
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier: cVPhx/0TvpZwxdFx1SczNHmfQ5BoDmgW5VP+NmX5vLM=
Subject key identifier: 47:6E:A4:35:81:C5:C3:64:C1:1E:EB:0B:0D:E6:D9:E5:30:08:D2:49
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number: 0178
Signing time: Fri 25 Sep 2026 04:45:35 +0000
Manifest this update: Fri 25 Sep 2026 04:45:35 +0000
Manifest next update: Fri 02 Oct 2026 04:45:35 +0000
Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: QAs61IE4OI3AOCMEijHwlv6s9/PYQu582Jexqk2FzIo=)
2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Validity
Not Before: Sep 25 04:45:35 2026 GMT
Not After : Oct 2 04:45:35 2026 GMT
Subject: CN=6ab5fc6f-d846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:63:bc:72:46:22:f4:3f:0b:e6:ba:31:8a:
92:30:9f:62:14:4b:cf:c4:c8:27:b7:24:f4:3a:b4:
95:60:70:f5:e5:b2:41:28:5a:41:4a:11:42:0c:f1:
ee:8a:8c:86:f8:db:dd:4a:41:cc:0e:54:cd:af:ff:
fd:53:cd:3b:c8:99:f2:59:8f:00:21:78:5f:33:61:
86:ba:fc:86:5d:39:80:c7:0b:54:7f:12:9f:45:d4:
67:9a:66:c1:0c:bd:3f:6c:4c:9d:6e:5a:2c:6d:26:
ab:16:93:de:2d:3f:2e:bc:d3:4b:e3:64:d8:fb:04:
0e:69:66:d3:27:75:5e:f2:c0:b2:48:8e:16:22:88:
72:80:08:47:71:2d:0f:3b:3b:71:1d:a8:42:b1:3f:
e5:1a:83:eb:04:24:f8:3e:e2:31:21:ce:14:02:a5:
4a:5e:d3:ed:c2:1c:9e:a7:7d:40:6e:3c:a3:2a:ba:
5b:2a:a3:65:11:59:f9:af:4d:7a:43:39:d9:df:e9:
d3:b4:10:e6:74:97:ff:06:7e:be:7c:df:eb:43:ea:
4d:d5:65:5f:9b:7f:97:be:9e:2a:80:7e:35:55:7f:
2b:4b:2b:f5:60:9f:f8:d0:45:2a:0a:94:ca:bb:4a:
fc:45:65:48:84:0a:7f:88:83:ad:1f:5e:e3:e0:c4:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6E:A4:35:81:C5:C3:64:C1:1E:EB:0B:0D:E6:D9:E5:30:08:D2:49
X509v3 Authority Key Identifier:
keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:43:b0:0a:00:7f:e7:ce:32:71:cc:5b:97:9c:22:f4:3b:
67:ac:c7:4c:16:59:d0:9f:3c:60:49:33:ed:27:9c:84:70:0c:
b0:9d:db:d0:40:87:69:92:b0:31:9d:4e:b7:d3:4a:72:58:2d:
82:df:c7:d1:9d:42:62:b0:13:b7:ef:64:a3:04:02:6b:c3:8c:
55:07:e3:8b:53:23:b6:ce:3a:17:ec:14:f0:5e:8f:92:40:79:
cb:31:a5:11:88:66:cc:8b:c5:ab:63:fb:91:24:09:91:32:41:
34:99:d0:be:4a:84:1e:92:0e:fb:3c:28:3b:a2:7d:97:c7:df:
21:a0:31:99:0b:21:85:e5:89:5a:bc:7a:a3:70:f1:07:83:46:
96:1b:de:7a:22:00:86:ce:42:01:41:9b:21:09:12:a7:87:1d:
d9:8a:66:14:f8:e8:b0:1b:b6:81:eb:40:e8:cd:46:8f:78:b3:
fc:65:36:dd:22:ee:b0:5d:62:c3:d8:e2:bf:ca:0e:45:50:b3:
1a:51:24:17:65:64:d5:60:4d:1e:c6:4a:1e:2b:8a:d3:9a:bf:
d1:a0:58:6d:74:1c:ca:51:19:95:2f:9f:98:ff:c3:03:cd:fd:
ed:16:bc:af:85:28:94:35:7a:e1:8a:93:98:f4:e4:72:9e:9f:
d6:cc:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:48:51 2026 by rpki-client