
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier: cy2bmCkILDgKDKsSfvHN0V9DuTk7v7ssvf0IE35agE0=
Subject key identifier: 75:D2:80:78:2D:DC:10:10:75:7F:A1:9C:9F:5E:22:A7:A8:F7:23:5F
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number: 71
Signing time: Mon 19 Oct 2026 08:37:42 +0000
Manifest this update: Mon 19 Oct 2026 08:37:42 +0000
Manifest next update: Mon 26 Oct 2026 08:37:42 +0000
Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: KYJqJZMMfAqaCs+XAXqtytOMK24/yjiC3mLu3ko9VaE=)
2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Validity
Not Before: Oct 19 08:37:42 2026 GMT
Not After : Oct 26 08:37:42 2026 GMT
Subject: CN=6ad5d6d6-c20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:a0:f0:4e:94:02:45:bc:f8:1d:ab:80:63:
67:12:40:bb:e6:c2:cf:d3:46:6a:c5:16:7f:af:20:
0c:01:11:ed:c7:ea:ae:a5:1c:9f:8b:49:80:0a:4c:
64:99:6a:9a:fb:de:45:6b:b2:8f:59:bf:99:04:95:
28:1b:05:95:08:9d:2d:fd:f8:c5:15:52:91:c7:5f:
7f:99:a5:95:ca:04:53:97:c0:31:29:4b:ae:99:6b:
93:3e:3b:30:ce:33:a9:9c:71:ed:60:d0:9d:09:d8:
b0:e7:92:78:a8:9d:3d:3d:d9:f1:e6:86:21:29:e9:
c1:22:06:9e:f0:f3:38:14:78:63:5b:52:08:5c:b5:
ab:9e:92:f5:56:a7:6c:1e:27:84:b0:ac:c5:05:75:
c8:d9:04:51:35:a6:f7:9e:4c:e5:7a:cf:2e:dc:60:
c4:62:c8:c2:53:ba:85:30:89:65:90:ed:39:41:17:
62:ec:03:73:a9:ee:9f:b2:c2:64:e9:07:3a:5a:4e:
f4:6c:c7:62:0e:a0:2b:11:fe:4a:18:50:d4:f7:50:
72:0d:97:04:b3:33:8f:50:4e:d3:9c:0d:3d:fa:05:
f0:61:c9:c8:b5:8e:c1:3e:20:7a:66:4a:6b:7f:ea:
40:01:f3:6b:f6:c0:4f:32:82:bc:d3:c5:7e:ba:12:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:80:78:2D:DC:10:10:75:7F:A1:9C:9F:5E:22:A7:A8:F7:23:5F
X509v3 Authority Key Identifier:
keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:28:eb:0f:9e:35:06:40:e9:99:3c:3f:67:a4:7f:2e:26:
62:31:ba:2d:ad:a6:4b:59:fd:5c:7d:43:19:f1:98:fe:28:02:
71:6b:48:18:23:85:37:5f:aa:df:a0:fa:3d:ca:f9:f2:e9:35:
ae:0f:f4:a7:9d:61:4a:8b:71:6a:22:8b:0a:15:d1:28:a9:7c:
4e:71:cc:7f:ba:46:02:ef:f3:13:b6:bf:d9:47:21:bd:8c:f1:
ac:84:d1:4f:67:3a:69:57:dc:84:6d:10:0a:59:90:d0:cc:b2:
27:ab:d2:de:45:55:5a:81:5d:10:a2:98:35:0f:77:b2:34:55:
b1:95:89:cb:9b:5d:83:74:4f:49:4f:d6:75:18:60:e9:59:ba:
6f:2b:6e:eb:86:45:0c:ea:d0:fb:5f:65:34:58:9f:66:ee:3a:
63:7b:8b:25:9d:c3:6d:09:09:d0:d5:19:5f:4a:ab:f9:3b:15:
5c:9c:29:ef:83:0d:7f:19:d6:e8:e6:ce:31:aa:37:32:ef:cb:
73:9a:26:cc:60:7a:f4:0d:0d:13:4f:1c:1f:91:14:bc:64:f4:
6d:26:04:73:93:d8:71:ae:9f:fe:2f:33:bf:1c:cc:19:0b:97:
f3:b1:83:6b:b0:eb:e3:60:53:65:6e:18:4f:81:3e:59:14:ee:
e9:36:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:41:13 2026 by rpki-client