
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: YicYeB5U9XGyn1jyTU8grNTyggiFMjJQack8I+zXqfM=
Subject key identifier: C5:26:F0:B3:C3:DF:68:14:BB:D5:87:34:29:6A:63:A3:F8:53:62:7C
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 115E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0DFE
Signing time: Thu 24 Sep 2026 19:30:25 +0000
Manifest this update: Thu 24 Sep 2026 19:30:24 +0000
Manifest next update: Thu 01 Oct 2026 19:30:24 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: Xj2UyCE0CIDugz9+2TlaE+ddRHQQmxzGI0QE99bTbJg=)
2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
3: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
4: B35BC30CB53211F1B42F37F15011F970.roa (hash: KSzj0LdTLAiz1FUtjk9h/u0XDwsyNspF5msQCwgzr/o=)
5: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0zLruqLd1y3E26SuAUI5s7BI64FwkLMd9kXmrMpepI8=)
6: 0F75123EB42411F19F202BBB3E11F970.roa (hash: JNL6WqomlW19XznMLYXyyQo8z6bj0pJRq0tJqCedMSI=)
7: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
8: 8dGmB_rjCduiA5gacvFfz-CchFQ.asa (hash: zt1aa+pxSfuL6A44R86Qov6zVJzYPeS7hFwUUgZgyf0=)
9: DC75E9A4B4E511F1A38ADEFD3811F970.roa (hash: /JW9Vk0apJhTZwFqw6P9ComNZ+dwVYIIOxiI0EsMVuY=)
10: 59103346B4E811F1854CDF493911F970.roa (hash: NNEMwnDF6sfToB41gHzDn96KDua5tOSoYN5KtgYQOME=)
11: 1E66F094B5CA11F1A1E2B0F14311F970.roa (hash: yWjDQdYNQhUx5r9jrComjavaquGimA0SlIdJ0UPL5Po=)
12: F85564DA127711F18BE24F01353D8C67.roa (hash: W4FJg9h2yD393Ffa6VXVJzFyZbTn5L3T36PgxiREF00=)
13: 387CFC8CB53211F1A3F79FC95011F970.roa (hash: 9RU4NC4GOwe0MSqyLPNSykxJNhzsYTqRRIbYRGwrGLY=)
14: 5A0CB6A2B4E811F1854CDF493911F970.roa (hash: LcwdNHZ8xt+068DDbraScihxciGm/JNMucUMjF6oTj0=)
15: 849E45A839B811F1B2456B00AE833773.roa (hash: NIopzKgjt4Tj6l5DHK6hyouyjYzBxpc2yEAWeW/rLjM=)
16: 90DF5EC4B4E711F18624952E3911F970.roa (hash: X0rwSD+HZbPZY8h7R2w+ZV104yI5jo7fwpbe6qSeuYY=)
17: 33253220B5CA11F19A00DBF44311F970.roa (hash: sKLVgopa7iD7VB18ZJtMNmaTxumSLt54Q49L9FE+4sc=)
18: 4F892B3E79E211F186F7A31866A30FBC.roa (hash: Grkkrl99VNi5MICWLKTFyVceKxzaNnh3d7iazSAthD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4446 (0x115e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 24 19:30:24 2026 GMT
Not After : Oct 1 19:30:24 2026 GMT
Subject: CN=6ab57a50-8bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:ba:f1:12:22:a1:1c:ea:41:d0:54:5f:47:
3a:9c:b3:2a:5d:74:ec:86:6a:16:c9:50:43:d5:d6:
b6:91:e4:d7:70:a4:91:6b:42:ca:90:b0:cf:b6:53:
d7:e2:67:0e:a2:64:1f:51:af:18:53:80:dd:74:81:
e6:2a:17:ac:e2:6a:6a:43:f6:2f:fe:e1:db:5f:d8:
49:e3:87:8a:30:b1:81:b2:53:27:0b:1c:28:f5:dd:
57:8f:22:50:8d:db:0b:20:ee:46:ef:67:da:e1:57:
e3:5d:b8:b5:ce:b4:c9:fd:a0:24:5f:dd:e7:f2:dc:
81:8a:58:ee:91:0e:2f:63:a2:fa:8a:b9:d6:02:92:
2e:cb:f0:3c:7d:9e:63:92:74:61:81:f3:25:64:7a:
35:6f:54:f6:d3:ce:ff:34:7f:b9:c6:6b:8a:1d:f1:
ee:86:34:7b:95:33:1e:05:a1:fb:dd:94:77:91:7e:
df:36:d8:b9:99:8f:68:57:81:12:f8:36:47:01:3a:
28:a3:ef:50:60:7f:c6:80:ba:60:8c:f0:47:46:19:
bd:25:18:17:63:26:25:02:1f:ea:0d:dd:0a:f5:7d:
8c:e2:e9:50:7e:ca:6c:70:d7:40:de:0f:1c:b1:d1:
1d:e6:d0:43:26:c5:eb:d1:4b:c8:aa:47:a5:34:d4:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:F0:B3:C3:DF:68:14:BB:D5:87:34:29:6A:63:A3:F8:53:62:7C
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:4e:35:7b:a3:dc:18:25:87:4f:e7:37:4a:91:1b:0f:93:4a:
66:4b:f0:6f:61:ec:a6:86:8b:5c:78:12:d1:e1:1b:47:6d:8b:
12:b3:91:a7:93:51:32:4f:c6:c6:4b:1d:47:7e:9a:c1:75:29:
c6:08:a5:02:26:76:2e:02:f5:e9:f3:2c:7c:56:f1:73:dc:0e:
91:79:aa:be:44:9c:f2:1f:5c:28:c2:39:16:10:3b:b2:ec:d8:
32:0d:af:3c:4b:4b:30:89:7d:61:52:82:43:82:2a:51:d4:87:
21:f9:24:c2:1e:0f:4c:7f:82:2b:bb:44:36:a9:20:3d:24:fe:
75:02:b1:15:e4:49:f9:32:ee:b9:74:e6:c5:c4:22:60:02:32:
3c:cb:74:28:d1:0a:1a:2b:4a:bc:3a:57:e0:29:05:14:64:a0:
f5:0d:eb:0c:4e:93:1d:70:b7:87:fe:eb:51:44:e7:d3:1e:a4:
68:42:17:1f:76:1f:65:fc:20:bf:ac:38:d4:cc:a2:95:bb:5b:
c8:0e:3b:e9:19:f5:e9:6b:5e:12:84:f5:eb:52:9c:55:b7:8d:
fa:98:7d:90:41:a2:58:78:c2:f9:af:8d:42:0a:26:e1:04:f0:
f1:13:65:2d:2c:e9:ca:85:08:55:e3:8b:ef:90:03:03:03:24:
53:26:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:09:33 2026 by rpki-client