
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: h8dCZrKe6cqUCb8RGLpBrsQj+hNsMcyKh3oUIlurwSU=
Subject key identifier: 0B:31:C2:78:D5:13:F8:32:E1:AB:B0:8F:EC:FB:2F:DB:C5:C6:F4:3F
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 1016
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0FFE
Signing time: Sat 26 Sep 2026 17:32:29 +0000
Manifest this update: Sat 26 Sep 2026 17:32:29 +0000
Manifest next update: Sat 03 Oct 2026 17:32:29 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: xOpX6FD//6/p+2xWKIIyu8AT0bWI25SwGQUWH8j8da0=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: FZ9WjrL5+VtnGr4MpsQD7BeQfVLvm8j2z6Poj/AmVsA=)
3: oReYY3U_uAerOA1RBd6AfkOH-Qs.asa (hash: DmMFlOH0x9CBXu3QawMuTIKK4RotGJe3cmBZrESz284=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Sep 26 17:32:29 2026 GMT
Not After : Oct 3 17:32:29 2026 GMT
Subject: CN=6ab801ad-76fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:2b:20:30:47:be:d9:ba:24:48:0a:3a:e3:
df:2d:83:84:5a:bc:71:b6:14:10:f3:81:98:03:d7:
94:fd:13:f0:24:9d:27:cd:bc:19:49:aa:96:4e:15:
19:de:08:d0:79:16:3f:9f:68:ae:44:2f:c2:a7:75:
98:31:4d:c7:d6:84:8c:f6:4d:90:ab:4d:65:54:f4:
9a:c4:87:75:c5:1e:14:c6:5f:7b:5d:7f:68:c4:a3:
41:29:4c:53:ec:f2:87:32:aa:64:e2:71:52:f5:0f:
9c:77:b3:0d:c8:e6:1e:13:32:69:51:fc:04:ba:9b:
ff:4f:f9:ac:99:42:19:d6:5f:cb:3a:b5:d4:8e:b6:
e6:6e:dc:0b:08:7b:bc:ac:33:e9:be:ac:13:92:ba:
aa:cf:22:19:9d:e1:cd:e3:32:99:4f:80:88:f5:ab:
19:e6:cb:22:27:fc:ee:86:60:71:19:51:44:3c:29:
95:91:11:6b:e9:6e:4f:fa:57:73:95:a5:0a:e2:6e:
3e:f7:a7:47:d5:7e:61:93:09:37:e9:bd:87:96:01:
39:10:50:8f:d2:d0:c0:98:4e:c7:54:4c:18:af:91:
d1:9c:e7:c4:85:13:b7:7d:1a:75:56:8e:cf:ad:db:
f2:b4:98:a2:b6:76:06:e2:91:01:2a:ef:c9:b2:6b:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:C2:78:D5:13:F8:32:E1:AB:B0:8F:EC:FB:2F:DB:C5:C6:F4:3F
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:03:e5:69:ae:67:3c:76:d9:41:7a:7f:52:75:40:ec:2a:
71:af:44:a2:fc:04:78:71:1b:09:0d:36:44:9c:3a:6b:01:a2:
a7:71:62:98:8d:2b:e5:cf:32:a1:0d:a7:e2:9b:a3:e2:62:72:
79:5e:fc:ac:95:88:32:19:a1:10:cf:86:fc:80:e9:47:56:79:
68:98:0e:4e:c9:97:8d:15:2c:2c:dc:36:37:11:31:61:19:9c:
2e:99:d3:02:d6:7d:19:16:db:61:b5:1e:a2:12:2a:bc:a5:c0:
d3:41:2c:58:25:5b:59:8a:f3:cb:09:ad:92:84:aa:3a:fa:97:
a4:27:c0:b7:51:23:1d:e4:bc:49:e3:c1:06:25:46:ac:9f:5a:
45:d2:a4:0d:7a:93:6c:5b:e1:3d:56:f1:b2:49:8c:14:7a:0d:
aa:ec:9c:69:72:ca:37:ce:38:2d:6c:0f:2d:55:c5:d0:b9:60:
6f:5a:ba:6e:f3:ea:20:5b:77:73:f2:10:59:ef:80:a7:ba:8f:
45:4f:62:22:9b:43:80:a3:b0:90:ef:5f:f5:36:92:75:1e:25:
59:a2:f0:bf:df:0c:ca:2f:1d:2e:c5:cf:cc:05:43:84:c7:28:
a8:dd:0f:00:7a:b6:7d:c9:e4:8a:52:04:18:f9:f0:2c:77:67:
6f:3c:c8:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC
QTA4RDA5MTUwHhcNMjYwOTI2MTczMjI5WhcNMjYxMDAzMTczMjI5WjAYMRYwFAYD
VQQDEw02YWI4MDFhZC03NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxcrIDBHvtm6JEgKOuPfLYOEWrxxthQQ84GYA9eU/RPwJJ0nzbwZSaqWThUZ
3gjQeRY/n2iuRC/Cp3WYMU3H1oSM9k2Qq01lVPSaxId1xR4Uxl97XX9oxKNBKUxT
7PKHMqpk4nFS9Q+cd7MNyOYeEzJpUfwEupv/T/msmUIZ1l/LOrXUjrbmbtwLCHu8
rDPpvqwTkrqqzyIZneHN4zKZT4CI9asZ5ssiJ/zuhmBxGVFEPCmVkRFr6W5P+ldz
laUK4m4+96dH1X5hkwk36b2HlgE5EFCP0tDAmE7HVEwYr5HRnOfEhRO3fRp1Vo7P
rdvytJiitnYG4pEBKu/JsmvV2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsxwnjV
E/gy4auwj+z7L9vFxvQ/MB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz
NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3
dHN6QXNnOFlhQW02Q05DUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeesD5WmuZzx22UF6f1J1QOwqca9EovwEeHEbCQ02RJw6awGip3FimI0r5c8y
oQ2n4puj4mJyeV78rJWIMhmhEM+G/IDpR1Z5aJgOTsmXjRUsLNw2NxExYRmcLpnT
AtZ9GRbbYbUeohIqvKXA00EsWCVbWYrzywmtkoSqOvqXpCfAt1EjHeS8SePBBiVG
rJ9aRdKkDXqTbFvhPVbxskmMFHoNquycaXLKN844LWwPLVXF0Llgb1q6bvPqIFt3
c/IQWe+Ap7qPRU9iIptDgKOwkO9f9TaSdR4lWaLwv98Myi8dLsXPzAVDhMcoqN0P
AHq2fcnkilIEGPnwLHdnbzzIZw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:59:25 2026 by rpki-client