
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File: cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier: c3+eMEFAUcJUJDPQWaCWGmaQ732KyLFtb0eXcNmZyho=
Subject key identifier: 74:ED:B1:A7:AB:DD:9E:32:A5:78:B5:9F:23:84:87:3B:B3:7C:8A:6C
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number: 65
Signing time: Wed 23 Sep 2026 07:52:48 +0000
Manifest this update: Wed 23 Sep 2026 07:52:48 +0000
Manifest next update: Wed 30 Sep 2026 07:52:48 +0000
Files and hashes: 1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: BeZUToC1zdwtOi30tchJ/GOJPoOd3kSOQbPBeBVsBXA=)
2: 8Tg_ZSb-Viei1OQ529_uiTOZ0aM.asa (hash: nINaH8TXBJUn7znOvUaYM7JswX00LEbegro4mFGLb3o=)
3: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: Sep 23 07:52:48 2026 GMT
Not After : Sep 30 07:52:48 2026 GMT
Subject: CN=6ab38550-7842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:3f:f1:6d:01:18:57:1e:c9:9e:dd:52:32:
5e:10:e8:b8:9c:e1:76:ca:b4:11:50:4e:00:f0:a6:
9c:40:9e:6b:56:c4:c9:d1:87:65:82:9c:cf:14:64:
8d:9d:e4:67:a0:37:91:41:70:96:b8:cf:56:d1:bb:
cc:08:f4:a1:11:87:32:c8:a1:9e:d6:d8:6c:42:53:
e2:c6:bd:d8:bc:72:a3:78:4f:42:14:8b:0a:36:a8:
c9:db:9a:da:ce:76:5b:b9:88:7e:fb:0c:52:81:95:
ae:0b:07:65:1a:bb:6b:e6:0c:ab:86:c7:f0:6c:7a:
2d:b6:b1:0c:8b:42:10:a6:31:e6:10:a9:e9:35:08:
9d:15:73:d5:cf:50:bd:46:2e:50:34:28:1c:ca:80:
7e:f9:c1:0d:e7:80:ba:32:11:f4:1c:2d:80:e6:51:
7b:82:e0:e3:a6:2f:8b:40:fb:7f:e5:f6:ec:b8:3c:
4e:c8:67:7a:3a:b6:60:b6:69:5d:37:44:a3:de:c5:
b5:07:a0:71:24:88:97:82:6e:cf:ce:ef:9b:28:ce:
fc:76:ad:1a:7a:9b:51:0c:6c:2c:fb:8b:7b:ba:84:
20:e7:8c:95:61:3a:16:e7:dd:74:ec:66:f4:74:ec:
a1:23:ac:74:ee:dd:39:75:73:56:dc:bb:c2:56:c7:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:B1:A7:AB:DD:9E:32:A5:78:B5:9F:23:84:87:3B:B3:7C:8A:6C
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bd:50:06:08:5a:7e:f2:74:5f:47:a7:9e:18:9c:88:4d:a4:
5a:19:99:d3:bb:fc:7c:dd:95:e4:5c:f4:2f:94:ba:65:32:45:
12:9f:ca:77:58:ec:21:26:c0:82:69:2f:ac:eb:75:55:0d:42:
65:66:c1:20:d5:4a:68:c3:81:20:46:8b:63:7c:9b:5e:a4:eb:
13:c4:55:14:c8:12:f2:75:0f:1a:34:35:08:74:08:3d:24:7e:
c9:1b:34:29:d1:49:b0:52:6c:e8:21:db:e2:db:63:e8:bd:54:
1b:23:1b:8c:7c:33:f4:16:e5:dd:9d:e4:6d:b5:47:ce:84:fe:
e3:ef:27:62:e6:19:38:28:4c:96:87:4f:a6:e3:a1:09:f6:56:
20:83:53:8c:b0:81:ed:67:8d:44:ac:c0:ef:dd:3f:9d:3a:26:
7b:b1:47:30:eb:dc:e6:e5:59:4c:49:5a:13:d1:ba:56:2b:28:
ee:7e:b5:16:41:25:fe:5a:af:88:0b:69:12:3c:00:fe:de:89:
46:b0:f0:89:d2:7a:73:ef:da:84:7f:2a:1e:0b:39:bb:cf:1f:
b1:d2:e1:6c:ae:56:6d:cf:95:78:a7:dd:5c:df:4f:20:76:78:
fe:58:70:c5:d8:b7:81:33:5e:bd:8d:74:5b:69:a8:46:fb:eb:
7d:ed:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:23 2026 by rpki-client