
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: WjE9GiKsuj5lj8T+/kgicUeTFBBZ+CG0Mc+kMxH7iAc=
Subject key identifier: 75:66:DD:DD:E3:E3:C7:31:8D:7F:0D:7E:D6:C0:A0:1E:ED:A1:F1:FC
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 014A
Signing time: Sat 13 Jun 2026 05:12:37 +0000
Manifest this update: Sat 13 Jun 2026 05:12:37 +0000
Manifest next update: Sat 20 Jun 2026 05:12:37 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: zhJ+eOWGY3nSOoOZdaYP/t5tUzE0nuCb7PpuaGanlps=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: Jun 13 05:12:37 2026 GMT
Not After : Jun 20 05:12:37 2026 GMT
Subject: CN=6a2ce6c5-2452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:f3:af:10:8a:6a:f5:a2:12:1c:c2:31:5d:
cd:b5:e0:44:56:d5:50:ee:47:9c:49:af:75:35:11:
e2:2e:00:7a:bd:dd:2b:ef:e8:60:55:23:dd:e7:53:
2b:80:1f:c4:15:29:dc:a0:41:35:9f:80:be:e3:0c:
18:1a:0a:9d:be:99:31:5c:b4:a1:39:5c:50:db:08:
4e:f8:40:ad:45:70:1c:5f:fa:b1:79:fb:96:5b:f5:
c2:c5:cd:a8:69:f9:9d:f4:7e:54:33:eb:51:96:5a:
d4:64:21:ed:59:b1:64:25:ff:c5:db:65:ec:11:f4:
60:ad:a8:50:a0:07:28:90:16:4e:c7:df:ef:3d:fc:
5d:49:9c:79:c0:5c:11:3b:08:b7:6d:38:96:84:d6:
37:ac:69:4a:a5:d1:5b:eb:f5:bc:9a:16:47:b1:4e:
a3:f1:7c:80:a0:64:26:33:26:d3:6d:91:cc:dc:0f:
83:48:4f:cf:f0:7e:46:d5:c6:17:5d:d5:8d:45:35:
aa:18:a5:97:32:7b:92:b3:9b:ec:35:13:b2:27:8b:
7a:3d:40:86:67:42:1d:7b:3e:53:9a:aa:36:ff:b2:
21:87:b5:70:6f:c2:39:e6:2e:0b:f5:aa:72:8c:9b:
a3:fc:12:9a:58:3a:a1:2a:89:92:c5:b4:00:72:58:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:DD:DD:E3:E3:C7:31:8D:7F:0D:7E:D6:C0:A0:1E:ED:A1:F1:FC
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:d2:63:a5:e9:58:26:5d:71:0f:9a:df:50:5c:c0:39:9b:
a2:e6:24:ba:07:1e:cb:7b:a3:44:ce:e1:18:ba:2a:af:75:97:
74:ad:40:01:59:e5:be:74:37:e5:71:e7:06:92:45:14:8d:2e:
2d:5c:c9:62:19:e1:35:e6:d5:49:8d:7a:a7:fd:ab:0b:fa:77:
f2:9c:e6:4f:cd:02:1e:23:da:ea:f7:5d:c7:af:84:98:dc:04:
45:48:45:82:7a:ef:3f:c6:93:99:8a:dc:c9:eb:85:44:fd:d6:
42:31:80:68:0a:1a:b8:fb:04:07:25:f8:9b:97:80:52:34:be:
fa:9e:fa:94:62:f4:ef:d9:31:e7:17:9f:33:c9:76:bc:5b:28:
a7:a0:28:0e:26:ef:68:98:08:12:c4:03:72:91:7f:62:c0:e4:
0d:45:c2:d4:d5:6a:db:1c:6d:7a:16:cd:5d:6e:8d:da:a1:91:
21:d1:a9:49:3d:8e:7a:35:d8:e2:9c:66:b0:0b:af:da:85:ce:
4c:19:94:4d:73:03:10:fd:e6:dc:1e:c4:8a:7b:bc:6f:85:bd:
59:9f:22:f1:be:9d:8a:87:a8:5c:b1:02:88:fd:56:f2:35:12:
1c:db:61:0f:29:10:b0:ff:14:36:eb:5a:3b:90:12:41:b0:8b:
16:97:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:53:34 2026 by rpki-client