
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier: 6aqSf3EAVugWJLsGz8ikY9BTXKyAy1nYeAKrtXxusgA=
Subject key identifier: D1:AF:6B:4B:E4:B2:50:47:58:47:F6:E8:9B:F9:C0:88:52:D5:7B:E1
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number: 01AF
Signing time: Wed 25 Mar 2026 03:28:29 +0000
Manifest this update: Wed 25 Mar 2026 03:28:28 +0000
Manifest next update: Wed 01 Apr 2026 03:28:28 +0000
Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: Y8iabKjkYkzNsNF5HlUgi+w9z+rIf5DOeK3EfmWLRDY=)
2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: v93Z3iiGCscltIcNihp6kkaUNgN+Yk0QWg3tHczsLQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Validity
Not Before: Mar 25 03:28:28 2026 GMT
Not After : Apr 1 03:28:28 2026 GMT
Subject: CN=69c3565d-f10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:90:0b:0f:5f:ef:cb:81:6f:15:57:44:d8:
e5:34:d6:29:33:ac:bb:7d:08:9d:5b:22:39:3d:54:
99:31:71:ca:6d:71:cb:51:76:59:be:6e:e8:fd:31:
98:29:fb:e4:6e:eb:10:bf:08:9e:4e:48:5c:e7:be:
82:6f:7f:49:4c:95:80:a0:d1:b0:83:7b:9a:d0:b2:
0c:3e:a6:3f:d6:00:66:d3:91:56:f6:98:ca:51:6e:
39:a1:39:eb:84:4a:fe:19:f7:06:58:5b:fd:5e:16:
e6:e0:23:22:59:e9:c8:2a:bb:94:52:df:b3:8c:f2:
42:64:9a:16:45:ce:24:1c:d4:75:40:c9:b8:c8:0b:
ca:65:50:3d:0c:49:56:94:7a:c6:02:93:6c:81:1e:
1a:a8:ea:e9:39:4c:c5:d7:41:a7:e6:51:11:19:9d:
40:8f:55:a6:27:d0:0b:d5:3b:49:c5:c0:0b:b2:7f:
42:fb:81:1e:95:5e:49:e8:98:55:a6:a2:ab:e5:41:
19:b3:c3:b2:8b:c8:69:c5:7c:4b:7a:13:47:94:60:
6b:43:a0:bc:a1:87:f8:8b:bc:ae:89:50:78:5c:b0:
7c:df:87:d7:47:1b:a9:62:a9:1f:9e:ae:32:2d:04:
6b:93:44:3f:ed:28:6f:8b:a6:6d:e0:16:8f:73:ef:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:6B:4B:E4:B2:50:47:58:47:F6:E8:9B:F9:C0:88:52:D5:7B:E1
X509v3 Authority Key Identifier:
keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:6d:1f:bc:8e:e0:02:14:a3:9d:f2:e2:ad:13:c5:f5:35:
97:d7:41:54:28:79:fc:5f:7c:ad:9d:e3:87:af:fa:28:83:4c:
5c:ec:4b:f7:5e:26:ad:86:e9:e3:6c:a3:dc:4b:ba:cf:72:77:
1a:35:cb:f6:07:78:39:86:b3:4e:9d:21:ce:4b:c0:00:51:b5:
dc:4b:70:0c:17:8f:bd:4a:4b:69:49:75:a8:fb:9e:89:fc:49:
e4:30:a2:83:6a:7c:f0:ef:1f:a3:5c:bb:0b:2d:b5:7a:45:27:
0c:1e:f5:15:fc:f6:bc:68:3d:d3:59:4d:95:1c:2c:58:71:c1:
81:58:a6:90:d8:b7:ef:51:57:15:77:c7:0a:ae:26:c8:31:3d:
2b:fd:25:b0:21:1e:29:fd:86:e9:fc:1e:39:a3:5e:83:5b:f7:
dc:2d:27:69:39:53:df:8d:2f:d9:f3:5d:1c:21:4e:f2:dd:cf:
4e:33:c3:9d:c5:0e:a7:d9:b3:8d:7f:a3:95:84:a7:51:01:5e:
f7:f0:f9:0a:4a:6e:0a:ad:6c:cd:1c:29:b8:e7:e8:cd:eb:11:
98:5f:c4:dc:bf:19:d2:ce:f5:00:27:ae:35:42:de:04:36:48:
9b:39:8f:95:35:3d:b6:b7:54:6a:54:91:a7:f6:ab:81:19:f3:
c3:60:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:58 2026 by rpki-client