
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json)
Hash identifier: ExZgx6kHAvYrmMk2RYr9Vt0qqG8A3SAbeKOT1LYL3HI=
Subject key identifier: 66:79:53:8E:E2:B2:F6:43:1F:D0:82:C6:DF:D2:5B:25:AC:9A:A5:04
Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
Manifest number: 0A63
Signing time: Thu 24 Sep 2026 19:36:37 +0000
Manifest this update: Thu 24 Sep 2026 19:36:37 +0000
Manifest next update: Thu 01 Oct 2026 19:36:37 +0000
Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: G9APuZf4sIN43jAjEQQx5jMTFtSeO88ztwfZuMw6s4k=)
2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 3miiShfbAVQgjfgsHWydnIy25OOtPgMw6QYye8n1zb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl
rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
Validity
Not Before: Sep 24 19:36:37 2026 GMT
Not After : Oct 1 19:36:37 2026 GMT
Subject: CN=6ab57bc5-66a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:a8:8d:e1:f8:f1:a6:dc:25:fc:d5:ec:7e:
69:c4:8e:44:a5:c8:ed:e3:1b:cc:42:47:81:17:fa:
4e:86:22:bf:e8:fa:2f:85:06:39:9e:1f:5d:35:91:
b9:f8:da:9c:b8:34:92:a6:41:e9:8f:f5:e6:b1:6a:
6e:10:d5:54:95:a9:47:ab:6c:ef:75:cc:0c:df:cb:
94:cd:7f:a0:fe:1a:c5:3b:ad:f8:9e:09:b3:5a:2a:
04:3d:e1:71:2c:b2:dc:72:af:93:99:0f:c4:15:d7:
85:70:09:a7:fd:84:c5:d4:bb:f6:1b:7f:c8:8e:18:
0a:6e:46:24:b1:3b:48:a4:2a:35:04:f2:2a:5d:c9:
a4:75:71:70:22:18:83:ee:b8:21:c4:49:a1:ce:33:
31:ac:1c:43:1d:e8:fe:5c:b0:0c:2f:fe:25:cb:25:
61:75:47:77:4e:83:68:dd:fc:25:1f:75:65:7a:0e:
13:2a:81:29:e3:df:7c:80:5a:1e:76:98:52:f0:08:
e7:f0:63:c6:49:7c:dc:4f:7c:38:3a:ce:79:42:3d:
40:ee:a5:6d:c9:b1:26:65:3c:ef:ae:10:5e:25:74:
ee:19:43:81:a0:75:9a:58:53:0c:12:0f:0a:4b:ad:
a3:b2:a6:55:c1:45:3f:69:02:ac:99:50:93:64:e9:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:53:8E:E2:B2:F6:43:1F:D0:82:C6:DF:D2:5B:25:AC:9A:A5:04
X509v3 Authority Key Identifier:
keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:ea:11:01:71:93:4a:1e:7a:bf:a7:42:a5:81:dd:30:73:
b9:6e:33:67:0f:84:a8:55:74:66:60:95:c7:71:92:12:cd:43:
34:6e:ce:14:62:71:99:d4:3e:34:20:a2:b5:e2:3a:c4:04:2c:
be:23:60:81:d4:70:43:92:68:8a:2c:f2:18:71:f3:d2:51:e4:
1b:4b:c3:53:18:6d:19:50:24:a6:35:e9:6f:eb:05:f5:3b:49:
98:d5:72:02:42:85:d4:14:92:97:06:70:93:d5:60:b8:53:04:
da:95:79:e0:dc:99:ac:45:90:f9:67:7f:dc:1c:ef:12:24:e7:
bb:90:d3:9b:c3:3a:11:cb:55:10:f0:3b:af:69:c0:4b:05:8f:
e2:60:8e:6c:0a:08:47:a5:ad:13:e0:d7:ea:a7:b9:91:56:89:
c8:c8:de:af:f3:fb:2d:2e:4d:10:49:da:05:2d:29:08:0f:4a:
03:34:ba:d4:f4:f4:ab:3a:a3:3b:f6:d9:e1:8d:f1:11:23:00:
78:cc:e0:3b:91:8e:05:17:f2:a7:9d:c1:c3:3e:c1:25:6d:e4:
10:4a:c8:b7:f3:e5:52:58:41:dd:c2:7a:7e:18:ba:90:f5:df:
bc:cd:15:f2:a4:62:71:fb:1b:a2:fc:d5:de:6d:b1:51:1c:86:
62:54:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:14:12 2026 by rpki-client