f1:94:7d:36:e9:ee:ff:d1:1c:ca:44:a0:50:2f:3e:a8:66:c1:
c8:93:b0:93:6e:4c:3e:fc:9e:fa:87:c4:3c:7d:70:24:96:f9:
bc:e5:d7:a9:ab:9e:ca:88:7c:92:3d:44:d0:5a:ee:9e:99:34:
f0:af:df:57:4b:c5:a2:09:eb:79:f3:02:c8:55:09:b8:02:43:
ad:3f:ea:bb:e1:4e:2c:23:c6:0e:60:ab:d6:3e:72:5d:5e:d0:
be:35:e8:be:88:18:80:18:01:f3:f1:d8:ab:bd:e2:2f:c1:36:
f1:36:f6:8a:87:78:34:57:82:5c:ed:fe:cf:c4:9c:82:b5:10:
c0:23:be:a8:e9:9b:1b:c7:a1:38:80:82:c8:58:50:4c:a9:96:
4b:d5:49:95:2d:0d:61:65:96:16:b2:ef:66:b2:42:f1:77:c6:
38:33:c4:5a:1d:16:62:8b:63:33:02:73:44:b6:22:b6:ae:76:
09:83:97:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFBM0IxMTAvBgNVBAUTKERGQzUyOENGMDAwNkUzNDE0QUZCN0ZFODZEMUZERUFG
NjQ4QjVDOUQwHhcNMjYwNzI3MDcwOTMyWhcNMjYwODAzMDcwOTMyWjAYMRYwFAYD
VQQDEw02YTY3MDQyYy01N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKKOafCzffIfScuVDT9z5HzOpXurihXMCahXP/lz7DDII9RR+eCijc3MKjPo
4RaT0yDnL6ix2bD6zQMcxbgvpzNObpaIFiES4DDStBKQK/C4PsI8Tk/APivWm6/H
qRffREThblOtPqs93VxekLhxzrTSPMh41BYgD9QTmzFOBVqzkCxloFKYR6WfoGw7
nYJnAJCtbF9qzw8mp+avL2lVaPOfr+TIQb4PEni9Fhtwh99oT905dR6lEN7EdjnJ
3hCjyB9Ds9p+I/aulT24Yi77o2fGhAN959F7qvvQwueiKV3lU3+HHrSaBCUwmtnj
JmP1px1o6JnB6GTlWZLsWS4G7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNYlZGl
hMmYxeZqHeWJ6Qavb7FfMB8GA1UdIwQYMBaAFN/FKM8ABuNBSvt/6G0f3q9ki1yd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEzQi8yMjcwMTlEQTkw
MTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQwRkstM19vYlJfZXIyU0xY
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM4VW96d0FHNDBGSy0zX29iUl9lcjJTTFhKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUEzQi8yMjcwMTlEQTkwMTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQw
RkstM19vYlJfZXIyU0xYSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVOZydY8I3Q+10HbeuT50ObilpoUQhPe/akrjgi1odYJKDNSZxsVGk2/J3Kjr
CnDQkHFN+BnZr1+/P5MLxydXFeNGgbw7pMxN8ZR9Nunu/9EcykSgUC8+qGbByJOw
k25MPvye+ofEPH1wJJb5vOXXqaueyoh8kj1E0Frunpk08K/fV0vFognrefMCyFUJ
uAJDrT/qu+FOLCPGDmCr1j5yXV7QvjXovogYgBgB8/HYq73iL8E28Tb2iod4NFeC
XO3+z8ScgrUQwCO+qOmbG8ehOICCyFhQTKmWS9VJlS0NYWWWFrLvZrJC8XfGODPE
Wh0WYotjMwJzRLYitq52CYOX7g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:16 2026 by rpki-client