
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier: gDyMbIZRlX8B5TD7nqYOr27LLA92Nr/2WSMouP11S70=
Subject key identifier: B1:EA:45:CB:12:2B:57:A4:63:82:3D:05:EB:BF:9C:F9:00:3E:31:34
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number: 42
Signing time: Thu 23 Jul 2026 10:27:41 +0000
Manifest this update: Thu 23 Jul 2026 10:27:41 +0000
Manifest next update: Thu 30 Jul 2026 10:27:41 +0000
Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: 9696DKe/ARz+0mIARhGgeIEibWm/NeQp+j8mbUXWmd4=)
2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Validity
Not Before: Jul 23 10:27:41 2026 GMT
Not After : Jul 30 10:27:41 2026 GMT
Subject: CN=6a61ec9d-d27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:15:ab:4a:41:b0:72:45:78:e5:27:f2:ac:
f9:fb:d5:8e:37:14:68:41:ff:32:f5:fc:f5:1e:b9:
c1:7e:0f:96:f6:51:e5:3a:b7:8f:ce:a9:3e:17:fc:
12:a2:74:b3:d6:40:ae:ee:61:71:38:01:1b:95:01:
80:74:b7:83:44:79:e8:5d:bc:e9:8f:53:5b:b9:cc:
33:ae:99:6c:09:79:8c:81:40:ac:44:47:72:1a:ae:
d4:ba:d1:57:0f:d1:9d:a1:0e:2b:16:72:bb:0d:d9:
95:ab:b6:40:93:e4:e6:63:57:0d:eb:e5:a2:59:9d:
7d:de:61:36:12:7b:c5:d0:a8:d3:8d:7e:69:58:bb:
ec:33:1e:61:ed:70:76:da:2f:eb:d9:af:0d:a8:f3:
cb:31:6c:5d:2d:58:39:db:db:f6:a6:91:09:f8:8d:
16:be:6c:57:79:9c:8f:44:ef:14:13:05:92:80:ed:
c4:23:33:6a:74:d6:e3:01:0c:df:98:97:3d:ca:2c:
9c:7a:10:ca:86:b2:f9:31:4a:27:bb:80:91:3b:fc:
4f:4e:af:cd:29:de:5e:3a:d2:3c:1f:b0:1d:c8:2e:
0e:24:2c:5b:d2:1c:29:1a:c8:84:49:be:bc:41:c5:
f1:75:78:d9:8a:b4:d2:cc:3c:62:48:c7:89:98:4f:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:45:CB:12:2B:57:A4:63:82:3D:05:EB:BF:9C:F9:00:3E:31:34
X509v3 Authority Key Identifier:
keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:8c:6d:a9:49:24:85:c4:55:83:c2:50:6a:b1:c4:13:a2:
63:1d:18:a7:a7:21:85:92:d5:cb:2a:41:45:07:18:8e:b6:f3:
76:00:e4:94:a5:99:19:d6:33:a5:5f:b7:79:eb:d5:27:b8:70:
fe:13:b3:67:c6:b2:11:48:6f:f4:a7:f1:55:93:43:a0:3a:83:
35:e3:cd:b3:7d:cc:1c:7a:8e:57:55:b6:0f:9d:40:dc:38:88:
72:cf:22:06:3b:6e:ff:85:33:2d:8b:26:30:fd:0b:18:de:24:
9e:13:6b:16:cc:9d:af:dd:1e:c4:9b:b3:b0:b2:4b:eb:eb:5f:
b1:cc:f4:d2:28:6f:bc:32:f2:2c:61:36:1c:9d:78:0e:22:ed:
ac:db:11:7e:51:17:46:6b:76:bf:f7:7e:ae:33:dd:84:77:6c:
c2:15:85:00:15:8b:d1:82:55:ed:91:4b:d6:4b:06:70:a3:68:
9e:65:30:64:dd:61:a3:d6:d1:17:0c:6b:3e:c1:27:d1:c7:ac:
e3:ea:56:76:7d:f9:58:c4:c1:9b:8a:9c:f3:6d:b6:e1:c0:f1:
06:8a:95:8a:b7:33:19:62:6d:25:8c:a4:b9:d1:12:2f:6d:53:
f3:8c:5f:1d:1b:bd:55:7f:56:d0:6a:63:62:3a:bd:b2:d0:64:
7d:a4:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:13 2026 by rpki-client