
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json)
Hash identifier: R2zIA+fKACWlMF5QX+W66IstA29BfMD1ow9hmzEnOpQ=
Subject key identifier: DC:62:DA:B9:92:1D:EA:89:16:B9:CC:D2:EB:E1:E8:49:EE:A3:8B:FE
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial: 0D98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
Manifest number: 0D8F
Signing time: Tue 22 Sep 2026 17:49:56 +0000
Manifest this update: Tue 22 Sep 2026 17:49:55 +0000
Manifest next update: Tue 29 Sep 2026 17:49:55 +0000
Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: 4qgaRCy6Uv7mkxjwe+WgpA0++nvPYkLpA5UrLQ9D5i8=)
2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3480 (0xd98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Validity
Not Before: Sep 22 17:49:55 2026 GMT
Not After : Sep 29 17:49:55 2026 GMT
Subject: CN=6ab2bfc4-1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:51:18:0a:9a:71:4e:e2:d2:20:f6:cd:2b:
8f:70:df:09:39:1d:ac:fe:5b:1e:a9:0e:39:15:2f:
da:17:04:ec:7d:09:79:8d:be:f4:50:9c:71:fb:e6:
0c:0a:97:22:83:c5:f5:96:e4:f4:64:76:16:00:19:
57:03:f1:4c:d1:d2:72:2d:45:95:e7:93:17:16:3e:
e9:fe:95:21:f0:41:92:42:81:4f:95:35:0c:a4:cb:
82:86:1a:00:56:ab:2a:d7:35:50:65:55:0f:b6:c8:
7f:f3:11:d8:b9:74:bd:26:dd:4e:ca:ea:3a:c8:b5:
fb:f2:b8:20:b4:95:61:cf:f2:fe:87:8f:bf:70:fb:
28:55:3c:11:7d:b5:94:ab:d1:43:10:59:e9:93:db:
ab:2e:e0:5c:13:42:f7:33:cc:07:e1:85:84:0d:a2:
96:4a:4f:dd:d4:54:53:9f:5f:1d:e4:a7:e2:e1:2a:
d5:60:e4:34:8c:eb:ad:e7:92:1f:83:ee:ff:5d:42:
4c:3c:0a:db:e3:07:70:1d:df:de:58:5e:8a:c7:4c:
ea:19:ea:f1:3d:fe:9b:14:28:70:d2:7c:d7:f5:77:
3c:71:00:7c:af:46:9e:61:15:22:97:3f:42:90:56:
f2:20:fb:c0:38:14:2f:5a:87:e9:2a:ac:ab:e3:0a:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:62:DA:B9:92:1D:EA:89:16:B9:CC:D2:EB:E1:E8:49:EE:A3:8B:FE
X509v3 Authority Key Identifier:
keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:64:5a:4d:c5:3e:5f:a7:7c:c7:0a:9c:f7:41:08:e5:b5:6a:
4a:fa:ad:84:68:87:15:78:33:c8:2e:05:fb:1d:e2:1e:7a:ee:
39:f4:ad:69:c4:54:63:5c:24:8a:a4:40:02:07:df:94:b7:44:
bc:46:fa:1d:b0:29:73:82:f7:0e:05:7e:24:ad:0a:7a:42:a7:
cd:07:8f:0f:d0:35:09:78:a4:2f:f4:7e:02:eb:db:16:a5:13:
32:22:a7:0a:09:32:f1:67:39:82:dd:97:3f:e2:6a:97:9d:42:
06:f9:57:12:30:9f:22:05:e9:4b:97:d2:46:ad:64:ea:0c:9d:
87:9c:82:fd:10:f3:de:39:46:c1:70:10:07:93:2c:58:38:9e:
14:f6:b1:d9:75:a3:67:d5:7b:a1:3c:7f:0a:ee:c1:68:77:f5:
24:09:56:8b:2a:16:4a:26:42:43:b9:13:a8:a2:3c:d6:14:6d:
61:46:3a:06:75:f2:46:4b:c0:de:fd:4a:17:5d:8a:fe:db:7e:
a0:7f:39:27:5a:63:0f:90:b4:e7:b0:99:f0:5c:f7:22:4a:01:
a5:1f:38:e7:3a:f9:a7:7f:c3:c3:90:66:f3:9e:fa:ce:66:24:
31:cf:6a:d8:aa:a8:cf:34:92:bd:84:e8:60:d3:7d:e4:3f:25:
fa:b8:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:37 2026 by rpki-client