
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier: Mbx8NuQgshMPPi3ioCvgVqJw6xVek9PKRBlIqKX/s58=
Subject key identifier: 99:AD:61:AB:13:C4:B1:B9:B7:30:57:86:51:25:82:03:B0:AD:6B:97
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number: 0134
Signing time: Wed 13 May 2026 05:34:07 +0000
Manifest this update: Wed 13 May 2026 05:34:06 +0000
Manifest next update: Wed 20 May 2026 05:34:06 +0000
Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: Zabl4t4RScH44E2iBbm2oPpzqQemlJpZmcyPW1C4KXc=)
2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Validity
Not Before: May 13 05:34:06 2026 GMT
Not After : May 20 05:34:06 2026 GMT
Subject: CN=6a040d4f-55bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:af:b2:d2:8e:49:31:66:ce:28:a7:02:0e:
ee:45:20:cb:9b:77:25:a0:c0:9e:83:e0:7e:e7:65:
d2:93:f1:b8:c0:8c:6c:4c:76:f6:11:f0:2c:62:a8:
11:43:80:b4:7a:2b:92:73:08:48:0a:6c:7b:ca:1f:
3c:64:ba:5c:0b:c7:b5:45:cf:07:78:85:8d:4f:aa:
fc:a9:6a:cf:14:62:ce:9e:7f:3e:4d:5d:53:f6:00:
70:e1:fe:ae:f5:69:26:37:72:85:e0:ad:08:0b:27:
42:86:a3:ce:41:a3:52:36:52:49:21:c0:0e:fb:39:
d1:f6:9e:2f:fc:31:a3:c0:c9:0c:5f:2a:b0:1b:00:
73:65:99:50:f4:32:13:2c:59:a2:38:20:03:a2:81:
14:5d:3a:dc:6e:94:5c:2b:89:5c:52:c4:8f:8a:df:
32:7d:c3:d4:e5:4c:3c:5e:ce:d8:e3:c9:63:d3:26:
c4:34:09:35:a9:d9:62:26:b7:d4:1a:41:73:78:3b:
e8:9c:54:73:18:84:cd:04:98:1a:78:a6:0f:6c:ce:
9f:32:8f:6f:c4:6b:31:e6:01:32:26:d1:87:31:cf:
e3:d1:4c:45:e5:e6:0e:d8:a0:cd:d3:9e:1b:d6:52:
06:d6:23:ad:7f:b7:24:5a:88:3f:91:d6:3b:f0:a4:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:61:AB:13:C4:B1:B9:B7:30:57:86:51:25:82:03:B0:AD:6B:97
X509v3 Authority Key Identifier:
keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:ae:5a:ec:49:e4:92:1b:aa:97:56:43:78:e2:da:71:d7:
01:48:46:55:cb:bd:33:8a:35:b1:06:11:3a:44:5e:f8:e7:e4:
69:91:d4:98:0f:f0:ca:2e:3f:a8:60:5a:e8:5f:7f:84:f4:dc:
61:03:eb:c5:b2:51:9e:a9:23:b7:57:25:a5:9f:32:27:bf:84:
d8:1d:b5:5c:65:b8:3e:40:45:92:73:85:27:98:d1:bc:b5:fd:
19:e9:f8:ad:39:4e:27:ef:b9:1e:61:d4:f6:35:67:27:d3:db:
0f:0d:ea:42:ea:34:38:43:03:3d:fc:5d:27:c9:b2:53:0c:cc:
42:3f:b4:82:3a:47:5c:78:0b:ba:12:05:f7:ef:4b:b7:d3:8d:
c2:cd:c1:f5:1e:ec:27:bd:b8:c1:18:1d:46:4f:11:33:b1:d1:
41:37:05:bb:e9:ca:8f:38:9b:78:b5:1c:dd:0e:a8:de:05:55:
68:01:30:2c:1c:99:ad:24:1c:d9:c9:02:5a:7e:c2:4e:3b:c7:
d5:d7:59:09:f4:e4:66:c9:f3:f3:8a:62:ac:66:82:5e:e0:33:
f8:72:95:01:77:45:04:0f:bb:88:07:a2:95:50:ea:0a:cf:00:
e8:0e:35:d1:00:bf:41:54:0c:8d:b4:c7:a3:d7:63:e6:d6:75:
30:26:1f:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1
NzIzRDUwN0QwHhcNMjYwNTEzMDUzNDA2WhcNMjYwNTIwMDUzNDA2WjAYMRYwFAYD
VQQDEw02YTA0MGQ0Zi01NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTavstKOSTFmziinAg7uRSDLm3cloMCeg+B+52XSk/G4wIxsTHb2EfAsYqgR
Q4C0eiuScwhICmx7yh88ZLpcC8e1Rc8HeIWNT6r8qWrPFGLOnn8+TV1T9gBw4f6u
9WkmN3KF4K0ICydChqPOQaNSNlJJIcAO+znR9p4v/DGjwMkMXyqwGwBzZZlQ9DIT
LFmiOCADooEUXTrcbpRcK4lcUsSPit8yfcPU5Uw8Xs7Y48lj0ybENAk1qdliJrfU
GkFzeDvonFRzGITNBJgaeKYPbM6fMo9vxGsx5gEyJtGHMc/j0UxF5eYO2KDN054b
1lIG1iOtf7ckWog/kdY78KS2AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmtYasT
xLG5tzBXhlElggOwrWuXMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB
QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6
RGtfWTJTUllmdDlYSTlVSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAESuWuxJ5JIbqpdWQ3ji2nHXAUhGVcu9M4o1sQYROkRe+OfkaZHUmA/wyi4/
qGBa6F9/hPTcYQPrxbJRnqkjt1clpZ8yJ7+E2B21XGW4PkBFknOFJ5jRvLX9Gen4
rTlOJ++5HmHU9jVnJ9PbDw3qQuo0OEMDPfxdJ8myUwzMQj+0gjpHXHgLuhIF9+9L
t9ONws3B9R7sJ724wRgdRk8RM7HRQTcFu+nKjzibeLUc3Q6o3gVVaAEwLByZrSQc
2ckCWn7CTjvH1ddZCfTkZsnz84pirGaCXuAz+HKVAXdFBA+7iAeilVDqCs8A6A41
0QC/QVQMjbTHo9dj5tZ1MCYfWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:52:59 2026 by rpki-client