
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: 5c3gJU4qJb9MGyGgtmMfbNZDu9ilLON/Wg9MgZV5Alo=
Subject key identifier: D1:BC:41:B3:1D:27:32:22:36:01:4B:65:2F:76:0C:B4:BA:11:1E:69
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 018D
Signing time: Fri 23 Oct 2026 05:00:29 +0000
Manifest this update: Fri 23 Oct 2026 05:00:28 +0000
Manifest next update: Fri 30 Oct 2026 05:00:28 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: Aal6pXMkwzkz27O/Mro7e1K2McK7SmuI1wFtx2UCMII=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: Oct 23 05:00:28 2026 GMT
Not After : Oct 30 05:00:28 2026 GMT
Subject: CN=6adae9ed-4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:6b:ca:67:44:1e:93:0b:59:c2:a9:af:5b:
bf:3d:47:43:ad:95:84:02:08:7d:27:6c:9d:2f:2b:
d8:37:0a:dc:2b:59:cd:91:5f:f1:26:69:2f:8f:a8:
53:cc:f4:40:3c:7b:5c:ba:8a:45:9b:02:ea:13:43:
95:5f:41:d5:15:2f:a7:34:d9:6b:a2:fa:3a:a6:29:
a7:c4:f0:58:39:3e:73:39:51:e9:4f:57:1b:3d:5f:
53:e6:42:38:47:88:92:e9:5c:3b:14:9e:7a:fb:f2:
62:f4:c6:57:82:fd:ad:fb:54:cb:f1:b1:e1:82:b6:
2b:d0:21:26:d9:a1:cb:44:91:e7:62:ae:9a:4b:98:
f1:a5:d4:94:0d:63:0a:ff:88:07:73:11:13:eb:bb:
8e:90:2e:c6:37:8e:5c:5f:28:d3:3a:ca:36:cf:7c:
6c:2f:d8:40:3c:8c:c2:46:1a:54:7b:6e:aa:e2:2c:
b3:81:78:f8:b5:3e:cc:01:a9:72:87:14:18:72:d2:
9c:47:18:b8:9b:8f:2a:9b:0a:74:fd:15:d5:b4:9e:
3d:ee:c3:ad:f4:54:6f:6f:dc:7d:77:2e:2f:41:0d:
ff:f0:73:fd:ab:47:cb:b1:b1:56:e2:65:cb:47:73:
72:fd:95:c6:95:9f:49:0c:4e:52:7f:01:b4:9d:bd:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:41:B3:1D:27:32:22:36:01:4B:65:2F:76:0C:B4:BA:11:1E:69
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f7:91:40:b6:84:8a:bc:c1:64:06:a6:c3:c9:53:ae:c2:9a:
86:73:f9:12:53:53:dd:59:30:3c:4a:c7:82:74:84:ae:63:54:
73:05:81:4e:5b:97:f5:d6:30:13:6f:c6:69:5d:8c:fd:a6:2e:
b1:9c:24:86:d8:df:2f:19:91:b7:63:c0:54:a9:41:fc:e2:cd:
17:9b:04:50:de:85:ae:c6:59:02:82:a1:ed:7a:3f:c8:5a:a0:
1e:7e:75:c7:41:9d:8e:86:2d:e6:89:f2:b7:ff:0d:2d:f8:a8:
27:1e:e8:50:a4:59:1e:01:78:74:df:94:b5:23:56:3f:a9:eb:
c1:6e:a5:16:0d:59:53:98:b9:27:d9:c3:b5:ce:92:5a:8f:3b:
8e:9a:4b:2b:a5:cd:39:5b:45:ee:c5:b4:0d:9a:e4:f7:12:c1:
f8:42:4b:7b:69:5f:c1:2d:0f:96:5f:37:e9:da:fa:2c:46:4b:
de:f0:09:0d:8d:c7:a6:cd:3f:51:8c:c9:81:f0:69:1e:8c:da:
4a:32:cb:b1:9e:27:6e:60:55:36:1b:7d:ed:f5:a6:c8:8d:aa:
e2:52:fa:f0:eb:a3:46:80:b1:88:cb:1e:a3:a3:85:18:34:91:
dc:bc:ec:3b:31:76:e1:36:2c:8a:cc:00:5e:b7:39:30:4c:d7:
8d:50:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:30:02 2026 by rpki-client