
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: jYA4hYn5KOOO2ZpNefYglfvq6ROe9vMz4FwLC7V80U0=
Subject key identifier: 0D:54:01:35:F8:72:10:B6:C0:AC:6B:E3:93:61:D6:01:4D:3F:1D:E7
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 017C
Signing time: Sat 19 Sep 2026 04:44:30 +0000
Manifest this update: Sat 19 Sep 2026 04:44:29 +0000
Manifest next update: Sat 26 Sep 2026 04:44:29 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: JFKOdktmz0Ru8vRksTS2VQC1AmGDuxfFul/0cfvoMiY=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: Sep 19 04:44:29 2026 GMT
Not After : Sep 26 04:44:29 2026 GMT
Subject: CN=6aae132e-12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:d2:27:e8:7f:f8:cd:bf:aa:06:79:90:be:
b8:98:fb:63:b3:29:64:fb:81:61:d7:4c:a0:e9:29:
c8:30:c6:ac:56:eb:de:fa:60:e3:6a:04:a6:a8:cd:
9d:97:e4:2a:e9:8c:2b:10:28:c1:5f:5f:f6:97:0a:
69:f5:0c:33:2f:bb:07:9d:db:ea:80:94:56:eb:78:
64:2e:a9:6f:d4:a4:4e:d6:3c:f3:5c:a9:2b:21:fb:
12:c8:31:b5:1a:34:d9:4b:f2:0a:89:52:fd:59:63:
f7:46:fa:ea:16:c1:0d:7c:bc:81:03:57:09:f4:0c:
eb:e1:f9:e2:09:35:41:7b:db:8f:5a:ce:91:64:a5:
6c:43:ab:99:e0:53:ee:bc:fb:4b:47:16:68:7b:e9:
7d:98:13:07:d5:14:ba:29:da:a4:38:96:33:2e:cb:
11:77:09:7c:51:89:66:63:0c:3d:43:1c:39:af:df:
7d:e9:09:c4:0c:5f:2d:fe:37:b4:dd:c3:e5:be:e0:
ab:0b:d7:ae:34:d7:cb:7a:a6:7b:01:fc:68:42:29:
bd:08:99:3d:0e:95:d5:8e:86:a7:ba:a2:06:9c:c7:
d5:36:28:ca:be:3a:52:3a:6a:c4:ca:0e:4e:e4:a1:
a3:14:1a:d1:f1:66:98:7b:66:c9:43:d3:9b:94:b6:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:01:35:F8:72:10:B6:C0:AC:6B:E3:93:61:D6:01:4D:3F:1D:E7
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a7:97:7d:25:c8:a0:69:0f:a8:a1:d7:31:25:f8:9b:4f:16:
d5:04:43:42:5a:90:3a:a9:5a:37:ef:e3:c9:1d:e1:e8:c7:63:
f1:d2:3f:ad:db:cc:48:71:2e:2f:38:2c:d3:e7:2d:ed:92:92:
a7:bb:65:b5:4e:dc:f1:83:13:f4:68:d7:4d:66:34:21:6c:92:
a0:65:5c:a6:3f:5d:f7:cb:9f:18:f3:f7:11:53:49:fc:10:37:
02:ee:eb:b1:04:de:0f:b9:17:55:c8:f4:aa:86:65:37:04:bb:
2f:42:72:7a:16:f0:62:24:63:e6:d7:5e:63:b2:16:53:2e:8c:
3b:9f:07:8f:13:53:eb:5b:b1:80:e4:fd:ff:eb:22:ce:b0:29:
d5:db:cc:22:1e:3f:4d:75:41:a9:fe:50:a1:5f:4a:6c:ad:a4:
66:15:22:cd:88:7c:4d:cd:f2:dc:06:a6:cf:ab:04:ea:58:93:
7d:9b:59:35:9f:c2:52:15:23:39:fc:44:d2:e9:99:4f:0a:62:
3d:77:e4:fd:e8:00:02:db:bd:99:30:7d:14:92:f0:3f:b0:a7:
12:4c:d4:95:d9:c9:0c:c5:19:1e:28:e2:a8:a9:92:ea:d2:71:
3a:e8:43:cf:2d:9b:3e:82:9f:db:ef:06:84:a7:e8:df:b3:72:
c9:68:00:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBQjkxMTAvBgNVBAUTKDM4MTdDRkUwMEE1RjFBQ0MzNjNCNDcyRjRGNjlEQTgz
QkVCNTY2MTMwHhcNMjYwOTE5MDQ0NDI5WhcNMjYwOTI2MDQ0NDI5WjAYMRYwFAYD
VQQDEw02YWFlMTMyZS0xMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmNnSJ+h/+M2/qgZ5kL64mPtjsylk+4Fh10yg6SnIMMasVuve+mDjagSmqM2d
l+Qq6YwrECjBX1/2lwpp9QwzL7sHndvqgJRW63hkLqlv1KRO1jzzXKkrIfsSyDG1
GjTZS/IKiVL9WWP3RvrqFsENfLyBA1cJ9Azr4fniCTVBe9uPWs6RZKVsQ6uZ4FPu
vPtLRxZoe+l9mBMH1RS6KdqkOJYzLssRdwl8UYlmYww9Qxw5r9996QnEDF8t/je0
3cPlvuCrC9euNNfLeqZ7AfxoQim9CJk9DpXVjoanuqIGnMfVNijKvjpSOmrEyg5O
5KGjFBrR8WaYe2bJQ9OblLZxeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1UATX4
chC2wKxr45Nh1gFNPx3nMB8GA1UdIwQYMBaAFDgXz+AKXxrMNjtHL09p2oO+tWYT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9EMTE4QzBCQzZF
ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdzdzJPMGN2VDJuYWc3NjFa
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUFCOS9EMTE4QzBCQzZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdz
dzJPMGN2VDJuYWc3NjFaaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsaeXfSXIoGkPqKHXMSX4m08W1QRDQlqQOqlaN+/jyR3h6Mdj8dI/rdvMSHEu
Lzgs0+ct7ZKSp7tltU7c8YMT9GjXTWY0IWySoGVcpj9d98ufGPP3EVNJ/BA3Au7r
sQTeD7kXVcj0qoZlNwS7L0JyehbwYiRj5tdeY7IWUy6MO58HjxNT61uxgOT9/+si
zrAp1dvMIh4/TXVBqf5QoV9KbK2kZhUizYh8Tc3y3Aamz6sE6liTfZtZNZ/CUhUj
OfxE0umZTwpiPXfk/egAAtu9mTB9FJLwP7CnEkzUldnJDMUZHijiqKmS6tJxOuhD
zy2bPoKf2+8GhKfo37NyyWgAjw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:12:54 2026 by rpki-client