
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: tWxOucCIDLAs28jbdx6RpboD2v7LF1VJpRzLmMhXrAs=
Subject key identifier: E2:9F:F1:12:9F:6B:53:1F:E3:56:B8:D0:08:DF:2B:55:F5:3F:FF:BF
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 0163
Signing time: Tue 12 May 2026 21:31:04 +0000
Manifest this update: Tue 12 May 2026 21:31:04 +0000
Manifest next update: Tue 19 May 2026 21:31:04 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: Lb7YzF5Nrfrk+ViDetuFHxtV8x0n4jUEbCWPyM5K16E=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: May 12 21:31:04 2026 GMT
Not After : May 19 21:31:04 2026 GMT
Subject: CN=6a039c18-057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:4d:03:2a:3b:16:67:36:51:3a:62:08:3f:
24:05:07:6f:c5:e3:0d:28:13:9d:40:e5:e0:d1:35:
e7:34:08:77:be:8d:b7:0c:ed:7c:9c:77:3d:6c:64:
ee:17:8b:13:d0:71:d8:80:55:bb:b6:e0:da:72:1a:
6d:20:e4:a9:56:94:42:49:13:1b:ff:cc:21:ad:32:
5d:6b:b2:6c:a8:fb:1e:1d:1c:b8:ad:5a:2d:35:ef:
bc:87:fc:2b:c8:75:23:22:31:da:45:aa:b9:7c:b1:
ff:3f:11:c6:7b:cc:d2:3c:8d:0c:6d:46:6b:16:d1:
9b:bd:57:88:87:58:a3:d0:d0:34:05:15:d9:0b:7f:
29:d1:18:c5:31:5f:97:1f:63:88:d4:c3:66:8c:f7:
79:fc:47:4a:c4:79:58:90:36:6c:b0:8f:8f:8b:db:
aa:e6:77:87:b6:a0:fc:dc:32:30:fd:54:5d:07:ae:
5e:d3:5c:a9:67:d3:46:67:72:90:1f:2d:37:f6:df:
f2:15:df:03:e4:2a:0d:07:c5:27:31:05:79:6a:92:
86:ed:3c:35:05:c0:c5:c0:8f:98:5b:ad:53:24:93:
55:e8:ad:4b:6f:b9:4a:de:46:3c:17:e7:c0:e0:b4:
29:78:1a:b5:cc:61:07:2c:c4:0a:0c:17:b6:d2:c3:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:F1:12:9F:6B:53:1F:E3:56:B8:D0:08:DF:2B:55:F5:3F:FF:BF
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:86:b0:57:c3:c9:07:29:43:7c:97:59:60:dd:01:fd:64:
9d:03:12:b8:90:30:6c:77:0d:d4:a6:0e:01:57:e1:1f:74:f4:
26:ea:51:c2:e3:36:69:3b:bc:c8:f1:40:15:fb:85:bc:34:d9:
76:40:3e:5f:40:f5:d8:c1:f1:37:dd:97:11:3b:38:e8:9f:f9:
c9:79:62:17:d4:c4:28:33:d2:c8:74:71:f0:2a:1c:83:ad:87:
e9:43:f1:e6:d3:af:89:10:8e:e9:a2:07:ab:37:39:83:3f:de:
eb:51:25:37:0d:65:4a:a2:83:44:48:ea:dd:a8:a0:7e:b1:d3:
b0:d6:fb:26:ca:ae:a4:d0:e1:3d:d2:75:51:aa:b3:f2:34:c4:
0e:4c:05:59:ab:36:a4:e2:7e:61:aa:5b:c7:3a:ae:e4:ac:cb:
5a:7a:e2:49:aa:15:cb:a0:ba:17:8a:7b:8a:a5:3e:19:3e:51:
e6:01:05:71:5a:e3:74:16:27:f8:32:06:45:33:86:93:1d:b2:
ca:5c:b1:0e:59:4f:cc:87:b6:c2:93:89:1e:d0:db:85:25:e4:
05:cc:45:3d:32:9f:b7:9a:6a:af:02:f4:43:2e:61:f0:eb:a7:
13:c9:1f:1f:03:30:a8:38:68:fb:6f:a0:97:5e:49:ef:66:ac:
66:63:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:55 2026 by rpki-client