
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier: j+BTiBxst7U9Z5xNP5GWHHfuIbrhoqNXTUtbXAY9JXg=
Subject key identifier: 24:F0:DC:FE:CE:13:5E:35:D0:71:A3:26:ED:E1:8D:9F:A7:A9:16:6B
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number: 0157
Signing time: Thu 23 Jul 2026 06:38:47 +0000
Manifest this update: Thu 23 Jul 2026 06:38:46 +0000
Manifest next update: Thu 30 Jul 2026 06:38:46 +0000
Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: /Ucva9it4n53Rtj+Db1juP2vyKwmyY+7wLY4VmWdzfo=)
2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Validity
Not Before: Jul 23 06:38:46 2026 GMT
Not After : Jul 30 06:38:46 2026 GMT
Subject: CN=6a61b6f7-756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:26:cf:01:eb:ff:5a:ef:e5:da:8d:1d:96:
0d:72:15:5c:00:ba:c0:55:f6:f8:23:c3:2b:02:a7:
41:a2:17:00:fb:73:89:ed:3c:14:77:07:82:27:ab:
5b:37:41:af:ae:c8:7f:8a:8f:8e:5b:2c:60:7a:b0:
44:f0:1f:a5:86:99:84:21:8f:8b:51:f6:a9:4c:0a:
5c:29:76:cc:a1:ed:d8:be:6c:bc:bf:6b:fb:07:ff:
9b:fd:4a:e3:23:22:76:42:dc:1e:ce:b1:05:f2:b5:
6c:6a:9b:84:c0:5b:17:c1:13:7b:ac:01:6e:e2:ff:
73:21:b5:08:ac:b0:7f:d7:4f:1f:1f:fc:7c:81:28:
32:3c:d5:13:f3:35:a3:ab:55:df:83:35:51:a2:0d:
8f:61:84:e3:11:7f:ae:bf:f9:ae:97:8c:c6:b6:c1:
66:e2:61:c9:74:f8:af:2d:76:7e:db:8e:81:9d:b9:
c0:03:9f:74:fd:47:8d:6f:72:e7:41:cd:b3:e5:62:
e2:4a:76:6f:ae:6f:97:8f:c3:3f:a7:9d:03:44:d0:
ba:b4:12:97:96:ef:88:f1:8a:af:ac:63:bc:4f:e9:
96:b7:bc:63:df:52:16:37:33:db:30:ed:24:e9:19:
21:46:b7:68:c0:d6:c8:d5:de:d1:12:08:44:76:55:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:DC:FE:CE:13:5E:35:D0:71:A3:26:ED:E1:8D:9F:A7:A9:16:6B
X509v3 Authority Key Identifier:
keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:e1:6a:b1:83:0f:26:84:22:aa:34:c5:33:f8:f3:5c:cd:46:
f0:8c:21:03:98:89:c5:6e:03:f6:ee:95:59:d5:d8:96:dd:39:
6d:07:4b:0c:13:ef:7a:d8:b1:8a:a3:a3:19:41:6d:70:07:22:
10:f1:e4:83:21:92:23:15:26:38:d7:45:93:a5:6f:b1:91:96:
be:48:a2:bc:a3:6f:c8:fe:ed:90:06:27:ec:ce:c8:3e:f8:4b:
65:fe:02:27:fc:cc:8a:a2:57:da:dc:a9:0e:2e:cd:09:9b:45:
d8:22:2e:e9:cb:1e:04:ec:fd:78:af:03:b5:29:be:1a:61:f1:
38:22:8d:7e:8b:1d:9d:28:6e:c6:b6:dd:90:45:42:22:08:46:
52:16:08:13:c3:fb:de:88:f1:6f:ef:b9:d6:43:58:cd:c4:fb:
34:3a:07:2b:ee:de:f7:b9:65:ab:20:c0:1e:ab:18:de:17:1f:
5a:26:60:34:b1:d9:52:e5:7f:db:e2:80:dc:2c:f7:f8:cd:79:
47:da:fe:8a:80:ef:9b:07:6f:31:62:a9:47:1f:2a:41:c8:5e:
bf:ec:16:b5:9a:b2:82:24:83:48:29:bc:af:46:b2:a9:bc:82:
98:84:f3:d2:8d:8d:e2:6e:f2:bb:48:c0:3b:ea:a9:74:fa:6e:
03:a9:10:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1
NzIzRDUwN0QwHhcNMjYwNzIzMDYzODQ2WhcNMjYwNzMwMDYzODQ2WjAYMRYwFAYD
VQQDEw02YTYxYjZmNy03NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBgmzwHr/1rv5dqNHZYNchVcALrAVfb4I8MrAqdBohcA+3OJ7TwUdweCJ6tb
N0Gvrsh/io+OWyxgerBE8B+lhpmEIY+LUfapTApcKXbMoe3Yvmy8v2v7B/+b/Urj
IyJ2QtwezrEF8rVsapuEwFsXwRN7rAFu4v9zIbUIrLB/108fH/x8gSgyPNUT8zWj
q1XfgzVRog2PYYTjEX+uv/mul4zGtsFm4mHJdPivLXZ+246BnbnAA590/UeNb3Ln
Qc2z5WLiSnZvrm+Xj8M/p50DRNC6tBKXlu+I8YqvrGO8T+mWt7xj31IWNzPbMO0k
6RkhRrdowNbI1d7REghEdlVqSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTw3P7O
E1410HGjJu3hjZ+nqRZrMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB
QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6
RGtfWTJTUllmdDlYSTlVSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+FqsYMPJoQiqjTFM/jzXM1G8IwhA5iJxW4D9u6VWdXYlt05bQdLDBPvetix
iqOjGUFtcAciEPHkgyGSIxUmONdFk6VvsZGWvkiivKNvyP7tkAYn7M7IPvhLZf4C
J/zMiqJX2typDi7NCZtF2CIu6cseBOz9eK8DtSm+GmHxOCKNfosdnShuxrbdkEVC
IghGUhYIE8P73ojxb++51kNYzcT7NDoHK+7e97llqyDAHqsY3hcfWiZgNLHZUuV/
2+KA3Cz3+M15R9r+ioDvmwdvMWKpRx8qQchev+wWtZqygiSDSCm8r0ayqbyCmITz
0o2N4m7yu0jAO+qpdPpuA6kQFg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:11 2026 by rpki-client