
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: fg+2GKmO+IlIc9ZcKDGT7E4oWRp1SdIT3rVqRWbSDhA=
Subject key identifier: 2C:C8:C4:12:FC:8D:C0:B5:CF:4C:AC:2D:84:90:86:42:D2:0E:69:EF
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: BF
Signing time: Fri 13 Nov 2026 07:14:31 +0000
Manifest this update: Fri 13 Nov 2026 07:14:31 +0000
Manifest next update: Fri 20 Nov 2026 07:14:31 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: dN1ntBUdr7F1vTAs0LUZXWHnheWX5CCeHTsUEigcZf0=)
2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: m293MzTEWZiAF5PWcB1uJIBFUz6Ip96TCnY4Lfwrt54=)
3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: dBp1q9iBhNYg20l9RVe8ZORxX8RfsfInEVB0fEU3OIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 07:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Nov 13 07:14:31 2026 GMT
Not After : Nov 20 07:14:31 2026 GMT
Subject: CN=6af6b8d7-13b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:40:fe:c6:0f:b7:f8:c7:b2:d2:2d:99:e8:
5b:b1:56:cf:9d:bd:bd:c2:f5:1e:6b:9d:b9:13:5c:
7d:5b:8f:bd:0d:8e:65:e5:64:90:b3:92:5e:b0:1e:
d7:b1:c6:cd:67:d7:41:13:3a:03:45:57:26:82:86:
11:82:39:28:1a:44:d0:8c:58:c6:aa:f8:67:2d:97:
94:58:37:a0:9b:95:ae:d2:46:1a:74:cd:e6:d0:34:
6e:f4:47:4f:ac:b4:c0:e4:3d:fd:72:6e:e9:07:87:
03:be:91:da:20:de:04:24:a2:27:de:75:92:1b:4c:
08:b9:34:24:36:81:62:c8:ed:e0:4d:97:93:60:d8:
ea:b2:66:a8:a6:e4:51:c8:89:88:51:b0:b8:af:0a:
ca:db:59:90:1d:3c:9e:9c:1f:65:b4:58:43:55:cc:
a0:a7:62:05:4b:21:24:7c:f1:91:f8:75:d3:80:20:
a2:5b:65:54:b9:de:fd:79:dc:d3:3d:b7:22:61:ef:
24:00:d6:17:0a:0b:c7:85:cc:4b:f6:76:8e:d3:37:
4c:70:a3:44:ed:d8:89:76:af:ea:9a:97:c6:70:dc:
aa:e8:08:17:6c:f7:dd:1b:7d:8a:8b:91:10:86:aa:
33:f6:50:52:f6:fa:25:02:d4:b7:85:0a:a5:69:79:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:C4:12:FC:8D:C0:B5:CF:4C:AC:2D:84:90:86:42:D2:0E:69:EF
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:7d:a0:ae:17:87:af:db:bd:65:4d:fc:51:cf:44:b9:97:
55:65:d8:e8:b6:9c:cb:19:a7:af:6b:b2:72:88:33:66:9e:02:
51:d2:c2:96:8f:db:ef:d7:d5:fd:15:58:10:fa:f1:f3:7a:94:
26:f6:a8:d7:e9:23:1e:17:b6:66:4d:98:c6:62:6b:b8:20:df:
cd:34:fe:ea:06:53:12:ec:c0:2b:07:eb:a1:47:f3:a5:00:f6:
32:fa:69:16:bf:12:22:fb:21:62:aa:e0:ee:8a:b6:a2:44:d5:
85:6f:84:a1:6e:76:3d:25:65:1a:17:bb:64:3e:f5:b9:e9:4e:
4c:2c:22:8b:aa:a6:56:87:cf:db:eb:36:c1:00:60:60:66:e2:
f7:be:ee:59:c1:10:1b:89:ea:e8:cb:5e:01:73:e0:5f:ec:7a:
07:89:4a:5b:4e:6b:05:87:ac:95:a1:ae:e8:1e:e2:9f:7a:de:
67:89:2c:57:d7:3c:91:50:59:d7:74:99:5d:c8:0c:15:c2:2a:
86:f6:8a:8a:75:ab:f7:45:63:82:dc:39:d9:51:ec:92:c3:98:
2a:07:be:6c:34:68:0d:ba:ca:12:85:d1:24:1d:e9:29:88:0e:
1b:5d:f5:00:be:65:a3:35:85:e6:9d:5c:8d:54:2d:44:ad:62:
66:1b:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:38:28 2026 by rpki-client