
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier: XYFd7yq29m8DURgTd74RyCtTEvBxAZ8Q82gT7OUsxYM=
Subject key identifier: 6C:30:82:17:37:A1:DA:50:27:AE:5E:4D:A3:C0:CA:18:11:50:7C:4D
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number: 25
Signing time: Mon 25 May 2026 08:51:47 +0000
Manifest this update: Mon 25 May 2026 08:51:47 +0000
Manifest next update: Mon 01 Jun 2026 08:51:47 +0000
Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: 92BX3THNEi+mzg6q+VfIXy7K2fepVKFlpO/umosui1E=)
2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 01 Jun 2026 08:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Validity
Not Before: May 25 08:51:47 2026 GMT
Not After : Jun 1 08:51:47 2026 GMT
Subject: CN=6a140da3-2fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:7d:75:d5:92:8d:7f:6f:96:64:64:d0:5f:
b7:4b:06:c6:f5:7a:7a:fd:48:9c:7c:dc:82:bf:f7:
9f:e3:e3:2a:0e:69:69:67:f2:10:fb:ca:9b:e5:b1:
fa:d2:c9:59:d9:5d:3e:6d:0d:27:af:e4:cf:d5:8a:
8d:e4:52:51:ab:bb:ba:5c:c5:dd:4e:65:31:45:c8:
dd:0b:7a:30:77:95:6d:82:16:20:f1:c7:4b:e8:b5:
aa:3a:d7:95:1b:f7:08:b8:13:03:7c:7b:b7:51:be:
f6:45:36:8f:c2:23:28:cc:a7:66:a0:d0:c1:46:06:
1a:6e:9c:17:b5:1b:69:4f:09:a9:16:6c:c5:e8:90:
da:45:f4:03:7e:17:fa:41:c8:0c:2f:8e:b0:00:04:
bc:ed:b2:a7:7e:7c:0b:9a:d5:ae:49:e9:53:2f:71:
0e:bd:de:15:28:67:c6:67:99:7f:aa:35:a8:b7:af:
b8:f6:6b:27:89:c6:64:c4:3c:54:2c:56:ed:70:7f:
3d:2d:08:9f:9f:76:9d:dd:fa:d6:94:8a:fb:d1:14:
ba:1b:2f:80:8c:bc:80:08:8d:4a:13:32:4e:ff:2a:
8c:96:04:d8:81:c4:18:a8:84:52:2d:e9:56:59:d7:
ad:40:6a:47:c8:fc:3c:8e:67:5f:5d:be:49:a9:2d:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:82:17:37:A1:DA:50:27:AE:5E:4D:A3:C0:CA:18:11:50:7C:4D
X509v3 Authority Key Identifier:
keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:db:6b:88:84:83:29:f3:e3:ea:05:b2:e1:e3:c9:aa:58:
e0:b1:ac:3c:46:c4:8d:c3:dd:83:68:03:6d:eb:ac:31:b3:2e:
88:3c:f3:20:76:15:ac:f0:76:36:fa:dd:d4:a2:f6:67:ff:48:
09:5f:1e:d7:fa:92:9b:2e:4c:94:7b:c3:f6:c5:b0:c4:a6:51:
8e:d9:a4:5e:9d:dc:e7:6c:0d:4b:c6:0b:e1:e1:94:8a:6b:61:
a5:3b:70:8d:c1:e0:7b:7f:c3:5c:49:4f:60:ba:e1:b6:14:44:
f7:42:f2:d8:ba:4a:e1:6f:6b:15:16:c1:38:e7:e4:75:ba:29:
5d:fd:3b:ce:29:b4:7c:43:93:97:7f:d6:94:7e:67:c8:0e:60:
e0:f1:d2:e6:35:25:a3:45:d2:74:3b:12:6d:90:18:56:10:89:
1d:ed:48:9f:14:4f:76:de:ec:31:95:71:96:29:d2:d7:35:62:
85:09:f4:ad:f0:d5:7e:5b:e8:3c:f5:1e:82:79:b5:a8:64:f8:
e3:dc:99:9d:6b:59:80:03:ef:ee:cd:62:81:47:32:f6:27:c5:
0c:33:7c:a3:c6:d2:2f:91:c9:a5:a1:a9:8f:a7:2d:66:f7:bc:
26:07:78:ba:19:89:3c:b2:63:b3:ec:e1:ac:e6:01:58:b9:3d:
47:35:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 12:41:42 2026 by rpki-client