
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier: be4L/YNMpmGp82GDj12oM7kGdL0t6NSsrKNin4VdobE=
Subject key identifier: 22:72:07:89:37:ED:6E:0E:02:26:45:F6:BE:2C:61:BF:2F:8B:80:07
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0FD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number: 0D23
Signing time: Thu 12 Mar 2026 19:27:21 +0000
Manifest this update: Thu 12 Mar 2026 19:27:21 +0000
Manifest next update: Thu 19 Mar 2026 19:27:21 +0000
Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: AolSlKs8nSf9sCZ3oNEg8ihi3VDSUyosgO+1UaEwIB8=)
2: 6D1E0F52164611F18E5E8FE3403D8C67.roa (hash: SdghGsO45UVeFs83FzT3PUZs2hdTzewnnMKqHn55Y+E=)
3: 2121534C17A511F1B9E8592C333D8C67.roa (hash: dhqCSr1DdAHa0EbtGAyXfKCtuFl/Cu5sz94VuTBpU30=)
4: F85564DA127711F18BE24F01353D8C67.roa (hash: hCAu6pcHWUIMyWaWGyNp3NtigxEvvU3L+2b0LrIvarc=)
5: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: TEd4/aWDB1KLW6JK30VIuFWcMe+qda12gGy9MUlfqhE=)
6: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
7: CB1C9052127611F1A98F9398343D8C67.roa (hash: S7ABZJUx+P6tHVs60+ta8zguoVa/9/cwSl1M2y/NVaA=)
8: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
9: 2029B38A17A511F1B9E8592C333D8C67.roa (hash: 6OZZZbl8whE/Bttlvno5EhuNJ6DOVYs+DUuo9kFHzHE=)
10: 0774AB26097511F1BFBC3642103D8C67.roa (hash: Aewou+j/I/E3ARjZtdKQ5JAHFFxtZ4k5ufs9vW55FfY=)
11: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
12: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
13: 237CE7561D4411F1A90872121D3D8C67.roa (hash: rmCWk4bZ87JqR3ZKHH3q+v2F4yseBMj3hUE3girQZS8=)
14: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
15: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: vOc2GN7BlG8x5tEhIxLgdZI4bPOuE3Gwg9XoqF77HhU=)
16: 4293FC541D4111F1A6DCED961B3D8C67.roa (hash: S8ABWozGMREyqBjfaZEiVtg7ucv4wNVjuxX/Eia8iC4=)
17: 0599644A1D4311F18B0A19501C3D8C67.roa (hash: TlBAKIB7tP+s06xAm5HYRC6HMPs8oqMK9Uk4IzVxY/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 19:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4057 (0xfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Mar 12 19:27:21 2026 GMT
Not After : Mar 19 19:27:21 2026 GMT
Subject: CN=69b31399-e8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:2c:de:35:e9:7e:9d:35:7e:7a:0f:fa:0e:
e5:69:ce:ac:31:81:b0:bc:ae:9e:9b:28:66:6c:57:
18:54:06:4f:b0:13:00:7c:aa:5f:45:aa:65:4b:e1:
fd:24:c9:7e:22:db:74:bf:09:d4:e8:d2:bf:1e:13:
1c:5c:60:24:48:29:63:17:98:e3:3b:7c:fb:7c:bf:
30:30:63:54:d9:66:ef:37:d5:44:8d:cc:b9:71:5e:
36:53:bc:fb:ff:98:47:b8:5b:77:b4:c2:b6:29:77:
