
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier: WfO48N4CB8kmVzeUlrymI3dWJCeQne+NlKLMOqGz8dI=
Subject key identifier: 33:59:55:FD:DD:2F:AA:B1:5E:C1:00:8D:D3:F7:78:07:72:27:92:F0
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial: 0B07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number: 0B00
Signing time: Sat 28 Feb 2026 19:34:57 +0000
Manifest this update: Sat 28 Feb 2026 19:34:57 +0000
Manifest next update: Sat 07 Mar 2026 19:34:57 +0000
Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: d0KUOUGSGOKOfFZ1nagZsjubSkG69tfgh6pQwJ2/qB8=)
2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Validity
Not Before: Feb 28 19:34:57 2026 GMT
Not After : Mar 7 19:34:57 2026 GMT
Subject: CN=69a34361-039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:62:4b:21:08:5e:47:19:48:1f:f7:db:07:
67:fe:1c:42:6c:bf:c7:fe:11:6a:a3:07:2d:bc:9f:
87:ee:e6:24:cb:87:1e:37:94:cd:2a:58:86:78:c1:
3b:2c:b0:b1:67:f3:dd:af:b5:e7:8a:cd:6e:9a:74:
c1:24:fb:e1:55:d6:b6:a4:05:6a:e5:d6:77:07:06:
21:c6:36:d3:76:f9:05:e0:21:d1:86:04:70:86:06:
fa:2a:89:86:2b:bc:ae:98:67:6e:1a:25:a3:45:f9:
43:49:39:3a:cb:a2:97:d5:26:a7:c7:57:8f:97:e8:
cf:88:bb:7c:99:01:70:28:9c:98:c7:e4:b4:25:9c:
53:52:52:f1:df:7b:15:70:4d:b0:45:99:cc:cd:02:
9b:5e:81:49:f8:0f:52:b2:a8:5f:d1:69:56:58:24:
cf:57:c1:42:0c:9a:04:56:a8:0c:8f:42:73:fa:dd:
57:e9:bf:d4:f3:78:6d:35:57:d1:1a:07:df:be:a3:
22:cc:a2:0d:0c:d6:35:38:32:7d:ac:37:3f:be:24:
9e:b6:0b:b5:5c:37:94:6e:10:be:b1:95:40:ee:d0:
e5:af:df:33:74:b6:29:d3:33:4f:b4:df:7f:e5:0d:
6e:d5:db:b8:15:f3:fa:0c:ad:36:c9:94:81:a3:7e:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:55:FD:DD:2F:AA:B1:5E:C1:00:8D:D3:F7:78:07:72:27:92:F0
X509v3 Authority Key Identifier:
keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:a1:63:40:bf:e5:4d:a1:28:23:84:b6:9a:04:28:e3:92:
7f:ba:08:2e:68:87:fa:35:ac:18:9e:16:08:1d:3b:2c:59:7b:
6b:b0:4b:98:38:54:40:f1:2b:2b:f0:35:e2:5a:b5:70:44:09:
16:35:e2:9a:88:0d:d2:7b:fb:83:69:f5:b5:04:80:7d:2e:d9:
e6:38:01:2b:6e:51:44:e0:a8:91:3f:79:74:0e:83:93:fe:4d:
91:a7:d5:f6:e3:89:00:6a:87:17:e4:c8:4d:58:8f:b5:0d:cc:
57:7a:49:4b:eb:aa:41:d5:82:5d:84:d7:0a:56:f0:7f:d0:45:
9f:88:26:ff:be:a1:a4:76:f5:97:39:a5:38:b8:8d:ff:64:5b:
b4:64:78:70:4b:99:cc:9e:44:2b:7d:97:53:d4:ed:3f:9b:21:
94:0a:04:32:18:d3:fd:06:ff:fd:3d:3e:8e:8a:ca:cf:e9:c4:
bd:49:84:4e:99:ce:a6:a8:0e:13:31:f0:47:2e:10:8c:47:91:
6c:d8:88:d0:e5:3e:69:28:9f:89:9b:b2:7f:94:35:41:63:ad:
d5:7c:f2:d1:39:9e:70:78:1b:a3:57:fc:64:79:9c:a8:8e:24:
04:f4:4f:5c:2f:61:03:dd:0c:51:f2:01:c8:26:12:d0:c7:63:
3a:ab:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:26 2026 by rpki-client