
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: XJIm/GB+qgBTdYin/aH+WgV9bjqwTbkRt6FbDAWJlsM=
Subject key identifier: 29:57:DF:E3:1F:FE:06:4C:AB:64:D4:EF:2A:67:F0:0C:57:AB:F9:80
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 0187
Signing time: Wed 22 Jul 2026 21:56:09 +0000
Manifest this update: Wed 22 Jul 2026 21:56:08 +0000
Manifest next update: Wed 29 Jul 2026 21:56:08 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: VTlBCp+Lnb4+vATPjqaLRSlFgm+P8h/6Bur8hsZ0uw8=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: Jul 22 21:56:08 2026 GMT
Not After : Jul 29 21:56:08 2026 GMT
Subject: CN=6a613c79-9e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:36:35:5f:9e:a0:14:0e:3b:da:e5:53:60:
6c:e9:57:0c:0c:20:d3:b1:c9:5c:71:e6:8b:ae:44:
7f:53:d6:88:c8:c6:7f:54:30:09:af:d0:3c:dd:1f:
50:1c:59:fa:14:b3:5d:38:c9:e4:03:7b:88:af:78:
e2:19:4b:a6:5a:19:36:6e:f0:d4:04:8f:f6:b3:57:
26:10:11:b3:cb:fb:19:21:de:ed:67:50:de:20:50:
95:5b:6f:6e:21:47:b7:7d:62:80:08:59:1f:03:16:
9e:b3:ad:7e:8f:61:39:9a:0a:f4:38:b3:81:50:eb:
8b:00:22:05:e7:80:35:ed:02:f2:de:28:87:fc:d1:
ad:72:1f:45:39:98:42:92:ae:d8:38:dd:8a:9e:bf:
fe:4b:c6:1c:fd:34:12:0f:23:3a:20:93:0b:f2:5c:
cb:a9:56:19:49:ab:97:20:2b:6d:aa:09:e6:cf:1f:
dc:2d:d0:23:43:a6:dc:b5:69:d8:c4:c2:1f:71:5a:
65:03:97:2b:81:63:59:5f:58:a4:d8:75:d5:8c:79:
bb:da:a8:63:28:d0:f2:c3:c2:9f:89:6e:c2:ab:86:
79:87:25:8c:81:a3:c2:ae:f3:97:6a:ac:59:b3:c5:
4e:8e:37:7a:ee:59:e3:9a:f0:ab:81:49:5c:01:44:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:DF:E3:1F:FE:06:4C:AB:64:D4:EF:2A:67:F0:0C:57:AB:F9:80
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c6:3a:12:67:32:5a:ec:23:86:36:fd:de:5e:6d:bc:da:f7:
b1:01:27:dd:cc:bd:ff:3c:7f:8e:85:7a:55:1d:f4:e4:e7:9f:
6a:e4:7a:bd:6a:ba:98:4e:a2:bc:f0:fb:23:25:ab:26:86:e2:
32:db:03:33:0f:7e:e3:0f:ff:07:6c:44:71:7a:57:a1:d4:2e:
4f:f5:f7:4e:39:3d:3e:66:b4:34:dd:d4:8a:a0:d4:5c:13:28:
e4:29:5b:e8:cd:5a:eb:7e:bf:5b:d4:13:bd:96:08:f7:a9:a6:
c8:3b:64:e6:31:17:df:01:33:56:69:9e:c3:53:8f:b0:d6:56:
fe:76:1d:90:d2:20:53:11:98:b0:33:ca:0f:7a:11:67:6c:7f:
e9:9a:24:77:03:dc:68:0d:f7:19:65:87:33:85:f1:3c:95:87:
87:88:a6:58:f0:1a:de:bc:35:cc:03:a0:26:c4:06:58:08:52:
fc:88:25:57:28:b9:fb:60:0d:86:24:60:ec:82:ed:b5:8f:1d:
0a:0c:0f:77:b0:77:66:9e:80:a9:57:c5:42:a6:98:3f:9e:a1:
ca:80:d4:62:d8:9b:0e:99:dd:74:dc:b8:14:79:04:0a:8c:77:
54:28:e6:75:a9:d3:63:e9:bc:a7:32:56:27:63:02:58:e0:b5:
42:3b:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:00 2026 by rpki-client