
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier: 5UGN+vzfVelMMvBBpVAb7gfFpVId5W4AwQaSggEcUEg=
Subject key identifier: C7:FD:3C:EA:D0:D5:13:05:EE:27:83:FE:41:61:42:79:2D:49:DA:8E
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number: 0110
Signing time: Sat 03 Oct 2026 06:41:36 +0000
Manifest this update: Sat 03 Oct 2026 06:41:35 +0000
Manifest next update: Sat 10 Oct 2026 06:41:35 +0000
Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: aexRtFEqZbWWT++AyvfJ6r9AXkh3SQRlhm3i1sMREA0=)
2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: HfdNS1wfsXQ4sTjOLl19fnJyOg1OOpPzzn+pHOB9tDs=)
3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 3rUSEOVje0nxOIJndSfYAE6nSv8tZDCQx4I/9OfatPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Validity
Not Before: Oct 3 06:41:35 2026 GMT
Not After : Oct 10 06:41:35 2026 GMT
Subject: CN=6ac0a3a0-2bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:a8:e2:08:c6:e7:05:60:d2:68:06:1f:25:
1b:3d:7e:b6:a7:da:95:ea:75:76:02:69:c1:86:e4:
9d:72:84:6e:7a:13:f5:7f:b0:52:91:19:4a:af:ee:
60:d4:9a:51:68:b6:84:bd:1d:2e:ff:f4:4d:4a:cd:
e2:bd:d9:f9:71:03:dd:b3:54:c2:b2:5e:69:10:25:
79:6d:fd:69:f0:fb:ae:68:16:02:a5:89:2e:ac:47:
43:de:0c:b3:21:a8:bf:b9:01:ba:59:e4:f5:06:bb:
4a:09:42:c7:29:15:58:88:76:e6:41:80:89:20:f3:
8a:32:8e:5d:f3:17:bf:db:5d:ae:f4:19:ce:d9:1c:
a5:c8:3e:82:fe:9a:f3:71:19:bd:f7:49:61:ea:25:
00:da:d0:34:af:9a:ba:31:29:24:78:5c:c5:af:28:
f0:0b:b0:e8:78:af:bd:ff:20:a1:e4:60:19:2f:be:
ea:91:a7:2c:ba:7a:a2:2a:a0:8b:7a:a0:95:75:a0:
7c:58:6c:82:a9:cc:5b:f2:24:33:73:be:7a:1f:3f:
4c:9b:06:83:d0:80:de:34:f2:50:60:56:7a:bf:6d:
27:9c:ba:e7:85:1c:14:f3:79:f6:aa:7f:1d:74:c5:
3f:19:fa:e6:bd:7b:cd:22:9a:0e:7d:41:1d:b0:1e:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:3C:EA:D0:D5:13:05:EE:27:83:FE:41:61:42:79:2D:49:DA:8E
X509v3 Authority Key Identifier:
keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:e6:99:8a:67:c5:1b:3b:8d:5a:3c:72:19:af:f1:1e:3b:
35:ea:92:d5:e1:61:39:5d:b8:84:c7:22:27:2f:33:4f:87:da:
b6:8d:21:79:aa:d8:dd:dc:33:b1:cf:98:60:6d:21:0a:ee:22:
17:eb:e8:66:40:17:b6:a6:e4:dc:ba:75:fe:20:6f:50:14:50:
91:2c:77:ec:f4:59:f6:95:55:58:c3:d2:d7:3d:40:0b:62:95:
92:e5:c2:7a:6d:cb:05:d8:d7:c1:7b:f9:02:19:20:21:d1:6a:
0c:35:49:f3:17:ff:cb:81:96:5a:1c:1c:8c:c5:28:1a:5e:23:
f8:a5:38:6a:bf:27:d9:0b:29:f2:f2:df:f4:ef:7d:f2:c3:d6:
3b:4f:14:79:68:4f:e8:07:3f:50:56:90:87:c5:44:42:43:e3:
c2:aa:04:ac:45:ee:05:0f:12:ef:ae:73:84:2e:81:5e:21:73:
00:32:84:0a:9f:80:bd:e6:ad:c8:57:62:3d:ac:ad:f1:b7:e8:
c8:fc:04:ca:0b:46:dc:2f:8b:f5:c3:94:45:fa:f2:7b:fa:36:
e6:e4:96:5a:fd:e7:69:40:89:99:ed:44:3d:b4:a9:c9:2d:46:
a1:d0:36:16:c1:0c:f0:fa:53:9c:8e:0d:36:2e:83:be:59:a2:
72:66:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:13 2026 by rpki-client