
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier: /QW/iNFZByGvd55iyyScYVY6x7oLBAK8ZpX9QOyvdCw=
Subject key identifier: B5:47:9D:43:87:91:C2:24:E2:C5:3D:42:05:7F:06:2D:4F:B0:A3:76
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial: 26D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number: 26B8
Signing time: Thu 16 Apr 2026 15:38:49 +0000
Manifest this update: Thu 16 Apr 2026 15:38:48 +0000
Manifest next update: Thu 23 Apr 2026 15:38:48 +0000
Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: zhH2jGt+GysBYcCBURwCBPNpAPL9AI4t4Q3uU/wiOeo=)
2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: 854w7PdZ+GVBnud2Squ7BH42nMJN3ruaV+ahUGF7ddM=)
3: BA61C87692D911F083913E3DC4F9AE02.roa (hash: afAWZLC+mw9EyDI9/JJmoeXdskWuwhW3nTaeQPUOC20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9944 (0x26d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Validity
Not Before: Apr 16 15:38:48 2026 GMT
Not After : Apr 23 15:38:48 2026 GMT
Subject: CN=69e10289-d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:b9:2c:49:97:b5:af:6d:3a:be:bd:bc:7a:
5e:8c:6e:a6:ba:dd:5a:f9:14:f4:e1:07:5f:c6:a0:
29:37:60:89:86:d2:b6:17:74:8d:d2:55:3e:4e:95:
45:48:1b:23:5c:2a:04:dd:70:fa:b6:96:f3:d7:fa:
fd:ee:a6:1a:b6:d6:d9:0b:17:9e:3d:45:d6:4f:8d:
9f:be:0b:87:9d:68:f0:31:7e:e0:b3:37:1b:93:7b:
17:d0:81:4b:e9:32:13:b3:07:6c:7b:06:ad:c4:7f:
49:54:de:7a:cf:89:a0:fd:ed:3a:bf:9e:fb:18:c3:
86:63:1e:1d:5d:70:42:71:37:c4:19:10:3f:ad:de:
fd:f9:ac:8f:b3:c5:a4:9d:09:7e:65:5b:81:64:2d:
7f:ba:7d:65:be:0b:5d:67:ae:6a:09:ef:20:e8:b2:
12:84:8e:3a:02:1a:c7:95:bf:29:f0:6c:ab:cd:45:
f3:b1:db:90:66:b4:1d:6e:d1:83:7c:ff:33:1f:6f:
03:b9:85:81:a1:1c:d1:dd:2d:fe:51:89:e4:13:15:
00:d9:c5:88:76:b0:3c:a0:2a:4e:e0:dd:24:43:be:
8c:5d:79:5e:a4:61:e9:d1:25:39:86:2e:0d:5f:1d:
13:8e:6c:30:07:de:d3:9c:69:29:c5:70:9b:13:4b:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:9D:43:87:91:C2:24:E2:C5:3D:42:05:7F:06:2D:4F:B0:A3:76
X509v3 Authority Key Identifier:
keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:97:67:35:7f:bd:8b:be:09:d1:1e:f9:35:78:46:11:b8:e6:
a9:6e:b4:29:70:92:76:b3:87:d0:f7:fd:22:4c:ce:11:17:e2:
3c:b5:7c:12:aa:96:65:8f:b5:73:61:69:63:3b:0c:7b:d0:b1:
9d:ce:91:c9:2f:1b:70:95:d0:05:b4:b5:dc:21:1e:3c:12:35:
73:61:77:18:f2:d8:a3:27:27:6f:7d:ba:28:56:f1:b0:0d:60:
26:f1:7f:ef:e8:70:9b:a8:43:4c:48:cc:e8:78:29:63:92:6d:
e9:7c:1d:75:9f:ba:73:ce:95:59:43:88:18:d1:ed:50:39:63:
8c:2d:af:d8:87:81:30:15:14:22:0b:b9:d7:0d:cb:f5:c8:93:
1e:97:d7:f2:7c:f2:8d:48:e3:c6:56:89:04:0c:d3:f1:9d:b2:
6f:c6:54:8f:31:f5:e7:23:b0:3d:dc:e5:ef:c9:a3:a3:8c:ec:
69:f2:9c:e9:54:09:5f:44:7e:a4:36:b4:3f:7b:ff:4e:a4:95:
02:2e:a8:ef:39:53:d3:5b:22:8e:4b:71:38:4a:a9:e3:5d:93:
0b:b2:1c:a1:36:60:ea:69:a2:34:22:db:6f:77:b4:cd:51:e5:
c6:45:90:46:c6:34:30:3e:0e:27:92:e6:7c:6e:b9:77:08:35:
95:97:4d:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG
RDk4NDE1NDEwHhcNMjYwNDE2MTUzODQ4WhcNMjYwNDIzMTUzODQ4WjAYMRYwFAYD
VQQDEw02OWUxMDI4OS1kODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmZm5LEmXta9tOr69vHpejG6mut1a+RT04QdfxqApN2CJhtK2F3SN0lU+TpVF
SBsjXCoE3XD6tpbz1/r97qYattbZCxeePUXWT42fvguHnWjwMX7gszcbk3sX0IFL
6TITswdsewatxH9JVN56z4mg/e06v577GMOGYx4dXXBCcTfEGRA/rd79+ayPs8Wk
nQl+ZVuBZC1/un1lvgtdZ65qCe8g6LIShI46AhrHlb8p8GyrzUXzsduQZrQdbtGD
fP8zH28DuYWBoRzR3S3+UYnkExUA2cWIdrA8oCpO4N0kQ76MXXlepGHp0SU5hi4N
Xx0TjmwwB97TnGkpxXCbE0tLnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVHnUOH
kcIk4sU9QgV/Bi1PsKN2MB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC
QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV
eVlQdUQxRURaZlQ5bUVGVUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzZdnNX+9i74J0R75NXhGEbjmqW60KXCSdrOH0Pf9IkzOERfiPLV8EqqWZY+1
c2FpYzsMe9Cxnc6RyS8bcJXQBbS13CEePBI1c2F3GPLYoycnb326KFbxsA1gJvF/
7+hwm6hDTEjM6HgpY5Jt6XwddZ+6c86VWUOIGNHtUDljjC2v2IeBMBUUIgu51w3L
9ciTHpfX8nzyjUjjxlaJBAzT8Z2yb8ZUjzH15yOwPdzl78mjo4zsafKc6VQJX0R+
pDa0P3v/TqSVAi6o7zlT01sijktxOEqp412TC7IcoTZg6mmiNCLbb3e0zVHlxkWQ
RsY0MD4OJ5LmfG65dwg1lZdNHA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:51 2026 by rpki-client