64:bd:d1:99:71:78:00:5f:71:5d:f2:d4:a7:9e:3b:
4e:01:fd:4f:77:80:78:94:6b:4b:c5:c8:b4:e1:0d:
35:6f:0b:e9:2b:72:9a:8d:fc:9d:51:ba:6f:74:a9:
de:3a:90:65:f9:f7:36:7f:0d:d8:f4:d8:35:4b:16:
d0:a5:1a:a0:00:cc:fb:c0:0c:d8:e9:a9:84:70:b0:
ea:fc:99:95:01:57:af:a4:46:22:d7:5c:62:32:3b:
1d:63:21:d5:95:a6:e2:fc:aa:e8:b8:8f:91:de:b2:
e7:bb:50:4f:c7:23:fc:d1:fb:eb:f7:62:eb:89:4b:
9f:36:e7:99:6b:d1:76:72:72:8b:cf:aa:ec:bc:31:
82:53:56:f2:09:d7:69:d9:25:ca:bb:db:dd:dc:ec:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:07:89:37:ED:6E:0E:02:26:45:F6:BE:2C:61:BF:2F:8B:80:07
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:de:80:c0:db:7a:41:23:56:19:77:63:22:28:75:ea:18:
be:8b:ad:83:89:f7:27:8f:3a:2c:6a:9e:c3:94:d4:73:fc:34:
9e:8b:81:b1:c7:65:ce:aa:1f:fe:f4:a3:df:e7:ac:6a:79:f2:
7c:e0:09:e1:e0:dc:dc:00:76:7b:d8:da:fb:3a:61:82:72:ff:
d2:18:cd:92:78:00:51:7e:1e:1b:f0:8a:9c:93:4d:2d:56:9c:
40:21:9d:0b:c4:da:0d:a3:0a:e3:62:de:c7:43:50:6f:23:cc:
88:a8:23:fc:15:33:e5:3d:67:7e:fd:28:f2:60:40:4b:db:4d:
28:8e:da:78:51:f2:5c:0d:ee:4d:8d:21:a5:6b:d2:82:90:21:
f4:36:a4:6e:20:e9:b0:19:21:c2:10:66:e0:c1:fe:5e:79:e7:
17:4b:1d:96:fa:ea:18:a7:82:a5:7f:22:72:d7:78:ba:f3:fb:
49:dc:e7:eb:d4:6f:b5:ca:6b:7a:7a:a8:12:6e:2d:5f:d5:8a:
d3:96:1c:9a:be:6f:57:6d:52:74:85:45:4a:72:a6:44:ff:17:
fc:eb:b6:b5:92:58:21:8e:02:ee:d3:f7:8f:d8:e4:c0:85:65:
b0:a3:c4:75:52:74:b1:66:46:ad:1e:bd:8c:08:12:0e:bf:68:
4f:c3:2d:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwMzEyMTkyNzIxWhcNMjYwMzE5MTkyNzIxWjAYMRYwFAYD
VQQDEw02OWIzMTM5OS1lOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubAs3jXpfp01fnoP+g7lac6sMYGwvK6emyhmbFcYVAZPsBMAfKpfRaplS+H9
JMl+Itt0vwnU6NK/HhMcXGAkSCljF5jjO3z7fL8wMGNU2WbvN9VEjcy5cV42U7z7
/5hHuFt3tMK2KXdkvdGZcXgAX3Fd8tSnnjtOAf1Pd4B4lGtLxci04Q01bwvpK3Ka
jfydUbpvdKneOpBl+fc2fw3Y9Ng1SxbQpRqgAMz7wAzY6amEcLDq/JmVAVevpEYi
11xiMjsdYyHVlabi/KrouI+R3rLnu1BPxyP80fvr92LriUufNueZa9F2cnKLz6rs
vDGCU1byCddp2SXKu9vd3OzqEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJyB4k3
7W4OAiZF9r4sYb8vi4AHMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5
YVJqanA1LS1DQ1BHY3k0bVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT7jegMDbekEjVhl3YyIodeoYvoutg4n3J486LGqew5TUc/w0nouBscdlzqof
/vSj3+esannyfOAJ4eDc3AB2e9ja+zphgnL/0hjNkngAUX4eG/CKnJNNLVacQCGd
C8TaDaMK42Lex0NQbyPMiKgj/BUz5T1nfv0o8mBAS9tNKI7aeFHyXA3uTY0hpWvS
gpAh9DakbiDpsBkhwhBm4MH+XnnnF0sdlvrqGKeCpX8ictd4uvP7Sdzn69Rvtcpr
enqoEm4tX9WK05Ycmr5vV21SdIVFSnKmRP8X/Ou2tZJYIY4C7tP3j9jkwIVlsKPE
dVJ0sWZGrR69jAgSDr9oT8MtbQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:32 2026 by rpki-client