
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: uxR7CrU6vuWSaHwfVjRR7oIOM0oQGM/yMMheRRTH3X4=
Subject key identifier: E7:2C:2C:CB:FB:FD:2F:3F:11:76:C1:33:E0:40:B0:42:A8:36:64:25
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 04C5
Signing time: Sat 14 Nov 2026 23:38:51 +0000
Manifest this update: Sat 14 Nov 2026 23:38:51 +0000
Manifest next update: Sat 21 Nov 2026 23:38:51 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: xK0QxjETsoRdf0VEwseuv4sM37iwuBZj++3inAp3tZI=)
2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=)
3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=)
4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Nov 14 23:38:51 2026 GMT
Not After : Nov 21 23:38:51 2026 GMT
Subject: CN=6af8f10b-f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:77:92:ab:03:62:25:81:6b:65:38:10:f2:
32:12:b8:46:ee:75:6a:75:a4:ef:57:fb:f0:15:4b:
c1:39:b4:d2:65:4f:45:cf:1f:c3:6c:0c:08:06:65:
34:20:95:b0:c8:39:c9:44:a3:b2:ca:b3:45:c6:11:
15:ac:89:25:16:57:ee:49:37:c6:17:7a:66:8f:55:
35:0d:16:e1:76:45:69:2c:a2:04:cd:8e:97:33:7c:
25:16:20:93:ce:f2:34:d7:40:e0:33:15:be:1f:6c:
f8:81:28:d8:5d:cb:90:0f:a4:6a:44:65:4d:55:a2:
de:1f:12:ca:4c:f4:03:55:08:ec:61:a4:da:1c:4a:
3e:2d:2f:d8:9c:c7:a0:ed:7a:a0:22:f7:67:bc:14:
37:0f:88:4b:c7:2c:6f:37:27:56:99:52:fb:8d:be:
7a:45:6d:64:8c:08:85:45:62:02:f8:fb:5b:2d:c9:
2f:48:f1:1d:83:0e:65:55:80:d5:f3:11:ef:5a:63:
da:08:07:13:74:69:0e:0d:0b:af:22:6e:68:54:fb:
49:99:56:90:d2:86:26:b1:0e:0d:ae:5b:98:cd:00:
e2:04:6c:dd:1d:82:04:ef:b0:91:fa:33:11:28:bd:
68:d1:e8:28:14:02:46:46:d6:43:c5:c9:4e:d9:c9:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:2C:CB:FB:FD:2F:3F:11:76:C1:33:E0:40:B0:42:A8:36:64:25
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1f:c9:8b:ac:8f:dc:5a:9b:52:06:f2:2c:36:36:b5:fd:11:
c6:e3:11:0a:af:88:bb:7d:c8:60:13:00:08:46:4f:22:59:aa:
0d:a4:ea:14:4d:33:75:eb:3e:92:d0:24:00:27:76:3d:c5:7e:
63:fc:2c:72:00:a8:be:5b:8b:f9:52:7f:03:16:4d:06:4c:c3:
fb:a3:67:0c:1e:a8:03:fe:a8:a6:8a:dc:46:93:1e:9d:29:20:
7a:25:b2:82:fd:03:ef:1e:ac:10:27:2d:d2:4d:94:cd:16:17:
ae:7b:b1:be:c7:d3:83:9b:48:28:e9:ce:ee:66:ab:eb:24:cc:
63:2a:b4:45:01:8c:69:c0:2e:4b:e4:ad:0e:0e:a6:43:fc:d1:
c4:c9:4a:1b:22:05:0d:b6:ff:d6:83:18:0f:1c:6e:d1:1d:c0:
d1:40:41:e8:24:86:fb:8a:4a:75:7d:ce:32:23:0b:88:06:2b:
48:5b:c2:77:bd:1c:68:a3:18:4d:6f:6a:83:db:5b:54:4c:7b:
7d:86:3e:68:7e:7e:47:a3:19:ce:a9:f1:84:e3:53:1b:de:c4:
54:a8:73:b0:87:df:29:d8:9a:17:6a:5e:2b:9a:d2:55:ab:0e:
f6:27:20:06:40:b8:14:8d:3b:66:16:16:c8:30:fc:08:d0:66:
ca:61:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:59 2026 by rpki-client