
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: ygHl9340LOHL/8yOm4Gf2S9Rxj9NTXH1o2K/yAvRrzY=
Subject key identifier: 6B:46:D8:5B:C2:0F:EB:E4:6F:35:90:C2:9E:FE:95:B2:84:7C:6C:0B
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 015E
Signing time: Thu 23 Jul 2026 06:33:22 +0000
Manifest this update: Thu 23 Jul 2026 06:33:22 +0000
Manifest next update: Thu 30 Jul 2026 06:33:22 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: ygaQPHCee31DVU1H/rb843ue39Xkvq5gWCtlheC1PP8=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: Jul 23 06:33:22 2026 GMT
Not After : Jul 30 06:33:22 2026 GMT
Subject: CN=6a61b5b2-e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:b0:37:62:64:d8:30:b5:bc:2b:23:f7:40:
a3:25:ab:2b:2b:2f:3f:a1:87:34:63:d3:63:a2:ab:
36:5f:59:0f:3f:50:58:c6:ee:1e:81:0b:46:e8:c7:
a4:cf:9a:0d:e3:9d:11:02:0b:3b:a7:22:7b:1d:59:
51:f2:cd:8c:f9:21:65:f6:51:4c:ef:8d:ba:01:f0:
3b:5e:29:4e:86:f6:ff:a9:53:ea:78:ea:61:72:c4:
51:98:b6:fd:99:84:bb:76:65:c6:18:56:d9:35:db:
fe:32:92:9f:1f:8c:67:56:1d:f7:3f:40:98:20:e6:
90:cd:78:3e:f2:9f:0f:33:ce:ed:4e:02:b2:5a:3d:
c8:58:74:fb:bf:cc:b9:dd:38:73:6c:a1:08:45:d6:
13:3f:00:11:9e:d0:a5:59:06:0f:19:9d:dd:fa:dc:
12:4c:fa:1e:57:ad:6a:c2:6a:af:0a:e4:32:93:9c:
f8:cc:c8:e8:bb:97:6c:18:93:6d:f8:ef:5e:11:fa:
b3:4e:52:fa:2f:9a:1e:1f:05:68:55:db:56:16:7f:
32:1f:0f:5c:60:23:59:d7:cd:f5:81:97:3a:29:ac:
35:a1:4b:d2:df:3f:2f:9a:42:81:e0:a8:59:70:0e:
1a:b9:36:35:6d:28:43:f0:d4:04:d2:8e:7b:b4:ce:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:D8:5B:C2:0F:EB:E4:6F:35:90:C2:9E:FE:95:B2:84:7C:6C:0B
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ce:8f:e1:5f:3f:bc:8b:d2:68:3d:a7:00:c5:4a:b6:f6:b4:
37:35:e5:6b:5c:7e:a0:06:9a:16:89:35:27:64:09:91:8d:27:
9b:49:d9:76:2a:60:06:a8:4b:44:f8:17:31:22:dc:45:00:0c:
20:86:cc:b0:a8:83:2a:29:e2:31:a4:8e:60:a3:81:0a:03:cf:
bb:db:82:44:1c:92:2a:e8:fd:df:13:aa:cc:2e:3f:15:cc:45:
b7:98:4e:a7:7b:73:62:10:01:05:8c:f2:65:5e:e9:21:6e:5a:
65:fa:ed:36:98:eb:69:f2:19:55:24:b6:65:ac:fb:4c:27:5a:
60:fd:f4:05:bb:4b:93:18:18:4f:c5:bd:8a:1c:40:b6:fd:1d:
53:ae:23:59:20:30:5c:6f:ff:4b:61:04:78:fc:db:68:ca:db:
40:4c:40:d7:38:5b:70:98:c3:21:22:7a:2a:87:d6:7b:52:18:
04:0c:b5:03:66:25:69:6e:ea:79:79:92:83:f2:af:ef:8d:57:
64:2e:17:ea:cc:c1:7e:08:16:72:dd:46:64:38:43:c9:55:8f:
07:b7:ce:44:2c:f7:05:05:27:ae:c6:dd:52:df:7e:14:65:40:
a2:2c:f6:21:96:ce:68:07:75:fe:84:b0:6d:b7:bf:fe:7c:31:
a5:b2:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:42 2026 by rpki-client