
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json)
Hash identifier: gA2eK/yIHa9RlNXSCcmZtzqEhWoUYBbN0SuuMHAocLY=
Subject key identifier: 43:34:5F:05:6C:33:3A:4A:B0:36:E1:36:44:50:E1:71:3E:41:BC:CE
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
Manifest number: 88
Signing time: Thu 03 Sep 2026 07:50:24 +0000
Manifest this update: Thu 03 Sep 2026 07:50:23 +0000
Manifest next update: Thu 10 Sep 2026 07:50:23 +0000
Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: W+e0imj21fonOeEpJqn54uEoDtkUTrxNX26AMGfqUv0=)
2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=)
3: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Validity
Not Before: Sep 3 07:50:23 2026 GMT
Not After : Sep 10 07:50:23 2026 GMT
Subject: CN=6a9926c0-2a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:ff:58:46:6f:0c:d4:1d:e3:54:ae:47:a2:
e8:a2:b3:0f:fc:c8:b4:cc:ae:31:bd:b4:a4:5d:5f:
a0:52:20:52:f3:31:1d:e9:ee:b0:ef:5c:a8:f7:3e:
83:e0:ab:3b:fe:09:1b:d4:b1:9f:88:bd:27:16:22:
c0:c5:2a:17:5b:fc:77:bf:95:8e:c6:da:76:88:f0:
e9:40:d6:7b:45:ea:09:1b:5c:85:21:e0:6b:9b:00:
5f:c1:21:10:cb:fe:5b:f8:a0:ed:73:ab:89:df:23:
73:be:ca:24:8e:64:5d:f4:e3:08:50:46:02:a4:f0:
75:53:ac:08:4c:9f:d5:96:96:22:74:17:a0:7c:a5:
86:02:4d:98:86:39:84:95:08:ff:e8:42:d5:de:31:
55:32:ce:18:30:86:10:64:2b:7c:61:b9:33:42:81:
7a:c1:a0:a9:9e:86:e0:41:79:26:0d:a1:34:44:95:
81:46:00:66:fa:1e:ee:ab:33:23:2b:6e:4d:8e:f5:
bc:54:fc:51:3c:ef:f5:f4:42:f0:99:6f:9a:6d:91:
59:37:57:f5:f2:66:86:dc:62:ea:a7:0c:81:13:1e:
fd:77:b3:50:7d:6a:2b:c1:40:ae:09:aa:91:ac:67:
a0:3a:c7:b8:72:27:d6:84:54:f5:a7:02:60:b7:b8:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:5F:05:6C:33:3A:4A:B0:36:E1:36:44:50:E1:71:3E:41:BC:CE
X509v3 Authority Key Identifier:
keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c1:71:51:2b:45:d5:3a:b1:b0:f1:e2:eb:25:31:de:ea:9e:
c6:d9:81:d9:d0:fe:21:0e:3e:a2:43:6b:40:0d:5d:5a:c0:16:
67:3b:71:17:13:21:48:75:b0:5b:fa:ac:15:72:e3:6b:f9:03:
72:8e:0b:f3:ce:da:ec:df:cf:fb:fa:74:5b:02:89:35:ee:70:
96:72:3a:2a:8c:e1:8e:0a:65:0e:93:e6:4d:ac:b8:6f:cb:3d:
2b:a5:14:06:49:85:4b:00:d5:7d:a3:96:6b:eb:1b:2b:b2:16:
65:f7:55:0f:b3:4d:9e:9d:67:98:5d:d3:69:06:02:2a:3f:03:
52:4e:ac:28:ef:72:c7:2e:c8:6a:72:4b:2c:31:4d:2b:c8:b6:
4c:a7:a7:e4:fd:ce:cb:ec:38:37:d2:db:7c:7b:44:c2:c7:50:
ae:28:c1:06:23:a9:b8:74:01:4f:fb:2d:4d:0f:62:ca:84:3f:
69:03:93:96:f0:7c:9a:23:62:33:6a:9b:20:dd:71:a7:b1:f3:
7b:6d:bb:f8:84:f5:3f:20:0e:08:33:74:f8:1d:38:11:41:e2:
49:b0:18:17:53:74:c3:90:64:83:8a:bd:fc:67:cb:b0:aa:80:
56:97:9f:48:78:c5:50:d7:3f:15:b6:dc:9e:f1:58:12:49:ae:
0c:12:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:52 2026 by rpki-client