
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: n24G/3ghcCrFFHCHF3SeajKpnLZnNIaKMH9pJH5W5SQ=
Subject key identifier: 39:78:75:79:C1:24:43:9D:01:AA:A6:29:55:BB:92:97:AA:6F:CD:3E
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 013B
Signing time: Wed 13 May 2026 05:29:16 +0000
Manifest this update: Wed 13 May 2026 05:29:15 +0000
Manifest next update: Wed 20 May 2026 05:29:15 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: lW7EKU5NQYZtwDKxFS0p5aGvrTrECTMBKZaTSjOp1qs=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: May 13 05:29:15 2026 GMT
Not After : May 20 05:29:15 2026 GMT
Subject: CN=6a040c2c-2ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:63:9a:dd:4a:fe:24:17:1c:93:7a:8d:9f:
9b:73:84:1a:58:61:3b:75:06:88:f8:ed:49:8a:6b:
2d:82:b3:14:c5:fa:3d:5e:68:b4:b6:4b:66:e5:01:
33:e8:1e:70:7e:be:72:01:1e:e1:fd:bc:7d:e3:03:
95:82:c4:1d:68:81:f1:69:54:e2:e3:f7:f8:0e:5f:
9c:83:95:39:21:7d:fa:1f:ef:e0:49:ea:78:3d:70:
18:e8:18:85:10:74:14:cf:ae:be:19:63:53:21:50:
3a:cd:95:c1:55:84:31:ce:d0:d9:9e:ca:35:85:ad:
7f:ab:2e:4c:42:0f:26:7d:eb:ce:f5:a6:d3:dd:af:
ce:80:bb:a3:47:c1:76:ba:22:14:0f:27:55:50:0f:
cd:9a:2b:36:b6:96:76:f2:a2:9e:8d:45:d5:9b:77:
43:2e:70:86:dd:c7:d5:5b:5e:3c:8b:24:68:3b:0d:
6b:aa:47:42:65:d7:1e:40:34:13:62:59:ac:36:6c:
e7:cc:51:8e:1a:f2:e1:7c:4a:5f:22:22:0d:bd:f4:
a3:40:94:ff:81:c7:62:e1:92:5a:be:54:42:0d:64:
02:89:0a:93:33:07:0e:9f:9f:78:fb:b1:2c:e4:37:
b1:af:36:0f:ee:d0:61:0e:99:3b:95:2e:b9:09:e9:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:78:75:79:C1:24:43:9D:01:AA:A6:29:55:BB:92:97:AA:6F:CD:3E
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:99:48:56:22:4a:36:4e:3b:cb:bb:69:1a:fb:69:0f:a1:
01:60:41:64:58:50:93:24:11:ef:06:56:2e:36:6e:a7:3a:73:
14:b1:00:fa:2b:9b:ae:28:a8:0c:14:4d:f3:52:9d:1c:e9:cc:
61:0b:80:29:d2:a9:36:6b:f4:07:72:8f:85:23:66:c3:f0:59:
17:6d:00:1c:23:bf:3c:92:c2:ea:2b:22:26:29:23:ac:25:d7:
6f:cd:3e:4d:eb:97:55:ba:71:dc:9d:5f:8a:db:54:91:88:f5:
9d:e6:79:d9:56:6d:41:81:24:98:31:f1:a3:dd:b7:80:fd:f0:
7c:30:a1:1b:13:80:32:3b:57:8c:2b:02:bf:94:a3:8a:98:b8:
6e:cd:dc:4e:b4:21:b3:a3:57:92:f8:f5:22:34:95:08:69:2b:
df:2f:52:d7:ee:19:0b:78:c7:1b:29:d4:eb:94:5c:40:98:d4:
e7:db:5f:ec:b6:c8:4d:2a:c2:28:8c:51:05:b6:cc:73:fb:37:
54:18:8f:8e:85:1b:bc:6a:78:ac:96:f2:11:37:c2:5b:e7:4a:
02:e5:77:92:26:46:5c:a7:c9:bc:da:a8:c9:c2:00:68:b9:a2:
82:01:15:9b:9d:b1:42:2e:67:db:67:ac:89:cd:81:e0:23:08:
08:f7:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:07 2026 by rpki-client