
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
File: CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json)
Hash identifier: uVN1F+Xsypmqwh/x4fRWBsJO6sHPNYhw9Rrip5lcN0k=
Subject key identifier: 98:5C:08:F6:D6:74:1C:3A:67:2A:81:79:97:91:4F:F7:1D:80:BE:12
Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
Manifest number: 4F
Signing time: Wed 23 Sep 2026 08:00:56 +0000
Manifest this update: Wed 23 Sep 2026 08:00:55 +0000
Manifest next update: Wed 30 Sep 2026 08:00:55 +0000
Files and hashes: 1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: G2cEdQkS+6FSF//lB2MK0E2cvsH+yj+gIX0fIMIllBE=)
2: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=)
3: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Validity
Not Before: Sep 23 08:00:55 2026 GMT
Not After : Sep 30 08:00:55 2026 GMT
Subject: CN=6ab38738-0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:86:cf:18:38:ab:0e:92:de:82:82:50:aa:
ef:12:85:e5:36:50:ea:26:85:f0:b0:09:6c:3c:33:
2e:7c:cd:08:10:ad:d3:74:00:e3:32:97:03:a9:89:
3e:28:9a:a5:04:5e:e3:7d:ac:8d:45:c5:93:6e:46:
0a:bc:00:3c:47:99:f5:1b:64:61:36:59:70:c7:9f:
b5:57:42:b7:2a:83:30:b4:84:31:08:b9:3d:e7:87:
29:2f:88:b0:a2:60:85:05:67:84:9e:84:b5:a6:18:
03:f7:75:12:da:88:b9:ae:23:67:08:f4:b1:5b:41:
bd:ca:86:f2:16:2e:94:34:67:8d:cd:5c:50:69:16:
a1:2e:84:09:08:e5:8b:f7:5c:e5:ae:7f:7c:69:e2:
35:91:6f:68:57:66:66:a6:e8:a6:1f:1a:ef:3c:4c:
9c:d0:c0:e5:8d:de:81:97:d9:c1:7e:dc:90:96:dd:
50:d2:2d:35:36:f7:d4:84:eb:e1:9c:46:63:1a:f9:
2b:52:40:14:e8:cb:f7:3b:e4:7b:bd:e2:72:2c:54:
36:9c:33:be:a2:cd:55:ef:0a:0d:bd:0f:38:8d:38:
4e:8e:df:14:a2:8a:bc:7f:f3:ec:5d:f0:b6:e1:b1:
c2:59:44:7b:87:32:1b:d5:f3:a5:73:2b:36:a5:e6:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:08:F6:D6:74:1C:3A:67:2A:81:79:97:91:4F:F7:1D:80:BE:12
X509v3 Authority Key Identifier:
keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8d:c2:79:2e:c5:aa:e0:c1:d0:39:62:c3:0b:24:48:c7:0c:
d7:63:b9:3f:5f:f7:98:a9:60:02:0d:8f:03:fb:82:e9:89:92:
46:55:29:14:8e:2f:ae:14:8b:fb:e5:27:0f:6b:4f:ed:cb:39:
23:6a:c2:64:7a:51:20:75:9f:3f:ff:9a:6b:72:95:7b:b3:1f:
7d:21:6f:6a:2e:ad:80:24:39:fe:16:d1:69:d5:3b:67:b5:4f:
5b:8d:0c:6b:8b:05:f2:aa:55:81:79:ee:4e:39:ea:e3:a2:5e:
2b:92:1a:86:40:a9:69:bc:16:8a:68:af:72:2c:47:65:15:64:
6c:ed:97:f8:ec:5f:98:ea:a4:3b:e5:b8:0b:64:21:42:ed:94:
bc:8a:a9:97:b3:da:60:bd:a5:29:80:47:09:2e:5b:5b:db:fc:
26:e7:3d:b1:e3:8b:3f:01:b3:91:a3:5d:57:cb:fb:ad:8a:6a:
88:6a:ad:03:d7:c5:2e:a1:26:e9:d0:e8:69:a2:b3:46:89:8a:
1d:1e:b4:41:4e:55:90:da:44:74:38:33:56:a0:11:b2:5f:7c:
38:fc:49:4f:20:74:50:bd:e5:01:58:b2:46:53:18:c0:0c:cb:
94:29:39:c8:2d:9b:ce:ca:7b:dd:78:8e:9e:80:e5:aa:93:b4:
dd:6b:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:29:04 2026 by rpki-client