
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: FTP6q+iiWI9AmOc8FekL8bOrrT3wgOFPYXUaTwbIuWQ=
Subject key identifier: 69:83:9B:76:D8:12:B4:B0:17:D8:FA:97:FA:F8:74:A7:16:66:DF:EE
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0E60
Signing time: Sat 14 Nov 2026 19:24:08 +0000
Manifest this update: Sat 14 Nov 2026 19:24:08 +0000
Manifest next update: Sat 21 Nov 2026 19:24:08 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: a2ROs+siY0gXK/DkDLJeSWaQ2UxiV+aXle0rj0hr8es=)
2: 049574BAD05F11F184AD199B0866CEF9.roa (hash: lxJnUeNA/Ds48pwe8f1kFysDWApLmXTiO7Aozoo5rvQ=)
3: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
4: D15BB6D2D57611F192C48A131B66CEF9.roa (hash: e+KEP04k7vNIhdLPD+gItHQnaAVugGClxyf4WgsP6sw=)
5: 14C3B190C48311F1918DDB415011F970.roa (hash: vCpPiz16vOX5yade1MYXHvhHDjYT8wkJ0onQZAjOo4Q=)
6: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
7: 4113ABA0D7A811F1B3B6BB6D0666CEF9.roa (hash: qcL5k56bh8uRtmH1PTjJSXOiAJ3v5LrISmZ2Sef2Okc=)
8: EB67ED1CC3FF11F19A8340576A11F970.roa (hash: 0tXDRbicSbGhek9d3rwNiEMFpbn7Hv7iUTyK/3kVVCs=)
9: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
10: CFBD3A08D57611F192C48A131B66CEF9.roa (hash: QqufRpQG4zGT+S/xQwlt1kllndQtUYas1WcBV5iYLEg=)
11: B35BC30CB53211F1B42F37F15011F970.roa (hash: KSzj0LdTLAiz1FUtjk9h/u0XDwsyNspF5msQCwgzr/o=)
12: 6DB384A8C57B11F19E205B615A11F970.roa (hash: Gphro3H5lonVKKZaKM1p9bUXGxowRCxyqqubG9UZshs=)
13: B49F7F56D2F111F1A7AFF9A71466CEF9.roa (hash: w4rozlAgICD7/Pt2a7v/F/lX/gnjgz3bolh3Q9if4GQ=)
14: 3205C0F8D37F11F1BE4C081A0166CEF9.roa (hash: Ewur4J8TKTh5tzXNX6xmApdhHUaBRrFE8N/IRIPSVBE=)
15: 0F75123EB42411F19F202BBB3E11F970.roa (hash: BQywTYTaIfzLIXv+2IvFpwB3ZqqwxbhX2baagaI5MmM=)
16: 3F3CACAAD37F11F197EAEF1F0166CEF9.roa (hash: WRly+20PfP3KcKph2Td6AEgKveCT9+D6SyIoW4Y3J2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Nov 14 19:24:08 2026 GMT
Not After : Nov 21 19:24:08 2026 GMT
Subject: CN=6af8b558-b45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:1f:c3:9e:cd:62:e4:4d:4b:b3:a8:63:97:
be:c5:dd:b3:88:bf:16:a9:44:c2:6f:a1:7d:fb:f1:
99:f7:c1:b7:ee:d0:9a:a6:5c:93:9e:f5:82:4e:82:
26:31:f7:80:08:44:97:fc:da:ac:59:9f:65:78:28:
39:16:5a:05:c7:c3:3b:6f:e5:f2:88:47:3d:ec:9e:
92:02:01:8d:bb:7c:88:51:9d:c9:31:76:cd:e1:ce:
c6:e0:70:b5:8a:da:61:29:dc:8b:68:90:f7:9d:7e:
29:42:5d:96:ee:76:b4:e9:a7:0b:53:9d:3a:eb:f6:
a3:65:a8:1f:47:bb:80:96:75:cc:81:ae:b3:b8:94:
4a:04:57:e0:89:ee:42:0c:33:b8:e4:d6:f2:c7:92:
4f:54:7c:17:a2:45:ec:a9:54:35:2f:68:c8:9b:e8:
4f:42:ee:31:22:8a:0c:db:ba:ca:df:20:db:3b:33:
ca:66:1c:08:e0:67:f4:cf:cb:64:ce:d1:31:91:6f:
36:7c:94:d4:02:b7:82:1e:69:0c:f2:ad:e9:93:70:
50:fc:9e:c4:c8:27:cb:fe:92:4a:9f:14:09:a7:cd:
b4:fd:29:87:79:b0:b6:b1:3e:c0:8a:90:eb:d0:e6:
6e:d5:09:a3:46:98:64:8a:0e:f6:9e:b5:4f:d2:f3:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:9B:76:D8:12:B4:B0:17:D8:FA:97:FA:F8:74:A7:16:66:DF:EE
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:84:ce:db:36:02:8b:22:f8:fd:c5:8a:7d:b2:fc:8a:13:38:
53:b3:50:51:8b:bc:14:e1:30:c0:9a:11:2c:d5:70:ba:79:de:
e4:9c:73:47:d8:aa:94:59:f2:7f:d0:7f:53:82:1e:eb:87:63:
39:51:7b:2e:44:43:62:66:ce:c1:c4:60:16:69:b4:fa:98:ad:
5d:31:c2:58:60:df:34:ab:54:d2:df:fa:6d:4e:57:4b:38:9c:
28:08:ce:15:de:8f:16:2b:e8:56:97:3e:96:2a:3d:94:c3:e6:
82:4d:b8:e6:8e:af:b0:1b:44:6d:d7:b9:3e:d4:95:70:5c:56:
29:df:77:34:2b:a7:13:86:dc:3d:9e:a9:8a:3a:59:e2:22:fc:
59:7f:b7:dc:e7:42:c6:65:7f:a0:a4:0b:5a:f9:2a:55:b1:1b:
ec:b5:d6:29:b5:b9:ee:bf:b6:4c:83:5d:fa:c7:17:6b:7a:55:
14:0f:9b:ee:84:5f:48:19:d5:43:51:c1:ac:f1:e2:70:0a:87:
4b:34:50:8b:c4:ac:2a:7a:d7:52:9b:23:64:fd:16:91:da:ba:
8d:c3:61:f8:fa:a2:6b:b8:67:c0:ed:ad:af:55:29:21:92:c3:
a3:0e:a6:80:0e:f4:a2:17:27:27:b2:a9:3c:c8:9f:cf:ae:63:
25:96:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:06:54 2026 by rpki-client