
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier: sQ9EqxZdqHpzCgIyXW3QhqZo1CSdHRCFRxJFJ6fhJKQ=
Subject key identifier: ED:1D:1C:43:67:3A:99:B4:DE:43:8C:CD:72:85:E4:99:62:D9:C7:31
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number: 0179
Signing time: Sun 27 Sep 2026 05:08:28 +0000
Manifest this update: Sun 27 Sep 2026 05:08:27 +0000
Manifest next update: Sun 04 Oct 2026 05:08:27 +0000
Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: PY9Vf79Nc6U1eRFicTfR0+Zt4j2oWkWca1JYLWfDPzU=)
2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Validity
Not Before: Sep 27 05:08:27 2026 GMT
Not After : Oct 4 05:08:27 2026 GMT
Subject: CN=6ab8a4cc-4ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:40:4b:a1:28:3d:8f:9f:7a:0d:eb:fe:bf:
df:9b:aa:4a:c5:96:4d:24:81:0f:c0:a3:5e:1f:6c:
ae:2e:af:8c:68:97:04:c8:0c:4a:d2:da:32:84:0a:
28:1d:46:f3:2e:cc:69:0e:c2:48:de:42:c0:4b:fc:
59:a8:08:fc:cf:ff:d8:0f:a1:bc:97:d7:3a:21:1f:
27:d3:27:38:fa:ab:ae:aa:c4:b6:2a:7c:5e:b1:4a:
f1:cf:c4:55:1d:e3:68:99:16:cc:31:4f:41:0d:d3:
58:59:25:7b:eb:af:15:e1:36:94:4a:9b:90:b3:13:
66:0d:5f:ed:8b:88:b7:a8:41:13:d0:07:0e:f6:73:
f1:00:08:7d:5b:77:cd:06:74:17:7b:0c:f4:91:6e:
54:16:e6:7c:4c:c4:4e:3e:2b:d6:b4:d2:6c:99:6c:
9a:a0:f5:c8:87:1d:c7:41:d9:c2:8c:c1:82:6a:11:
f6:9c:5d:28:a1:5b:d0:f5:0b:03:b9:83:c2:53:bc:
1c:97:df:a3:74:d1:bb:8d:a4:98:fa:0f:42:7c:97:
b3:35:7f:ae:95:06:85:ff:3e:54:f2:e9:6c:72:cd:
4a:9e:c8:63:b7:88:8e:8f:33:3f:37:ca:44:70:e0:
e3:43:60:cd:9a:84:b1:9e:b2:bb:34:33:db:03:a5:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:1C:43:67:3A:99:B4:DE:43:8C:CD:72:85:E4:99:62:D9:C7:31
X509v3 Authority Key Identifier:
keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:c2:cd:df:ad:34:e4:6d:bc:53:da:94:8e:12:45:c0:5d:
c9:aa:cf:39:8a:a5:48:cc:34:a9:75:82:20:4c:e0:34:e5:e5:
9a:09:78:42:8d:bc:1a:62:8c:97:2a:c0:de:7b:d0:8c:30:f3:
fa:29:2f:30:32:f9:6c:a5:2f:4a:75:0a:69:c7:c1:06:7b:c2:
7a:04:10:dd:0c:15:4f:b5:7d:72:30:65:93:f9:46:6f:bb:fb:
19:df:ba:6d:8e:6e:14:ef:34:f4:99:b2:56:d2:cd:5b:da:49:
aa:b6:ec:20:7d:db:43:e0:91:69:67:3f:24:1a:a2:56:d5:56:
79:ba:0a:eb:0d:3c:39:55:25:e0:be:31:d7:37:6d:e3:ca:c0:
c9:52:c9:0f:ab:24:ea:a9:e8:9f:f2:b9:13:b6:3d:f2:b2:1c:
18:c6:85:d1:40:c5:4e:a5:31:3a:db:5f:b8:3a:5c:f8:a4:82:
43:6d:b8:16:d9:7f:9c:55:1d:4a:44:fc:bd:78:a1:48:7e:9b:
5c:8e:ca:04:15:d6:84:8b:1e:de:84:a2:4e:57:52:e9:20:63:
eb:a1:5f:7f:3d:db:32:d7:e4:79:6d:dd:b2:0f:56:87:03:ec:
f3:6f:aa:38:b9:b9:f1:0b:ad:e0:c2:7c:c6:c0:d2:73:5d:25:
b5:1b:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:31:37 2026 by rpki-client