
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier: Cx84pQWHDP3SAFX00vO1ywFqCupyDKoAmxQvNI4pvrM=
Subject key identifier: 67:8A:00:FB:3A:F8:22:9C:A1:AB:76:65:5A:4B:DA:B2:BB:92:9E:34
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial: 0433
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number: 0427
Signing time: Tue 22 Sep 2026 23:54:19 +0000
Manifest this update: Tue 22 Sep 2026 23:54:19 +0000
Manifest next update: Tue 29 Sep 2026 23:54:19 +0000
Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: aMG1oVzcd4zf6zBpqxzqPIFaowrnEFJj0FXn+qAmR+s=)
2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Validity
Not Before: Sep 22 23:54:19 2026 GMT
Not After : Sep 29 23:54:19 2026 GMT
Subject: CN=6ab3152b-ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:d7:a7:9a:9b:59:2c:29:5e:be:fa:de:cd:
16:32:09:ea:f2:42:2b:5e:4a:e5:25:81:ef:58:3c:
84:c1:14:65:3d:8e:dd:5d:de:58:06:73:6c:a5:a7:
29:ba:28:c5:49:b1:fb:48:68:8c:6f:e2:0d:cc:7b:
ba:c9:2a:c9:3b:76:ba:b4:84:c8:2e:98:b0:b6:e9:
98:20:ad:9b:8f:63:06:cb:33:ad:83:d3:84:75:30:
ed:41:ea:fb:53:09:51:74:63:1a:71:d7:e2:b6:de:
3f:e8:47:0c:4d:d7:2c:ff:5d:d1:f5:87:0f:66:3a:
96:54:27:5f:4c:66:d0:cb:e9:24:51:cc:45:2c:8a:
82:12:7e:7b:9d:8d:2f:45:43:c5:84:e9:2f:0e:b7:
df:bd:3e:15:9c:f4:b5:59:66:f7:4a:07:b7:6b:5d:
c6:19:04:f1:f7:8a:b9:51:c4:68:62:4a:02:3d:f8:
c3:7c:31:9c:4e:0e:53:94:8f:7e:4d:57:7b:2a:4b:
89:c1:fb:46:44:c4:19:86:24:39:e5:93:91:25:13:
56:c8:ee:b6:44:30:8e:5a:51:79:c4:c6:54:5a:ca:
e6:7a:c2:7e:18:48:84:53:77:96:0d:1b:e2:b8:ea:
75:8f:a6:19:83:17:c0:db:ff:1c:94:10:d8:64:6a:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:00:FB:3A:F8:22:9C:A1:AB:76:65:5A:4B:DA:B2:BB:92:9E:34
X509v3 Authority Key Identifier:
keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:e5:c6:80:fd:7f:e4:f1:41:7c:ed:3f:ee:d8:f0:54:80:
48:0f:40:ab:0b:f5:44:4f:88:2b:30:db:c0:c1:0b:8c:0d:e7:
44:d0:3a:6f:46:29:3f:c6:6b:df:0c:85:f4:55:0d:14:af:82:
0c:94:5f:1a:6d:2f:6f:2f:4a:64:a8:2d:4a:4d:1e:9d:bd:e3:
b3:73:c0:95:ed:b1:78:5b:5f:40:e5:e4:b0:13:19:13:9f:77:
95:68:5d:2f:1b:8d:26:86:d2:15:4a:84:9f:6b:eb:e5:3e:fc:
82:6b:cd:f8:6c:de:f2:ca:e8:19:04:d6:31:59:db:85:40:7a:
0f:db:d7:d7:fd:66:d6:c2:af:b3:aa:35:2a:ae:5d:79:65:89:
a6:e0:23:15:51:7e:cc:94:db:16:3e:bb:23:fe:de:89:95:0e:
ad:5c:80:ea:fe:38:de:24:bc:6c:e0:2c:72:eb:8d:52:2e:9a:
b0:71:6d:3e:f6:35:8c:ca:fc:cc:77:c3:35:96:04:57:1b:e2:
ff:f0:54:4f:25:5e:b6:b4:da:47:bc:78:65:d7:26:61:45:3b:
ab:57:25:b6:fd:7e:60:89:1a:90:87:72:40:f6:d9:2c:d0:9d:
4d:94:67:fa:97:56:8c:c6:d5:0d:9c:d0:c6:07:70:23:34:a5:
37:a0:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:39 2026 by rpki-client