
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json)
Hash identifier: nSTM/s5ChvpzuFwxIbNBeJIJ5ZX0Y+GoeJIgs3GPTl0=
Subject key identifier: 2E:82:6E:5D:07:DD:8B:29:2E:E0:DF:7D:6F:61:7E:68:74:0E:85:64
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial: 1BB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
Manifest number: 1837
Signing time: Tue 22 Sep 2026 12:22:51 +0000
Manifest this update: Tue 22 Sep 2026 12:22:51 +0000
Manifest next update: Tue 29 Sep 2026 12:22:51 +0000
Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: Fid9ecmaJXlr8iHuoM1e5ANJre/dJWmma0bxMwktoQQ=)
2: 4E804E6C49EE11F1815E1723B9833773.roa (hash: tAF6giCOj8R+pWbIlRfpB3845GxcuiQF/V9KlJ+cJE4=)
3: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: +B/cYcsSzsw7yQo6HYp5CEsauNY3ej5R1D+A17Ni44Q=)
4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: dZG6es6tOCIPazsxJ8KTxDzO3mGqMFOCDjB+9iL/OjU=)
5: 07142A76AC2C11F18A7EA7F93811F970.roa (hash: n1lGpmqpoGVRipB3Iv36buw0YrrL9+GOXCQBPoESHsI=)
6: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: AjuChnART3ISDBvzklladAYGqLiagodKkP77AQzP1jg=)
7: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: 88karHuZHn9NVBaZGr8GAqmmBxfDq19Aww01VbIu2gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 12:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7091 (0x1bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Validity
Not Before: Sep 22 12:22:51 2026 GMT
Not After : Sep 29 12:22:51 2026 GMT
Subject: CN=6ab2731b-3afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:c0:1c:f6:e8:e4:ca:ba:d6:be:e5:09:63:
2c:bb:26:f1:11:5f:66:e9:ef:e1:d2:50:f9:39:67:
3e:9d:5b:3a:19:63:44:3b:5a:ee:e8:7a:54:7a:69:
d0:57:f5:3d:bd:8f:9d:b4:b2:6f:bc:4c:51:5a:95:
a3:e7:34:46:d2:69:57:c9:a7:fb:84:c1:5f:bb:d6:
1d:ea:75:ef:2e:1d:b6:97:8d:7b:71:6d:f5:23:8f:
38:66:de:cc:55:08:cb:f5:ff:1b:70:f8:48:ec:37:
02:84:ae:d7:48:de:5d:6f:97:fd:3e:7d:a9:d8:ce:
48:af:14:6b:b4:6b:6f:bc:13:42:da:c5:f5:2f:16:
de:8a:5e:01:f2:94:c1:99:f4:31:75:d3:fc:a7:80:
ba:03:9b:8f:c3:5b:d4:2a:c4:b6:e2:2f:1d:90:e2:
38:ce:f6:82:38:10:1a:49:5e:d3:47:57:12:bb:a5:
03:36:1c:24:1d:dd:cb:f5:8e:b3:15:ee:4a:c9:1b:
69:53:9a:4d:b6:de:d1:ab:ff:e5:94:9b:2a:87:61:
63:3e:10:21:d9:68:38:21:bc:76:d6:f7:e9:92:e1:
b2:4d:a7:29:7c:b8:ae:10:fb:85:27:81:74:90:2b:
83:e7:bf:11:e9:e9:b5:2e:69:c0:77:18:eb:10:d7:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:6E:5D:07:DD:8B:29:2E:E0:DF:7D:6F:61:7E:68:74:0E:85:64
X509v3 Authority Key Identifier:
keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:86:38:10:66:8f:73:a1:d8:e3:29:94:d3:26:9c:98:e4:85:
3f:06:8d:1f:6b:c3:89:37:a9:d0:e2:57:f0:93:21:c5:d8:ae:
fc:4c:5a:11:6e:16:e1:72:e5:4a:28:c2:c3:20:c5:f5:ba:ea:
be:50:6b:17:43:85:b1:9a:e8:8f:03:a0:26:58:e0:cd:52:41:
c2:b7:36:d4:9e:9e:5b:5d:65:21:2e:02:fd:64:4e:67:82:63:
1d:2c:0b:84:ca:32:49:d2:0f:ea:90:3e:62:ba:77:35:d5:4d:
f1:76:02:94:60:06:be:24:17:1d:56:35:ce:46:10:c5:57:d2:
a5:74:8e:3d:b0:f0:f1:a1:61:7d:65:7f:53:b0:31:44:82:f0:
c3:3b:f4:6b:12:f7:40:50:71:64:eb:2e:31:bd:46:2d:3c:b3:
57:8c:ed:ec:c1:d9:78:98:f3:0a:d2:5b:73:c1:39:7d:9b:4d:
79:09:21:45:e9:05:b3:06:38:f1:79:e4:77:37:78:3b:6c:fa:
c1:56:b2:21:73:80:2e:de:4a:c5:d3:60:92:d2:31:ca:1e:06:
8c:5b:57:ea:fd:2a:4a:24:d4:99:46:ad:70:94:3b:4f:7d:8f:
16:ca:84:0e:c2:6b:09:d1:94:47:56:cf:45:c0:29:8e:31:c3:
62:e0:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:01:05 2026 by rpki-client