
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: dl6Vc+b0vExYNM/BCTi1NUcvAj0dnFb2sw5Be008hsY=
Subject key identifier: 1B:E2:60:CC:34:46:D4:C9:42:EF:46:12:C6:C8:09:BE:FB:5C:25:1F
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 013E
Signing time: Mon 02 Mar 2026 21:21:59 +0000
Manifest this update: Mon 02 Mar 2026 21:21:58 +0000
Manifest next update: Mon 09 Mar 2026 21:21:58 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: Foa4WrBYQKVqcrSzfARdIGFzus6Rxg2/6E9dJCv9v64=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: Mar 2 21:21:58 2026 GMT
Not After : Mar 9 21:21:58 2026 GMT
Subject: CN=69a5ff77-45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:fe:ca:a0:61:39:41:08:aa:f1:97:71:e4:
1e:de:31:20:8f:b2:dc:f4:94:bf:1c:99:d2:7e:2e:
54:15:48:50:87:11:51:ea:35:da:ab:cc:46:38:40:
35:45:a8:82:c0:d9:03:6a:30:17:43:86:e9:c1:29:
57:52:4f:bc:3d:4c:ec:e8:35:25:17:23:73:7d:d3:
f2:58:8a:f6:b6:cc:23:9e:24:51:e2:1d:76:77:97:
a5:7e:e4:89:6c:77:f4:5c:ec:25:30:87:a2:a5:62:
47:30:82:76:f2:59:f2:57:39:b4:0a:8f:95:e7:70:
9f:96:45:55:6c:96:59:fe:10:46:b4:6c:9c:86:31:
b4:54:d5:30:ef:21:1d:93:9e:be:ea:a4:ff:c9:62:
f8:b4:57:61:eb:0a:67:53:50:91:ba:08:de:0d:51:
2c:bb:b5:5d:e2:1f:d4:fc:83:12:97:1c:4c:f6:63:
8e:8b:a3:34:e2:d4:61:24:0b:fb:ec:c0:26:52:34:
fb:4d:b7:a8:a9:0d:a2:86:6d:65:bd:21:b4:30:f7:
ad:17:94:68:4b:1b:38:d5:c2:5f:a1:de:d2:58:0c:
f5:68:0f:c4:50:06:5a:d1:66:05:eb:8e:85:1e:bc:
87:ee:24:3a:74:ad:77:43:62:0f:69:89:60:22:e4:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:60:CC:34:46:D4:C9:42:EF:46:12:C6:C8:09:BE:FB:5C:25:1F
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:10:5c:8d:cb:6d:89:c8:21:9b:77:aa:ec:7d:63:7c:d7:f9:
3f:ed:55:41:45:5e:bb:57:03:04:77:89:71:5e:f3:57:5d:93:
b4:90:8a:88:51:ef:fa:ce:d4:7c:0f:28:c1:e4:83:e9:f7:68:
eb:27:84:d6:a5:8a:2e:4b:37:8d:68:7d:b8:80:ab:a5:81:9e:
a0:2f:6d:70:63:47:6d:e3:6b:07:cd:85:f5:1f:31:e2:af:cd:
a4:ee:87:33:4d:a4:35:c5:b1:2c:6e:8d:c8:32:81:f4:ba:74:
15:df:6b:98:44:a8:13:50:5b:90:ad:9a:3d:71:e5:30:01:38:
a3:2e:54:c9:fb:30:d1:55:06:5a:2a:13:ea:1f:71:6e:df:01:
be:80:85:f0:43:3f:39:a3:d9:f3:d5:6c:e0:43:e4:59:04:a5:
93:12:24:2c:39:66:23:f8:eb:97:54:01:4f:d3:50:ab:43:95:
44:ca:d3:67:44:85:21:74:24:46:1c:1d:23:2a:ea:39:9f:98:
7f:0a:29:19:9f:a8:9d:49:a1:19:eb:0d:20:10:64:f0:98:2c:
4b:bc:1d:04:98:58:fa:97:a3:0c:4f:04:d6:43:98:3d:5b:0f:
7c:b2:12:9d:29:45:ec:4f:b4:3d:29:8e:4a:02:2a:09:b1:e7:
f8:ee:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:37 2026 by rpki-client