
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier: kxL6gKIwtOYnshz78AoHjnxfqHJZVubEfAEjGdkyfGI=
Subject key identifier: F3:E3:98:D6:15:0B:36:6C:91:FD:80:BF:F2:0E:AF:BA:DB:AD:E5:C4
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial: 2739
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number: 2717
Signing time: Sat 10 Oct 2026 15:39:35 +0000
Manifest this update: Sat 10 Oct 2026 15:39:35 +0000
Manifest next update: Sat 17 Oct 2026 15:39:35 +0000
Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: Gh3eYvlaHEiF6IITMqaPhiz7onZclufo+JepXraN7vA=)
2: Jzi6lUO2TxLyzR5rqhMwzJhLbfg.asa (hash: MfGu3Kzvwc4Vw78aVRhg90nrwuPR1tXQTTGiW1svhzk=)
3: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: QRRhuAl7YibzJPA8Ga+QrtXP8zPTQ5rh/V7GQPe8TdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10041 (0x2739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Validity
Not Before: Oct 10 15:39:35 2026 GMT
Not After : Oct 17 15:39:35 2026 GMT
Subject: CN=6aca5c37-9aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d8:fa:b0:e1:a5:41:46:88:4b:93:64:53:
e5:2f:07:69:c1:ff:58:b1:e1:fa:18:36:90:d0:96:
db:f9:64:c9:37:21:f9:d1:ab:89:f1:c2:98:28:9b:
da:99:b7:d6:14:54:7e:39:a6:06:e4:49:6e:5e:42:
8d:a7:16:e2:fe:54:b0:90:0c:7c:ab:d9:2e:79:d5:
b0:29:f1:05:b7:42:a5:f8:26:ee:21:fc:98:6b:30:
52:74:f5:13:c5:03:3b:4c:de:13:69:75:59:58:a3:
a3:74:bf:bd:be:08:65:52:5b:7a:15:d4:7b:56:6e:
a7:8f:d3:03:14:13:22:1e:8a:f0:59:71:71:50:ed:
31:e7:0b:86:af:10:72:f8:b6:32:43:be:31:d6:08:
47:e2:64:49:98:33:9e:19:de:3a:c0:7c:76:f7:c0:
54:a8:47:4c:0c:4c:6d:3a:03:71:4a:6b:36:c7:e9:
6c:31:1f:b2:e3:26:70:fa:4a:3d:ab:8a:b9:de:43:
3e:de:fd:b2:4f:0f:1b:87:63:2d:b6:bb:3c:42:21:
fa:f7:67:33:bb:d2:79:2a:c6:bf:cb:40:57:df:44:
15:2d:83:ff:c2:2a:08:71:02:54:33:89:be:32:27:
4b:77:0d:66:66:e9:63:37:b5:3a:31:64:82:08:c0:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:98:D6:15:0B:36:6C:91:FD:80:BF:F2:0E:AF:BA:DB:AD:E5:C4
X509v3 Authority Key Identifier:
keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:70:fc:92:69:bb:c1:a2:a4:b3:eb:6a:95:b0:56:9f:1d:
8d:eb:97:d0:32:f2:2e:ad:14:14:5a:d1:4e:5b:3c:8f:27:43:
b4:9d:ce:54:73:01:03:4c:b3:8e:7b:8f:89:9e:9e:5b:13:22:
22:42:be:41:fb:4b:78:34:49:9c:18:9a:c4:e2:88:ad:12:dc:
b1:ef:3c:f4:33:61:16:43:50:fe:76:27:f3:49:24:fe:fb:a3:
99:12:46:ab:26:32:b1:be:84:6d:19:7d:1d:0f:a1:75:84:41:
71:8c:46:15:76:45:04:f4:81:ad:03:63:f8:ea:67:d3:1f:a4:
9e:b9:9e:a9:61:05:aa:f5:35:60:a2:6b:57:57:24:42:7b:0f:
ce:86:20:f9:bb:01:b6:36:25:74:0c:9c:23:f4:1e:91:24:6d:
63:b5:31:bb:47:2b:52:7e:49:ef:48:55:37:93:48:93:33:2e:
88:18:c8:19:71:fd:e8:61:97:5e:fa:39:1b:4f:a6:be:1b:aa:
01:89:8e:c3:81:53:db:8b:3d:ac:b0:11:cf:0a:ef:41:d3:b8:
07:09:ef:a3:b3:e6:28:26:fc:4d:c2:93:1e:ff:89:ea:82:a6:
3d:64:93:e1:c6:7c:34:2a:03:4b:83:07:71:3d:53:15:d6:61:
fa:a6:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:27:36 2026 by rpki-client