
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: musAW6vKaH2dEK90+Ucs0DzYF9Lcp2Gtt1DWolR2bCM=
Subject key identifier: FB:4E:C0:AE:52:F5:81:2C:ED:C9:5A:01:45:43:FD:D7:15:3F:05:CD
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 014A
Signing time: Tue 24 Mar 2026 21:14:21 +0000
Manifest this update: Tue 24 Mar 2026 21:14:20 +0000
Manifest next update: Tue 31 Mar 2026 21:14:20 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: LaRn4Xk920jnxSws78eSNgVK2tdHC3Cp6yarRuGTm44=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: Mar 24 21:14:20 2026 GMT
Not After : Mar 31 21:14:20 2026 GMT
Subject: CN=69c2fead-e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:a7:a5:8e:36:ee:2f:53:df:e2:d2:34:f5:
7e:cd:a1:e9:b2:8c:b1:6b:bc:ac:2d:3f:41:09:ac:
de:8b:3a:f6:41:84:b7:f1:4c:cc:7d:e1:2a:c9:18:
30:6d:db:3b:6c:f5:ed:ee:04:b5:e1:fc:c7:b8:95:
77:f5:9f:55:f8:87:58:ed:e1:10:75:c9:34:0c:aa:
38:57:11:ba:ee:31:0f:68:9d:6d:15:81:f3:c7:6e:
15:1a:b3:25:b8:76:ce:eb:37:28:fb:fe:6e:0e:ce:
06:34:6d:06:e1:59:81:6c:a7:a1:40:c4:7b:8e:aa:
e5:6f:d6:a4:62:06:2d:3c:0f:83:a1:fa:aa:76:18:
0c:bd:84:6a:96:8a:f3:a3:c9:d8:f9:9e:c4:80:3e:
33:29:43:53:cb:7e:07:a6:29:0b:6f:29:0b:43:b2:
0e:d1:eb:56:3f:3e:58:76:78:b0:5c:67:24:a2:76:
cb:73:a2:e5:c4:49:04:86:18:a1:cf:4d:8d:15:39:
b4:44:e2:12:02:5c:09:86:fe:de:72:81:ec:7c:81:
06:e8:dd:77:f2:84:7b:a7:aa:9a:77:d8:a9:63:cd:
b1:04:1e:f5:11:95:4b:58:7a:6c:b7:e5:86:52:bd:
15:30:ed:72:f8:e5:0c:1c:c4:cd:3c:c9:f2:1a:05:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:C0:AE:52:F5:81:2C:ED:C9:5A:01:45:43:FD:D7:15:3F:05:CD
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6f:ff:1f:67:d4:0d:70:27:7a:d9:4d:ad:f3:42:e5:b6:b9:
1a:d5:b2:8f:b1:0c:71:0a:f4:a6:99:3a:1c:9c:3c:de:35:e4:
53:d6:8e:20:30:55:f4:43:5a:2a:1d:7c:22:a4:66:ce:94:b9:
3c:d5:e6:8e:51:3d:f7:5b:44:42:df:5e:df:ff:b5:b4:7e:c1:
86:53:71:db:0e:a8:56:e6:00:79:dd:60:5c:97:a1:7d:63:5e:
ec:b1:f7:11:c2:4c:47:f8:1d:e3:cb:0d:0d:17:88:14:0d:d8:
11:20:0b:47:77:aa:35:a3:15:fc:b8:96:cd:a3:4b:2f:c7:63:
82:74:38:28:54:6b:71:b5:ea:e5:34:97:6c:19:b3:3a:d9:bc:
48:d2:2c:c3:0b:f0:90:29:04:43:e3:71:03:51:d6:31:57:31:
b0:ef:8e:74:cc:b6:dd:cf:4d:53:e6:67:fc:a8:b1:83:f2:82:
35:87:c2:b3:af:33:54:78:19:93:43:33:c4:51:96:00:c4:e3:
ff:29:6a:93:6a:cb:9a:ed:7b:32:1a:4d:17:f3:87:a3:4a:53:
c4:99:28:87:f9:58:9e:f5:70:ca:4b:b1:e0:01:b6:fd:17:1c:
5b:fd:e4:d1:84:4b:cf:dd:c6:bc:5c:13:08:6f:00:5a:cb:1d:
63:f9:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:37 2026 by rpki-client