
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier: kQFVmJIqb9SYt2QwmBA455MsHYv8CPUZUD+Uy0icih8=
Subject key identifier: E1:A5:EF:98:89:0C:F1:08:6B:6A:61:53:BF:4B:D4:FD:05:38:26:8C
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number: 2D
Signing time: Thu 11 Jun 2026 11:02:24 +0000
Manifest this update: Thu 11 Jun 2026 11:02:24 +0000
Manifest next update: Thu 18 Jun 2026 11:02:24 +0000
Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: WOSXmrQeTJdZStbYZtfSF0vKGe8KoEvAv7udWFKsuos=)
2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Validity
Not Before: Jun 11 11:02:24 2026 GMT
Not After : Jun 18 11:02:24 2026 GMT
Subject: CN=6a2a95c0-65f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:bb:b7:84:4f:9a:b0:07:7f:49:0b:b7:e8:
71:d3:45:8d:b2:7e:53:a4:fc:3b:99:a8:e2:34:ae:
52:7b:ed:e0:ea:b7:11:c8:bf:12:ef:72:fc:e6:24:
63:f6:0a:d1:d5:16:4c:58:b7:7b:d8:5e:27:fa:a1:
a2:5d:33:68:eb:ef:c1:ec:32:95:c9:83:38:7a:cf:
85:74:d0:c7:f9:f8:b2:01:30:39:03:df:ad:da:93:
17:63:6f:80:ba:fc:01:1c:c6:ff:10:1a:7c:51:b3:
e9:cb:cf:58:87:4b:39:79:9d:27:16:61:7b:08:38:
a2:cb:0f:48:bd:ca:cf:67:eb:d1:59:48:91:fb:a3:
bb:6e:c1:c6:bf:ee:d6:85:70:d0:60:e4:7f:fc:ab:
45:21:bc:d1:09:20:80:a1:fe:a8:31:cb:53:f8:38:
89:52:8d:06:86:d4:43:09:61:aa:73:42:89:76:f3:
e7:99:5e:d5:d7:67:40:b4:04:d6:ea:c5:d3:56:06:
70:3d:ca:4c:2f:8a:ce:46:ca:e1:fd:e3:d4:44:bd:
02:f2:46:ce:ea:cc:88:cc:21:80:5c:78:15:ee:c0:
11:70:de:c1:bc:05:3c:1e:6c:50:f3:a0:0b:00:aa:
4f:b6:5e:ea:5a:80:1c:8a:cd:01:b8:eb:c2:84:d2:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:EF:98:89:0C:F1:08:6B:6A:61:53:BF:4B:D4:FD:05:38:26:8C
X509v3 Authority Key Identifier:
keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:cd:20:4b:81:52:51:48:b9:ac:78:c6:21:1c:57:0d:0d:
63:3a:60:94:4f:30:6a:21:97:4d:49:19:9b:18:0c:2e:3e:d1:
94:35:ca:ac:26:5e:d4:97:3f:12:33:5e:e6:96:7d:2c:67:4d:
8a:2a:1f:55:f7:48:59:1b:f5:72:f1:87:70:52:e1:05:65:d0:
2a:ed:54:28:34:be:d0:30:9d:62:72:1e:0b:04:3f:6b:a8:e5:
92:c6:0f:f1:73:d3:e5:9c:45:b5:cd:53:cb:e8:b3:9f:bd:e5:
6b:25:81:1d:a2:d4:cf:35:0a:c8:37:05:db:e8:e9:92:a8:be:
df:4d:ee:bd:3e:07:8f:4f:b5:5d:cf:83:92:59:e4:74:73:53:
8c:6c:85:a1:a6:0b:d0:a4:4f:45:f0:ee:56:db:60:4f:ee:9a:
88:48:a8:ca:b0:8e:47:23:f4:23:6e:2b:c9:d0:0e:cd:49:ea:
95:17:2f:e2:f6:b7:8e:9c:39:5a:59:68:a9:79:bc:08:eb:2b:
e2:ba:19:12:9a:bb:67:42:d1:f6:8d:c5:98:59:3f:21:c3:df:
8a:96:4a:11:fe:ed:c7:bf:70:43:66:d2:72:33:14:1c:e9:8a:
57:a5:78:97:14:c7:f4:64:58:20:78:ac:dd:01:62:da:1d:c3:
eb:54:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:25:48 2026 by rpki-client