
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier: 5ojt/ee3OprBAJ+sBvPojAYWUd8DAPXjmvGHlUlDhCs=
Subject key identifier: 31:9C:86:76:79:8C:66:6A:B4:1E:3A:C6:11:D1:8C:89:D4:5B:28:E6
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial: 0421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number: 0415
Signing time: Wed 19 Aug 2026 00:42:26 +0000
Manifest this update: Wed 19 Aug 2026 00:42:26 +0000
Manifest next update: Wed 26 Aug 2026 00:42:26 +0000
Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: YRzjczFBqxK7e3C2Ke6HLEiL2osuihX0IQJL1mneVnQ=)
2: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
3: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Validity
Not Before: Aug 19 00:42:26 2026 GMT
Not After : Aug 26 00:42:26 2026 GMT
Subject: CN=6a84fbf2-0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:9b:2b:41:6c:87:1a:f7:95:4a:51:2a:98:
0d:2a:b2:7a:74:77:98:16:b5:68:22:8f:d8:d7:9e:
19:7d:c2:2c:8e:e0:8c:36:47:e9:ba:a7:10:f5:25:
32:81:4c:a2:21:5c:84:43:82:ad:9e:7a:4d:be:c4:
1f:df:b0:80:ce:96:d6:a0:2b:e3:a2:54:63:fd:3b:
f0:5c:a4:70:d3:2c:ea:a6:9b:69:86:1d:d5:df:1f:
02:c1:7b:69:9f:1f:b2:28:b1:a9:13:c6:e1:e3:fa:
6a:f0:89:1b:d6:58:95:19:d1:cf:13:6a:67:f5:d4:
23:76:ac:4c:98:76:89:17:31:ae:d2:4b:b7:49:83:
78:66:3c:b0:e0:ac:b9:11:a7:67:9d:b3:0c:0f:d1:
b5:f2:a2:77:82:32:70:42:f8:51:99:b1:44:2e:4b:
8f:a3:a1:6b:d2:03:d3:f5:e6:b3:47:b8:ff:4b:62:
81:8f:b7:57:a8:eb:87:88:3a:32:f3:3c:51:55:ab:
a5:59:74:99:8a:00:16:ac:53:44:19:7b:75:f3:f3:
25:ab:17:80:28:ae:12:3b:f6:75:61:14:e9:51:43:
09:4b:fa:d7:12:77:71:ed:69:40:d4:dd:78:fc:25:
30:c9:a5:84:bf:c8:93:3c:d6:6d:93:db:9f:5d:99:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:86:76:79:8C:66:6A:B4:1E:3A:C6:11:D1:8C:89:D4:5B:28:E6
X509v3 Authority Key Identifier:
keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:ff:56:10:4c:03:7e:1f:de:e0:31:e6:c8:0e:7f:ff:c9:
da:f0:90:a1:83:f0:24:89:01:80:00:65:98:40:1d:a8:8e:3a:
ea:bf:5e:5a:f7:11:6f:fd:63:7b:c0:4d:b0:9f:d8:ee:d2:df:
97:66:15:0f:b7:a0:c4:ce:b4:dc:d3:46:4f:90:8c:46:19:b3:
31:3b:ba:c5:bf:9f:2a:83:29:3d:05:7a:e3:f5:4f:60:be:79:
73:e3:de:24:8b:7e:0b:a1:f5:cf:10:f4:2c:b2:bd:ec:cc:3c:
c6:1c:a4:1f:50:5d:1f:1c:6e:78:38:7f:a8:e7:6d:91:7e:54:
37:2a:6d:a7:c0:e8:f7:d0:df:7a:27:fb:84:2f:cc:df:17:92:
5e:96:bc:42:7d:5e:49:e9:f9:b9:ea:3b:3b:f5:e7:f0:c9:8c:
d1:48:65:aa:2b:39:44:7b:da:4a:0a:9d:94:17:db:81:a3:c8:
5a:88:c6:9d:55:f3:84:18:fc:6b:5a:11:b2:b7:d4:2b:4e:82:
1b:94:ea:7e:af:36:3e:6d:0e:93:ad:3f:a9:f0:a4:f8:c8:d0:
d6:9f:f9:af:cb:68:4a:a4:27:83:58:a6:00:43:eb:5a:c7:f6:
47:fb:04:50:60:a7:80:f4:ae:0d:1c:d8:20:ca:9e:13:6e:bd:
a6:fb:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:50 2026 by rpki-client