
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier: VmQcKIpXmlNPRliEVpXOZioF/a+NZ+zauL9UVmj1Of8=
Subject key identifier: 26:38:18:7D:CC:7F:FE:C6:F4:9F:F1:35:42:0B:7D:33:39:2C:21:10
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number: B3
Signing time: Sun 05 Apr 2026 06:27:54 +0000
Manifest this update: Sun 05 Apr 2026 06:27:53 +0000
Manifest next update: Sun 12 Apr 2026 06:27:53 +0000
Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: Zw6aZSQuRUKToLU1gnxQnmNbnpJT1Q9Pjld76V2kyzs=)
2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: Tf+58DskyuKcNrsQ4r3ooxgX47hlH0wcibKiamYc6IA=)
3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: v7HNEpVU0ZSJ+pYu3658FLrBTtMxCHM73asvlQOtkZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Validity
Not Before: Apr 5 06:27:53 2026 GMT
Not After : Apr 12 06:27:53 2026 GMT
Subject: CN=69d200ea-283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:63:62:78:8b:b8:b5:07:ac:0a:b6:20:59:29:
b0:ae:82:53:73:4f:47:af:ae:38:6c:8f:db:98:34:
bf:de:c2:a0:9c:f5:5a:0f:76:7b:59:1e:ad:71:76:
9d:2a:d7:f3:2b:c4:21:ee:39:a1:74:7f:d3:e0:53:
5d:25:6b:1a:2b:ce:d2:9b:8c:f3:01:a3:f7:6a:8e:
bb:79:97:d3:9e:01:b7:b5:ac:ce:cf:b4:27:5d:64:
20:e6:27:b1:dd:14:66:09:df:fb:e9:f4:06:9c:3e:
ed:25:73:b8:48:61:67:60:2f:03:57:d6:c4:52:ac:
c1:16:16:6d:dd:68:c0:6c:57:49:24:96:d2:42:ec:
29:7c:85:6d:d0:12:23:9d:37:db:10:ee:d5:e6:f0:
59:ce:fa:a7:09:b8:78:da:c5:75:5c:7e:89:fa:69:
d2:95:e0:2b:9a:7d:0d:ba:18:15:b9:a5:a8:c5:0b:
4c:20:58:e4:8c:36:63:10:01:54:e2:0d:0a:ca:7d:
dd:e3:ca:ce:89:5a:c3:8f:1f:1d:9e:d8:84:71:d7:
18:47:02:8e:3e:4f:ee:6d:d0:8f:87:b1:10:df:5f:
3b:e9:a1:9e:9e:c4:7e:0e:24:78:ca:98:4d:80:8c:
75:1b:8f:db:99:7a:ef:3b:1f:88:96:be:5a:08:c3:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:18:7D:CC:7F:FE:C6:F4:9F:F1:35:42:0B:7D:33:39:2C:21:10
X509v3 Authority Key Identifier:
keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:e3:73:bc:6e:03:fa:6f:65:f3:3c:ac:f3:5d:70:30:b4:
0d:46:31:f9:42:74:9d:56:01:e8:32:f3:af:15:5f:6a:89:48:
b8:ca:f5:7d:80:ea:0a:57:df:7d:b9:3c:09:97:9a:4c:0b:f8:
70:5b:3b:a3:68:33:0e:c7:0c:0b:c6:e6:38:ff:0d:40:75:a6:
16:59:51:73:c4:93:94:7a:4e:d2:d4:aa:a8:12:d3:ed:f6:de:
ee:f0:06:7a:b5:6a:bb:10:fa:71:49:93:3b:03:b7:3e:03:e9:
d1:1d:3e:85:fd:57:51:67:52:a4:2f:8a:32:b3:99:ba:a4:c8:
ae:43:ac:58:48:fe:e2:77:37:93:f3:11:2e:14:a4:ff:ef:44:
9f:66:36:f9:0a:23:88:04:ca:22:9b:03:c2:89:6e:96:92:a1:
ec:3d:61:76:7d:0b:c7:d8:12:68:16:1a:f4:87:b4:a9:f2:02:
96:47:87:4c:c9:a9:5e:30:36:89:70:1b:c4:e6:0d:14:1e:a5:
f6:cd:62:e9:59:9e:04:24:75:62:10:2c:0d:50:88:b2:4e:85:
68:18:47:89:3b:29:2a:0c:69:2e:3e:ff:f5:22:1b:30:82:9b:
ce:8d:bc:31:e1:73:82:d5:c3:ba:b5:74:c0:93:a3:08:02:0e:
82:04:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:19 2026 by rpki-client