
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier: pJn/FOJfzZ2PaszijDcA4I1i0/A7dmuj0LMVTqtcWww=
Subject key identifier: F0:06:48:1A:1B:F7:BB:AE:1C:34:40:B0:8D:86:C0:BA:24:C1:89:D3
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number: 04CE
Signing time: Tue 24 Mar 2026 23:32:25 +0000
Manifest this update: Tue 24 Mar 2026 23:32:25 +0000
Manifest next update: Tue 31 Mar 2026 23:32:25 +0000
Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: ZpCk3WCdEcPrfZGfYEX524aiYFEgGq4OAxBrPT3rbnk=)
2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: 3aUq+4eZ5x7ZiH9oh0Xt34CXF6YQPCZXOEPkKr7X/Tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Validity
Not Before: Mar 24 23:32:25 2026 GMT
Not After : Mar 31 23:32:25 2026 GMT
Subject: CN=69c31f09-2e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:e7:0c:c0:a6:d0:ba:ca:8a:68:67:44:a7:
20:47:d2:d7:a5:6e:69:a2:48:ba:33:53:45:69:97:
1d:0a:d3:ce:d0:a8:03:18:45:8c:fa:33:aa:2f:62:
6a:14:ff:f2:19:c8:01:c6:c3:6b:8c:3c:03:7c:e0:
2a:30:84:1b:a2:5a:30:b8:b9:5f:2d:b1:d9:10:56:
d1:50:52:aa:63:63:a4:8e:88:5e:ec:5b:d7:36:a0:
e8:6b:a5:99:ba:60:9a:6f:bb:65:9b:17:a5:da:b4:
84:c4:1a:e8:25:95:ca:dd:ca:7c:17:1c:b4:d8:6f:
73:80:2b:96:dc:cf:a0:d6:e4:34:6d:d7:e4:4b:d7:
40:da:32:f4:37:67:ea:4b:c7:da:be:ea:82:05:0d:
d6:1c:64:11:ae:78:87:6c:aa:f6:4f:de:42:5b:af:
59:50:15:62:83:a5:6d:e5:64:c2:c6:98:a6:35:86:
8f:54:b8:dc:d6:93:1b:d1:e8:a9:17:82:6c:7d:a3:
8d:d1:08:2e:2a:00:4c:cd:ba:ef:f1:32:2d:64:a1:
23:c5:83:b6:19:67:f6:ba:3e:96:54:3f:0b:73:49:
71:2b:3e:93:f6:f8:05:d7:37:9b:9d:4d:ea:23:92:
b8:51:e0:9e:07:54:7f:7b:55:e5:3c:ac:ce:3b:2e:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:48:1A:1B:F7:BB:AE:1C:34:40:B0:8D:86:C0:BA:24:C1:89:D3
X509v3 Authority Key Identifier:
keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:10:69:8f:f6:51:92:2a:bc:18:4a:96:c9:bb:f4:81:b6:
72:49:89:1f:05:da:25:b1:35:63:ca:34:ea:d2:38:38:dd:81:
f1:38:bb:55:f9:5d:11:fd:55:1d:d3:9b:cc:8c:09:e9:15:1a:
0e:89:39:2a:be:3b:af:09:7d:58:05:fe:cc:8a:a1:dc:ed:82:
be:c2:30:0e:3d:05:7f:cb:95:7d:74:90:67:31:a6:2b:cd:31:
26:ca:00:a1:a0:ab:6d:9c:92:e8:f1:0f:dc:2e:e4:f2:9f:09:
a9:ef:c8:17:cc:7b:ef:87:ec:83:5b:2e:7c:81:c9:9f:c4:25:
ff:67:4c:d8:45:8d:bf:4e:db:08:39:a7:49:a2:e8:cc:8b:57:
15:e4:d3:29:16:72:8b:34:21:6d:57:f8:8a:d2:30:cc:03:b7:
bf:67:7a:a8:c4:17:0d:78:ca:6a:69:bf:24:88:2a:fd:bb:34:
fe:5f:24:20:45:a1:bb:cb:48:2a:c5:10:a0:b6:a6:60:07:5d:
a8:2f:b5:b5:05:db:6d:33:bb:a6:b9:6d:d2:b9:fb:d0:58:08:
21:1c:8e:ae:05:25:67:56:5b:61:80:bd:4f:3c:0e:ef:29:27:
90:f1:d2:fa:a8:35:82:62:3c:2a:f3:71:1f:52:e8:1d:69:49:
e3:54:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:05 2026 by rpki-client