
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: PSD2bBmUSAEmk0WHOkANiOgLozQOGCSTtSy2sXc0Ty8=
Subject key identifier: 17:AB:66:2F:1E:30:A5:CA:5B:DD:B1:71:5D:9E:E6:F4:87:1E:53:A0
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 020A
Signing time: Sun 27 Sep 2026 03:33:23 +0000
Manifest this update: Sun 27 Sep 2026 03:33:23 +0000
Manifest next update: Sun 04 Oct 2026 03:33:23 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: 6GmOiop5oWwTGvMDt6NOuIbDB/T/ypnNmAIBYazfy2E=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Sep 27 03:33:23 2026 GMT
Not After : Oct 4 03:33:23 2026 GMT
Subject: CN=6ab88e83-2bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:0d:71:70:8d:a4:18:3a:2d:d1:0c:5e:8a:
d7:ab:70:95:3c:cb:20:8e:c4:c3:84:42:a7:53:7a:
39:18:3a:08:18:f2:2c:ac:49:1b:b5:b7:2a:47:cf:
dd:bd:e3:9e:ea:10:95:75:93:a2:50:69:1e:b2:a3:
2c:a6:f1:05:31:b9:91:3e:b8:2d:ba:74:8a:66:ed:
55:6a:e8:b0:8f:8b:da:e8:a4:43:81:c0:72:3f:c3:
5f:30:9d:d4:7e:a6:9a:39:e1:0e:f0:5b:07:01:aa:
8c:da:25:bb:e6:8b:af:47:75:2e:27:31:df:58:f8:
00:e4:d3:b5:fd:75:66:8e:20:12:e7:f9:dd:46:42:
0d:a4:01:a3:ae:42:b1:4e:90:2b:da:17:58:0f:c9:
6a:bf:d1:08:75:e5:c6:74:7e:a2:d7:04:8c:21:20:
90:0a:f0:a9:8a:f6:a1:bf:6b:6b:04:3d:c4:d1:b9:
d1:4f:60:8a:f2:26:4f:7e:8e:4a:d2:3b:3b:4b:49:
ab:4c:dd:da:7b:69:12:61:27:0b:a2:bc:47:63:76:
c0:92:3c:46:19:ba:b8:96:38:e2:3c:76:a0:08:ab:
5f:29:22:ae:78:b9:ed:59:47:3f:88:0f:43:f8:c0:
89:ea:d8:69:d7:f3:c6:c2:40:0f:54:8c:d8:b9:da:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:66:2F:1E:30:A5:CA:5B:DD:B1:71:5D:9E:E6:F4:87:1E:53:A0
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:32:af:03:ed:af:b8:25:77:e2:41:bb:72:17:bb:d5:1f:2c:
f1:66:81:96:d6:c3:0b:7c:0d:f9:2f:cc:b4:f6:68:13:96:19:
1e:e5:c3:50:12:2c:b6:30:4b:35:69:d6:93:c4:f4:cc:1a:b1:
bd:3f:d1:81:27:d9:10:8a:51:7d:60:2d:72:5a:5c:ea:e6:52:
a8:bb:7b:72:03:a2:23:86:0a:52:db:1a:97:6f:ec:11:47:b1:
2c:3c:a4:cd:e9:f3:ba:7b:73:a2:83:98:6c:c2:5a:38:18:79:
51:30:08:61:d5:ed:87:40:2a:48:bc:a6:ba:ef:7c:10:e1:c0:
28:d9:85:44:4b:d6:94:93:e9:98:43:3a:05:fb:14:38:20:89:
09:14:ea:b1:66:a6:8b:16:70:4b:3f:87:75:88:3b:09:3e:44:
87:d1:19:ed:6c:aa:62:c5:12:aa:b9:b8:15:6e:04:4d:c3:5d:
2e:00:47:9b:e5:cb:39:81:ab:92:e5:b7:93:65:c9:5f:a9:46:
21:89:3b:91:3b:80:e4:68:c6:f8:22:f8:90:28:40:7f:c1:a2:
f1:52:eb:bc:67:dd:eb:66:9b:5f:92:79:9b:80:15:f7:c9:0d:
a3:57:49:8e:d5:cc:c2:dd:d0:de:c1:c0:36:e3:95:ef:a3:fc:
8c:dd:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:19:11 2026 by rpki-client