
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: SuU6JkJl6YVEfdR9hqfbmaekdFQU7JJV2wVaLGOgf18=
Subject key identifier: FF:93:8E:80:B9:6B:E6:18:A5:49:E9:12:AE:83:15:55:8E:B2:2E:96
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 0472
Signing time: Fri 05 Jun 2026 00:13:05 +0000
Manifest this update: Fri 05 Jun 2026 00:13:05 +0000
Manifest next update: Fri 12 Jun 2026 00:13:05 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 8wav9lSuihHDgUEl+nZCXyhSXFejz9VI/1uJPznD1+A=)
2: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=)
3: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=)
4: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Jun 5 00:13:05 2026 GMT
Not After : Jun 12 00:13:05 2026 GMT
Subject: CN=6a221491-deb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:11:a4:da:b8:c8:3b:73:14:ed:71:83:68:
b4:ba:44:c5:02:0c:05:71:f8:98:88:ed:a6:b9:84:
5a:1e:b1:61:ce:25:bb:ec:24:20:4a:78:4f:9f:02:
a4:50:25:a1:b5:91:b1:78:dd:5e:2a:f8:b0:6a:4a:
17:4e:87:df:02:52:bd:84:cd:27:ef:94:4e:d8:e9:
94:bb:f4:73:72:03:6c:19:e2:ab:ef:90:a3:c4:64:
55:0b:d2:10:6f:59:40:71:2f:6c:52:3c:59:6b:93:
35:61:1b:d8:36:ad:da:47:af:fa:74:64:89:e5:6b:
94:32:53:f1:78:27:48:d3:50:3d:b5:97:c7:7d:14:
c3:54:81:3e:3f:55:36:08:46:bb:e4:9e:05:2a:1b:
26:99:e5:95:0d:6b:97:65:4e:64:64:da:94:99:ec:
2f:38:d0:17:4f:79:85:8b:e4:65:73:50:28:6d:54:
9d:1c:8d:dc:55:15:75:60:63:50:d1:47:d9:73:96:
c4:38:da:3b:75:c1:2a:46:af:33:e2:8a:67:22:65:
34:2f:98:88:2b:c5:d7:3d:27:2c:e5:e2:e0:ac:6f:
d1:9e:6d:81:69:af:17:c0:b0:99:0c:cc:16:aa:9d:
e7:fe:b5:01:2e:7b:fd:43:30:c5:77:99:79:10:49:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:8E:80:B9:6B:E6:18:A5:49:E9:12:AE:83:15:55:8E:B2:2E:96
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:64:81:75:ae:79:5e:af:c8:c2:3a:6e:eb:d6:78:ad:91:7d:
d9:76:10:4d:e1:8c:07:d1:f8:0b:94:e9:e1:35:90:1c:8c:76:
7b:7f:92:a2:c2:ab:c5:df:9a:51:c3:33:a7:91:a2:76:e9:69:
c8:9f:c4:27:16:74:6b:9a:6c:7b:eb:84:b3:ff:ae:cb:90:0b:
65:b9:62:67:3e:01:fd:23:f1:7e:f3:af:cb:d2:89:09:aa:e9:
36:cb:c6:ce:0c:d2:5d:40:15:c7:9d:1d:83:39:d3:34:12:37:
53:3a:8e:8d:d3:56:60:2c:d2:ee:f1:4f:bb:f2:75:f0:42:20:
d9:9c:9b:22:15:09:32:27:a4:0e:f1:df:13:f6:eb:ef:cd:70:
c0:33:c1:22:fe:3a:88:eb:58:f2:bf:0f:f1:2f:e5:cd:3e:35:
f3:b0:c3:70:e2:f7:26:d4:6e:dd:d7:0f:e2:e7:ad:fd:0a:ab:
d0:fa:f9:df:70:15:a6:aa:5c:be:da:fa:d2:cf:b2:ef:46:85:
b3:20:2e:28:3c:50:b6:b8:14:5f:95:a6:01:04:b0:0e:7d:c3:
34:bf:1a:ef:58:b1:34:6b:b6:a1:5d:b8:12:76:b4:6f:53:b2:
f8:41:52:b1:ee:b1:66:9a:46:6e:f0:8a:d3:fc:ed:dc:4e:01:
63:48:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:27 2026 by rpki-client