
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: a5EgiO7PT2NjzOhv6ZG2PTXO34cyu9P8cB0F7Drh4Zg=
Subject key identifier: DC:61:B1:5E:63:92:75:D3:84:91:0F:4C:35:53:F0:B3:FD:3F:7B:98
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: A5
Signing time: Wed 23 Sep 2026 07:06:42 +0000
Manifest this update: Wed 23 Sep 2026 07:06:42 +0000
Manifest next update: Wed 30 Sep 2026 07:06:42 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: iCgO83IwzvU0TaDxSIvZKWjIM4iycS8xaDaDK5SaHzA=)
2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: m293MzTEWZiAF5PWcB1uJIBFUz6Ip96TCnY4Lfwrt54=)
3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: dBp1q9iBhNYg20l9RVe8ZORxX8RfsfInEVB0fEU3OIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Sep 23 07:06:42 2026 GMT
Not After : Sep 30 07:06:42 2026 GMT
Subject: CN=6ab37a82-a2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:76:7f:63:2d:3f:98:95:22:b2:27:21:5b:
9f:8d:46:95:a1:9e:ab:43:5c:f9:eb:8b:f8:4d:e8:
c6:07:ee:12:30:21:23:58:63:c5:4f:45:76:be:51:
1b:81:f6:77:b9:ce:c6:38:8c:4d:c5:3e:40:e8:b4:
9c:a3:f7:93:46:e5:f2:68:b9:28:1e:a8:1a:9a:96:
20:9c:03:b2:6b:c8:96:6f:52:57:23:f1:c8:dc:1f:
ee:21:ec:96:fa:c9:0e:2a:9a:91:cc:51:e6:a1:fc:
25:9d:fe:7c:aa:43:62:58:67:3d:4d:57:f6:69:08:
c2:7c:09:bd:6e:2e:89:cc:13:d7:30:2d:e6:46:86:
06:29:7e:b3:35:a1:48:3e:59:45:3c:d3:a4:fb:e8:
05:22:cc:b4:c1:35:68:ba:be:9e:ea:0d:96:19:ea:
de:4a:86:96:7a:97:cd:90:54:2e:52:fe:79:aa:22:
55:d2:f3:40:46:39:60:b2:d4:85:2a:37:a9:1e:18:
8a:82:b1:89:d9:b1:4d:62:f7:0a:d4:1d:0f:18:18:
fb:42:dc:fd:1b:c8:b1:08:62:aa:77:c4:84:8f:c1:
7d:3e:14:99:ea:f1:33:3a:8d:45:8b:b7:45:e7:ba:
53:d2:e0:c3:74:86:28:e9:f7:29:e6:79:40:15:b9:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:B1:5E:63:92:75:D3:84:91:0F:4C:35:53:F0:B3:FD:3F:7B:98
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9f:c9:f6:08:90:68:5e:c6:79:9b:d1:61:28:31:69:23:7f:
dc:ec:d1:af:86:04:ab:c7:89:d9:95:3b:2f:26:99:6b:78:70:
0d:ff:4a:49:73:7c:49:f7:92:a3:92:a1:68:22:f6:1f:3e:7b:
04:a4:64:ce:f3:99:99:ac:c8:6e:67:8b:3e:31:46:55:c5:04:
6e:2e:dd:06:8b:7d:f0:15:13:fb:fb:e4:ab:97:d1:87:0e:95:
64:a2:fd:aa:11:ea:9d:72:34:ef:72:60:50:7b:2a:03:24:df:
23:8b:12:af:90:ba:7b:be:91:3a:28:1a:9c:48:4e:46:f3:9d:
b8:7a:e4:ba:f3:86:75:7e:75:de:b7:1e:1b:6f:9f:e9:6d:ea:
7a:57:f0:1f:60:a7:a0:87:d6:3b:90:c4:87:05:09:8b:1b:f2:
a8:e4:5b:2f:d4:ba:5a:a3:62:1c:85:9b:f3:6a:fe:46:16:35:
74:24:81:1f:4c:37:4e:2d:5d:cf:ed:ec:e8:fa:b3:1a:d8:c8:
0f:2d:d3:53:0f:da:0a:6f:89:6d:32:30:6d:fd:9a:44:b8:d1:
1c:67:fd:3d:b2:3f:ed:0f:5e:48:f6:00:fe:3f:7a:fa:fc:8b:
21:89:a7:54:04:b6:ed:5a:a4:cb:fb:0e:ce:c0:87:79:e4:fe:
16:59:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:55 2026 by rpki-client