
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier: 2hni718TyB4EUIu70nK4K5IBYUvYn322MH2DU2Eoqv8=
Subject key identifier: 0A:9E:64:C5:D2:8C:04:CF:C0:77:EC:D9:F1:70:98:BA:47:04:00:88
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number: 01A8
Signing time: Wed 13 May 2026 04:22:16 +0000
Manifest this update: Wed 13 May 2026 04:22:15 +0000
Manifest next update: Wed 20 May 2026 04:22:15 +0000
Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: RFIl7UwIApYXNVIE/UJa0DzeWOz5Qg+mBFl4UIu0z8c=)
2: 69299E5E451A11F1923B844B97833773.roa (hash: ysWt6Cp+OKC3wWhi/72Sc1dGh/s11z7W1OMwrGJbdPY=)
3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: z9EDVnBrrvYkKd0g5cZsXbHmSVTdTt1qtDE8mfboD8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Validity
Not Before: May 13 04:22:15 2026 GMT
Not After : May 20 04:22:15 2026 GMT
Subject: CN=6a03fc78-0d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:c1:57:c8:c1:db:48:1d:82:63:d3:56:07:
65:18:a5:cd:03:21:34:b6:70:1b:d7:ef:0e:f0:0f:
3b:43:77:b1:33:07:e8:79:fb:d0:b0:96:2f:3c:9d:
ba:70:a1:4c:79:9c:a6:5c:d3:ab:bf:b7:f1:33:f6:
9b:a7:c7:83:71:4a:f5:9e:8e:2e:6f:e4:9b:a7:79:
f9:14:98:6a:62:12:40:e6:87:56:bd:d5:f5:69:c2:
24:6c:cc:04:af:61:8e:f6:c0:04:a8:db:f6:c8:a9:
d4:1f:02:84:6a:9c:df:46:c1:14:09:a5:55:5b:b2:
73:b3:b0:57:2c:d8:bc:19:9c:e7:eb:cf:dc:2a:a4:
b8:f4:de:99:f8:58:ee:34:05:ff:83:3e:f9:8f:d7:
49:76:fc:ed:9b:b6:48:89:95:86:ed:d1:09:90:db:
99:ed:86:26:84:d6:f2:bc:85:34:dd:fd:0b:11:cf:
ea:15:11:2d:f3:b9:28:f4:dd:39:fa:7a:4e:69:95:
10:33:4e:70:cc:91:a4:59:3e:56:3b:99:60:0c:37:
c1:de:29:39:d5:57:ca:c7:37:38:92:6b:48:76:e3:
fb:e6:28:80:f4:f5:44:fc:3b:1b:6e:89:d3:d1:d0:
36:1a:30:80:d8:c3:7c:8b:39:2c:91:eb:ec:be:35:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:64:C5:D2:8C:04:CF:C0:77:EC:D9:F1:70:98:BA:47:04:00:88
X509v3 Authority Key Identifier:
keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:26:d5:8d:d4:20:9c:6e:3b:e6:75:5f:70:8b:6c:48:14:
3f:24:ec:cf:0c:1b:e0:a1:70:f6:a6:18:0c:f7:53:e2:58:47:
be:e0:9d:ee:b2:78:a4:1a:7e:93:db:b7:f5:d8:71:97:07:c7:
c9:62:36:0d:d6:16:30:ab:6c:0b:db:62:bf:bc:fe:8f:2e:41:
9c:93:ae:b0:94:94:42:a6:99:e3:b1:2c:4a:d0:c9:ef:fa:82:
82:fb:68:b5:ce:61:78:c3:b6:c3:0f:28:52:7c:7a:a3:7c:78:
24:11:5a:af:3e:84:cb:fc:61:19:9b:01:ac:47:7f:ca:ef:6b:
00:9e:bd:a1:fb:36:2c:89:5b:8d:6e:d1:c7:ad:3e:52:81:c1:
6d:85:40:ac:51:fc:a8:11:fc:e3:ae:63:bc:fb:8c:c1:01:d7:
08:37:58:0d:7a:be:1a:a2:70:db:a0:1e:93:15:17:64:66:9e:
e1:cb:4f:50:72:ae:18:d2:8d:da:b0:30:49:9e:40:ee:87:b7:
58:13:b3:1e:56:bb:68:f1:8a:10:fc:e1:dc:51:e4:30:c0:cd:
d9:cd:d1:2c:5d:2a:24:62:c2:6c:9a:50:f3:07:e3:fb:4a:8c:
aa:22:08:e6:f9:45:2c:7b:37:53:aa:5b:59:8b:a6:74:ae:dd:
d9:26:b9:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG
RDM2Q0M3QTUwHhcNMjYwNTEzMDQyMjE1WhcNMjYwNTIwMDQyMjE1WjAYMRYwFAYD
VQQDEw02YTAzZmM3OC0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxd7BV8jB20gdgmPTVgdlGKXNAyE0tnAb1+8O8A87Q3exMwfoefvQsJYvPJ26
cKFMeZymXNOrv7fxM/abp8eDcUr1no4ub+Sbp3n5FJhqYhJA5odWvdX1acIkbMwE
r2GO9sAEqNv2yKnUHwKEapzfRsEUCaVVW7Jzs7BXLNi8GZzn68/cKqS49N6Z+Fju
NAX/gz75j9dJdvztm7ZIiZWG7dEJkNuZ7YYmhNbyvIU03f0LEc/qFREt87ko9N05
+npOaZUQM05wzJGkWT5WO5lgDDfB3ik51VfKxzc4kmtIduP75iiA9PVE/DsbbonT
0dA2GjCA2MN8izkskevsvjVkIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqeZMXS
jATPwHfs2fFwmLpHBACIMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx
OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU
Tmc2azZJUnpVdWY5TnN4NlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOYgm1Y3UIJxuO+Z1X3CLbEgUPyTszwwb4KFw9qYYDPdT4lhHvuCd7rJ4pBp+
k9u39dhxlwfHyWI2DdYWMKtsC9tiv7z+jy5BnJOusJSUQqaZ47EsStDJ7/qCgvto
tc5heMO2ww8oUnx6o3x4JBFarz6Ey/xhGZsBrEd/yu9rAJ69ofs2LIlbjW7Rx60+
UoHBbYVArFH8qBH8465jvPuMwQHXCDdYDXq+GqJw26AekxUXZGae4ctPUHKuGNKN
2rAwSZ5A7oe3WBOzHla7aPGKEPzh3FHkMMDN2c3RLF0qJGLCbJpQ8wfj+0qMqiII
5vlFLHs3U6pbWYumdK7d2Sa5lQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:57:59 2026 by rpki-client