
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json)
Hash identifier: 1vCYbtYfdqfLqGKg+IqZeXoopkobKXJ+xwcF2SK89bM=
Subject key identifier: D9:2A:21:CC:56:EA:75:6C:6C:1D:89:C6:65:62:91:74:A9:C7:00:FE
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
Manifest number: 59
Signing time: Mon 01 Jun 2026 08:58:49 +0000
Manifest this update: Mon 01 Jun 2026 08:58:48 +0000
Manifest next update: Mon 08 Jun 2026 08:58:48 +0000
Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: Q/13Q0k/T/R4Hf8uHRVzEStpZ8QEYYiLg3aS9KEsHnc=)
2: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=)
3: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Validity
Not Before: Jun 1 08:58:48 2026 GMT
Not After : Jun 8 08:58:48 2026 GMT
Subject: CN=6a1d49c9-652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:d4:50:7a:16:f9:db:cd:e2:16:33:32:1d:
0c:e6:17:c6:ad:5e:d9:98:4b:2c:72:b6:74:42:8b:
7f:f4:6b:e4:b9:87:88:87:7d:3c:50:2c:b5:a1:fb:
3a:d0:e2:24:d0:3d:bc:35:78:55:b6:be:05:ff:19:
25:ef:c8:34:71:98:f9:70:4e:9b:cd:7c:31:56:25:
fe:48:c2:65:50:98:4b:19:c9:9a:a7:28:4f:b4:7e:
84:ef:ae:e9:21:38:9e:35:d8:44:57:f7:8a:b0:06:
36:fe:83:55:ff:dd:1b:26:0c:84:8d:ac:a6:5b:4b:
8d:f3:23:e8:ef:a6:ee:0e:28:46:53:46:98:73:e1:
d6:4c:d0:e0:3d:de:e1:7c:82:b4:10:5b:12:b9:ab:
20:3e:dd:ca:5f:f4:ec:90:6e:c4:f9:e7:7c:d5:e0:
77:0b:21:d6:35:86:8c:d0:77:71:f9:fd:87:ec:f4:
6f:86:7a:1d:2b:72:c9:cc:75:49:86:d2:46:b2:36:
f6:4f:02:4f:87:7b:ed:25:ce:76:57:65:2c:99:21:
6e:46:3e:5b:a7:3b:19:46:af:b9:bb:e3:b3:c1:5a:
74:00:00:58:3a:a5:10:15:28:3d:0a:47:93:1f:06:
5e:c3:12:c8:01:55:a2:c5:d0:c4:d4:98:7e:07:de:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:21:CC:56:EA:75:6C:6C:1D:89:C6:65:62:91:74:A9:C7:00:FE
X509v3 Authority Key Identifier:
keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:bd:db:6c:68:27:e6:8f:3d:b4:08:9e:7c:05:20:30:0f:
c3:71:13:bc:ba:c5:fc:07:49:04:f8:1f:1d:fa:b5:d4:28:8a:
e8:db:86:8d:9b:02:af:3c:c8:f0:58:33:d7:a1:ef:47:88:12:
4e:31:37:44:39:5a:29:f4:7f:99:1a:9e:f2:df:ed:14:17:68:
94:3c:e9:64:b3:27:5b:2a:54:9f:d5:aa:b2:9c:f1:27:75:35:
67:13:ea:d9:7e:2f:79:95:02:bc:1e:1c:99:71:33:22:95:e3:
3c:53:07:1b:7d:b7:24:aa:95:a6:9f:d1:a6:9f:52:67:0b:f1:
51:a0:94:e5:4b:b3:1c:e1:63:7c:0d:e6:bc:47:ac:c0:8f:c3:
0e:db:45:79:88:d2:be:e8:c8:ee:bf:8d:5d:81:cc:92:83:f6:
4f:80:e0:f0:96:f2:94:c6:4a:a0:3c:e6:99:b7:f8:0d:e5:0a:
a2:f8:10:4f:a0:cf:b8:4c:d5:d2:e2:ac:56:4a:ca:12:fa:25:
76:50:9a:38:02:c5:a2:ef:d4:e1:1d:b0:8a:61:68:da:3b:73:
c9:a8:d7:55:1b:01:68:bb:20:45:19:d8:e3:92:bb:80:60:02:
ec:76:e1:68:49:8e:34:20:5c:e3:7a:cf:74:2a:dd:c1:55:0a:
7c:ab:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:09 2026 by rpki-client