
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: W+jqN/XiXvaWDXX3Io5KQuKrWy85PoVxKCD9EeJApVo=
Subject key identifier: 4E:34:A2:3E:41:F9:26:8B:C7:A6:93:56:5A:40:7A:73:1E:F1:20:90
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0B71
Signing time: Wed 30 Sep 2026 19:25:26 +0000
Manifest this update: Wed 30 Sep 2026 19:25:25 +0000
Manifest next update: Wed 07 Oct 2026 19:25:25 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: 6JXr1XEzqYo9yQOw0fLapzpF/2/vkiH8K9tLWsm4n5E=)
2: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=)
3: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 19:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Sep 30 19:25:25 2026 GMT
Not After : Oct 7 19:25:25 2026 GMT
Subject: CN=6abd6226-e4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:6f:88:24:1d:d8:57:ea:19:6b:00:4c:e1:
1e:73:e1:b5:cc:67:6e:7d:f7:3a:6d:0b:a1:ec:1f:
80:2d:6c:96:77:39:b6:1d:8c:0f:65:d7:e4:9c:ed:
bc:69:10:8b:6b:f5:2c:80:cd:0b:a2:02:c0:c5:55:
74:7a:b1:6b:22:56:58:78:80:56:c3:8b:b6:45:7c:
b0:d5:f1:5b:08:5a:97:d9:31:f7:c8:47:85:bb:6b:
42:7c:fa:87:18:fc:60:bf:4d:cd:31:1f:b5:c3:27:
2b:6f:c5:56:75:91:82:84:74:cb:7c:b9:46:13:88:
5b:d9:eb:33:b5:be:b2:6b:8e:d0:54:a8:86:a3:1b:
c1:c9:c0:8c:a1:0c:b8:43:bb:c0:12:9c:a8:c8:e6:
9c:3a:9a:3a:2e:be:28:d2:f0:ac:4e:26:d2:f5:8e:
74:19:e7:73:a6:f7:5c:d3:7a:67:0f:b8:6e:aa:63:
f2:2f:6d:80:09:2f:c7:1a:76:fe:ea:1b:e7:2f:68:
de:dd:80:b6:18:9b:8c:f1:42:e9:f9:a1:2c:0a:8b:
81:e3:c7:d6:94:a8:e8:55:9b:87:66:9f:06:25:b0:
8a:b8:6b:25:7a:10:17:15:67:6a:d2:c1:8f:d6:5a:
5e:98:a9:18:74:26:05:6e:13:ce:8b:66:9e:30:f4:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:A2:3E:41:F9:26:8B:C7:A6:93:56:5A:40:7A:73:1E:F1:20:90
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:15:a7:74:9c:7f:61:49:5b:3e:b3:91:83:d9:fb:9b:ff:30:
19:45:20:d9:fc:44:20:12:63:84:c5:e2:d0:50:4f:8f:ec:1a:
0d:57:eb:c8:42:01:83:a7:39:16:8c:58:38:ac:f5:4c:02:84:
b9:39:4c:5e:55:ac:5f:81:cf:90:07:af:d1:a6:1f:e2:27:3a:
aa:37:be:f7:be:cb:58:1f:6a:2c:40:d1:1b:eb:4e:06:1e:42:
8f:e6:d4:cd:e7:ab:7e:0e:07:12:9f:45:d4:27:25:ff:f0:94:
ed:35:a9:c7:4b:c5:8a:0a:8c:1f:d8:3a:13:11:af:1b:4d:a1:
2b:27:4f:89:05:3e:b5:a2:60:b1:79:bb:d5:55:30:35:da:78:
59:d2:1b:ca:f5:c5:0a:90:d2:c0:50:3e:1e:ac:79:37:b5:dd:
24:cd:f6:b1:aa:38:a4:e6:63:06:db:b3:f1:b3:e4:bf:19:3c:
ed:15:c1:12:5d:ce:ea:23:83:04:24:5e:bb:66:e2:31:8f:02:
7c:ae:c0:9b:ee:89:16:62:a0:23:fd:9a:00:58:ec:d3:7c:cf:
db:6f:44:90:e9:c5:cc:fc:20:f3:90:f5:0a:e9:07:02:ec:15:
8a:c0:99:34:26:e3:9c:ac:45:22:d4:d0:1b:97:26:d0:41:af:
1a:a2:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:34 2026 by rpki-client