
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier: E8AbSqBz9CUruRbOIC1hgyUTTnoROt1j6oBGrO7lRpc=
Subject key identifier: 31:9F:B1:62:AC:85:86:7D:AF:74:20:F7:F0:4C:87:FE:0F:4E:80:08
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial: 03F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number: 03E7
Signing time: Thu 21 May 2026 00:35:57 +0000
Manifest this update: Thu 21 May 2026 00:35:57 +0000
Manifest next update: Thu 28 May 2026 00:35:57 +0000
Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: KTJ5vcFIZn/RxDXLZ+m5bm47tWO8fu9J3E5AifHYDxA=)
2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Validity
Not Before: May 21 00:35:57 2026 GMT
Not After : May 28 00:35:57 2026 GMT
Subject: CN=6a0e536d-eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:88:2d:3c:c8:af:f5:4b:59:da:e0:7b:69:
19:88:3f:97:72:7c:f0:87:ed:3d:ef:0a:d5:ef:6a:
8a:9e:d7:14:2a:75:c3:70:6e:60:f9:4b:92:02:83:
a9:ad:a6:42:64:93:62:49:f2:9e:08:54:4e:93:5e:
77:e9:0d:73:f8:b0:19:e0:d7:ce:52:77:f3:e0:69:
c1:54:2b:10:b5:e6:1f:92:33:4a:78:7c:d1:07:c6:
c8:4d:41:c8:66:8b:c2:4a:b3:35:e5:d0:85:c3:d0:
d0:52:35:5c:97:60:c9:e4:4a:d0:5e:d4:74:16:0c:
2b:43:af:85:49:b9:9c:35:15:7b:0f:e2:23:3a:64:
5e:06:23:fb:04:fb:bd:10:49:85:a1:c7:9d:59:a1:
18:8b:85:9e:72:81:0f:a9:1a:69:02:d5:a1:b6:5c:
bd:09:37:54:ff:bb:3a:2e:09:c6:14:06:74:be:dc:
64:29:b5:f6:ef:f9:a2:8e:5c:85:d0:0d:a9:09:6d:
3f:88:ca:45:35:0e:80:5c:80:4d:d4:8d:8d:24:c5:
19:65:7e:d9:d0:68:91:2d:61:40:de:5d:3c:3e:16:
60:09:49:ca:25:5a:c3:2a:27:89:83:8d:d5:6f:d3:
67:21:02:da:7f:f8:99:ea:13:79:86:ed:65:a0:37:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:B1:62:AC:85:86:7D:AF:74:20:F7:F0:4C:87:FE:0F:4E:80:08
X509v3 Authority Key Identifier:
keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:2c:e9:0a:68:e1:48:a3:0c:28:59:72:4a:45:ee:4a:1e:
f8:33:97:10:86:f3:41:cc:54:f7:0e:4d:45:4d:68:3b:8b:90:
15:10:32:66:4c:15:1b:b0:38:36:de:87:a2:2c:80:a8:87:90:
a2:4e:f5:74:7a:9a:66:50:33:ff:26:c4:3c:da:aa:db:b5:a7:
15:6c:d6:07:da:86:e2:c5:42:03:a5:9f:87:6f:d9:c7:3c:2e:
cf:81:f1:05:98:a3:45:c2:0a:b4:3d:bc:87:ce:f9:89:2f:df:
14:81:90:d1:73:eb:1c:b0:7f:cc:2d:bc:10:0a:a6:68:20:97:
4d:a7:21:99:ad:4e:41:0d:c3:b6:1f:15:af:ec:08:2b:35:28:
d7:cf:54:91:45:7d:6e:b5:f2:b5:26:b8:7f:2e:70:8a:d8:a8:
26:64:dd:eb:ae:22:96:e3:4a:db:ff:8e:fd:cc:ec:0c:ad:eb:
cd:63:c8:c5:aa:3d:5e:e0:b6:fd:cc:8d:33:07:14:2a:e5:59:
7b:96:50:52:d7:7f:be:24:ec:f9:54:4c:19:87:7d:d0:17:10:
c4:ee:20:f6:76:3e:52:3d:8f:8c:96:9c:78:f0:e6:7f:72:e7:
8b:54:c8:92:8f:fc:68:f5:bb:8a:88:4b:6b:98:90:1e:aa:97:
82:d3:63:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx
NjJERDBENjYwHhcNMjYwNTIxMDAzNTU3WhcNMjYwNTI4MDAzNTU3WjAYMRYwFAYD
VQQDEw02YTBlNTM2ZC1lZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TGILTzIr/VLWdrge2kZiD+Xcnzwh+097wrV72qKntcUKnXDcG5g+UuSAoOp
raZCZJNiSfKeCFROk1536Q1z+LAZ4NfOUnfz4GnBVCsQteYfkjNKeHzRB8bITUHI
ZovCSrM15dCFw9DQUjVcl2DJ5ErQXtR0FgwrQ6+FSbmcNRV7D+IjOmReBiP7BPu9
EEmFocedWaEYi4WecoEPqRppAtWhtly9CTdU/7s6LgnGFAZ0vtxkKbX27/mijlyF
0A2pCW0/iMpFNQ6AXIBN1I2NJMUZZX7Z0GiRLWFA3l08PhZgCUnKJVrDKieJg43V
b9NnIQLaf/iZ6hN5hu1loDdSJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGfsWKs
hYZ9r3Qg9/BMh/4PToAIMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2
MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0
RXdFeDE0Z3BjTDhXTGREV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAY4s6Qpo4UijDChZckpF7koe+DOXEIbzQcxU9w5NRU1oO4uQFRAyZkwVG7A4
Nt6HoiyAqIeQok71dHqaZlAz/ybEPNqq27WnFWzWB9qG4sVCA6Wfh2/Zxzwuz4Hx
BZijRcIKtD28h875iS/fFIGQ0XPrHLB/zC28EAqmaCCXTachma1OQQ3Dth8Vr+wI
KzUo189UkUV9brXytSa4fy5witioJmTd664iluNK2/+O/czsDK3rzWPIxao9XuC2
/cyNMwcUKuVZe5ZQUtd/viTs+VRMGYd90BcQxO4g9nY+Uj2PjJacePDmf3Lni1TI
ko/8aPW7iohLa5iQHqqXgtNjwA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:52:38 2026 by rpki-client