
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json)
Hash identifier: Bfh66EHn2GbAc80IgFydHZv1GeSYq0SwJo344xMb7Ew=
Subject key identifier: F0:C7:4C:8A:02:C7:71:44:43:83:10:3E:A6:98:69:7C:5F:DA:66:8D
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
Manifest number: 0245
Signing time: Wed 13 May 2026 02:31:50 +0000
Manifest this update: Wed 13 May 2026 02:31:50 +0000
Manifest next update: Wed 20 May 2026 02:31:50 +0000
Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: KsWRNKHzMlxg0jWqy2q2bwEU7Mv8+8d6gypX9tY7XC8=)
2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: oP7yfPUopKTY379R1+NbnqkO2F627ZT0pvcHFpcrXM4=)
3: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: fxREVBfLQ0OUrc4Pzc878YVu0ctHMKvERrQEBHifNvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Validity
Not Before: May 13 02:31:50 2026 GMT
Not After : May 20 02:31:50 2026 GMT
Subject: CN=6a03e296-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:ab:ff:a7:3d:19:a0:ff:30:07:56:e7:9b:
a5:4d:d2:d7:46:23:d7:52:f8:80:22:85:40:7e:7c:
05:72:84:40:27:4c:ac:24:ee:33:6e:cb:2d:ed:df:
c7:d2:92:32:e3:91:d3:68:0e:86:4d:76:09:3e:7d:
e4:ff:a5:84:a5:0c:2b:06:92:b0:18:a3:12:b1:91:
15:37:a6:9a:d7:73:73:02:e7:67:25:94:09:89:e5:
9d:52:b6:d4:41:ee:80:f1:01:73:66:30:2d:b6:19:
8a:15:82:cc:92:a7:4d:78:f0:59:22:ae:5b:7e:d5:
82:c4:c0:20:fb:83:38:16:a2:00:b9:d2:e8:e1:33:
28:d3:a3:9d:dc:28:8e:b0:23:d7:7a:58:d3:ac:50:
67:52:ca:60:fa:bc:18:f2:cd:eb:3c:37:69:8a:bc:
38:30:86:65:9f:8f:dc:e5:d2:0a:18:24:5a:11:0d:
1d:ae:95:e7:71:77:23:fb:7d:44:de:f9:00:ed:04:
b9:98:86:47:f5:76:ee:d7:45:60:55:34:6e:1d:40:
7f:37:94:f3:8c:2e:ab:86:5b:8c:9b:2f:0b:2e:ba:
2a:b6:16:36:d3:82:a0:9f:07:cb:e2:37:fe:3a:7e:
63:3c:66:07:62:f3:10:6a:0b:ce:7d:74:6d:c7:2f:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:4C:8A:02:C7:71:44:43:83:10:3E:A6:98:69:7C:5F:DA:66:8D
X509v3 Authority Key Identifier:
keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:00:71:69:62:3e:32:3b:c0:3a:16:03:0d:38:86:3f:14:34:
fb:bf:71:08:20:47:4a:fd:6d:3b:b7:87:25:e3:8a:26:13:db:
f4:ae:75:28:38:73:b3:9c:e8:b8:a2:39:35:78:0c:af:22:38:
67:ad:a6:1e:62:c4:77:02:ff:c9:65:21:83:c8:7d:29:05:83:
fb:2c:0f:11:2b:26:c8:63:df:8c:d5:2d:0c:85:19:10:05:1e:
9f:c8:ce:22:bf:55:17:82:3c:f8:65:76:25:60:3a:ab:4a:52:
7c:11:14:e2:2e:c6:6a:07:04:05:9a:e5:15:ce:54:c4:40:2e:
0f:3d:c2:80:dc:d4:23:2e:7c:3e:5d:18:68:37:66:06:ee:2b:
f4:38:51:02:9c:e8:fa:dd:e8:03:09:90:70:4b:be:21:16:02:
43:7f:70:12:b0:da:1b:29:73:79:e0:68:99:6d:c2:2b:8e:53:
dc:f2:43:b5:a3:aa:49:3b:38:b9:64:04:8d:db:c1:78:62:fb:
00:55:34:8e:6c:f3:db:9d:f2:af:25:fa:3f:e5:99:15:6a:ca:
ef:f4:15:e6:39:b4:6c:1c:3a:b5:0f:f9:7d:13:9b:0e:e9:87:
12:15:26:31:16:e9:2c:7b:69:c9:4a:a9:15:c0:9e:71:58:ab:
0d:44:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:52 2026 by rpki-client