
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: +njqKALt6nEHsOJSLP9ZHGCJW40cJbYd23nvTQqKWJk=
Subject key identifier: EE:D8:F1:8A:EF:07:EE:9B:90:FB:E5:D9:A8:11:AC:50:BD:1B:0C:85
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 016F
Signing time: Thu 04 Jun 2026 21:28:41 +0000
Manifest this update: Thu 04 Jun 2026 21:28:41 +0000
Manifest next update: Thu 11 Jun 2026 21:28:41 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: GrQcU7hLX6TiD9DLz9b1XLSAdPPPCXO93/KkDIL0Lc8=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: Jun 4 21:28:41 2026 GMT
Not After : Jun 11 21:28:41 2026 GMT
Subject: CN=6a21ee09-8244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:8d:5e:6d:aa:54:94:02:d3:23:b5:a6:60:
44:93:20:8d:45:86:80:8f:b2:f0:2e:a4:37:54:c6:
35:98:02:f7:08:4e:99:c9:f2:4f:cd:bc:6f:f9:3e:
f5:94:f9:5a:15:46:c4:b7:62:c7:29:18:22:0f:43:
a0:d8:6a:a2:57:0d:ff:0d:d3:cb:ff:0e:03:90:ef:
c7:f1:05:cd:21:d9:91:c6:f3:fb:9c:be:27:f9:06:
06:8d:30:58:d2:67:6a:f6:28:6c:c0:95:fc:0b:38:
7e:e7:37:56:2e:d9:8e:ea:49:cc:68:66:0b:b6:3f:
18:7b:cf:f1:12:76:4a:d9:2d:14:1e:15:28:a2:a1:
e8:fe:ee:b5:77:fe:90:bd:ae:49:f7:61:84:3c:df:
d1:ec:cb:13:95:c2:db:58:2a:2e:32:a3:c8:cf:ad:
89:20:f3:5e:4d:16:af:55:90:f7:6b:bb:63:ce:84:
b6:ce:59:cd:c2:60:82:0c:e9:93:2c:29:c6:c4:63:
7f:02:53:5c:9b:a9:95:19:6b:90:34:81:00:11:d1:
bd:e7:98:d7:51:ea:1b:b9:14:0e:b5:68:58:1c:5f:
7e:34:1e:2b:d9:66:3b:a8:14:ce:9a:5d:20:64:be:
ac:13:38:c1:4b:35:bd:e0:5e:01:ca:71:32:a3:a4:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:F1:8A:EF:07:EE:9B:90:FB:E5:D9:A8:11:AC:50:BD:1B:0C:85
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:fe:3e:93:23:0a:68:8c:f2:ea:9d:59:26:1f:4a:5f:b8:96:
b6:5b:b3:07:a9:e1:4f:c6:67:6a:39:54:ba:87:80:ad:6c:00:
2f:07:08:df:74:73:4d:54:5e:e1:83:a2:2e:8e:f4:a6:a6:90:
bc:d2:45:d1:f1:8c:19:69:69:04:9b:bb:bc:9a:c2:d5:6e:28:
3d:e0:6c:2a:49:22:15:7d:79:dd:05:a4:cc:34:60:b7:d4:66:
5c:54:3e:db:e4:6b:bd:53:27:d2:8e:41:f2:76:7e:a2:a9:b7:
76:e5:72:eb:14:d9:7e:68:79:78:92:63:4e:ec:ec:e7:88:6b:
77:4b:3a:05:8e:35:b9:94:6b:26:a8:b0:bf:c4:e8:1a:39:46:
b4:8c:c3:f3:3e:f3:b7:5a:7d:26:08:b8:c2:24:17:b9:ca:a2:
24:31:e0:bb:9a:a7:f8:bb:a5:ac:0d:a1:c6:a4:38:71:7c:28:
34:b4:c5:d3:92:77:2e:9b:43:b1:d7:4b:a5:3a:c7:c9:64:c8:
f5:bc:7b:9e:55:68:de:34:df:3c:0a:8c:bd:26:22:54:8e:53:
1c:25:50:f2:eb:ed:38:5f:83:15:dc:ea:70:03:f3:5a:d2:e8:
d8:4e:0e:52:54:4c:3a:6e:68:20:28:18:31:fd:78:3c:d1:ac:
fd:a8:1a:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB
NkQzOEVGMjkwHhcNMjYwNjA0MjEyODQxWhcNMjYwNjExMjEyODQxWjAYMRYwFAYD
VQQDEw02YTIxZWUwOS04MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4yNXm2qVJQC0yO1pmBEkyCNRYaAj7LwLqQ3VMY1mAL3CE6ZyfJPzbxv+T71
lPlaFUbEt2LHKRgiD0Og2GqiVw3/DdPL/w4DkO/H8QXNIdmRxvP7nL4n+QYGjTBY
0mdq9ihswJX8Czh+5zdWLtmO6knMaGYLtj8Ye8/xEnZK2S0UHhUooqHo/u61d/6Q
va5J92GEPN/R7MsTlcLbWCouMqPIz62JIPNeTRavVZD3a7tjzoS2zlnNwmCCDOmT
LCnGxGN/AlNcm6mVGWuQNIEAEdG955jXUeobuRQOtWhYHF9+NB4r2WY7qBTOml0g
ZL6sEzjBSzW94F4BynEyo6QJCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7Y8Yrv
B+6bkPvl2agRrFC9GwyFMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE
QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0
ODdOVHV1YThTSkttMDQ3eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABP4+kyMKaIzy6p1ZJh9KX7iWtluzB6nhT8ZnajlUuoeArWwALwcI33RzTVRe
4YOiLo70pqaQvNJF0fGMGWlpBJu7vJrC1W4oPeBsKkkiFX153QWkzDRgt9RmXFQ+
2+RrvVMn0o5B8nZ+oqm3duVy6xTZfmh5eJJjTuzs54hrd0s6BY41uZRrJqiwv8To
GjlGtIzD8z7zt1p9Jgi4wiQXucqiJDHgu5qn+LulrA2hxqQ4cXwoNLTF05J3LptD
sddLpTrHyWTI9bx7nlVo3jTfPAqMvSYiVI5THCVQ8uvtOF+DFdzqcAPzWtLo2E4O
UlRMOm5oICgYMf14PNGs/agaiA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:18 2026 by rpki-client