
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier: Ul514zVeuUUEoDE+U2oBmsNnC4stfaeRdPrQvzlDN3Q=
Subject key identifier: F6:4F:C5:FE:AD:64:90:8C:32:A5:A1:17:5D:E9:43:0A:75:60:A4:6A
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial: 1398
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number: 4942
Signing time: Tue 22 Sep 2026 14:21:19 +0000
Manifest this update: Tue 22 Sep 2026 14:21:18 +0000
Manifest next update: Tue 29 Sep 2026 14:21:18 +0000
Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: a5/TOnA18xkuIvvQeFA7RnkNR97SZmpQ3kpabSHw8Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5016 (0x1398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Validity
Not Before: Sep 22 14:21:18 2026 GMT
Not After : Sep 29 14:21:18 2026 GMT
Subject: CN=6ab28edf-0f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:3c:73:85:63:06:7b:0c:fe:df:ad:30:52:
af:99:0f:9a:1a:6a:89:e0:a3:fe:1d:ca:03:a5:dd:
e7:60:8c:14:2c:5b:9b:b3:c6:3d:17:cd:1b:c5:6f:
8c:17:41:73:f8:76:74:10:e2:80:9a:50:8b:dd:ae:
78:a2:b6:19:38:3f:93:27:da:13:6a:d1:96:ad:29:
0f:d3:bd:75:f9:52:79:33:96:64:9d:9a:dd:3f:0d:
d1:ef:6c:b8:bf:1b:95:bb:6b:75:66:5c:ba:02:ae:
4b:1e:00:7d:bf:09:af:fa:d5:26:dc:35:1b:d4:b9:
05:bf:bf:a1:03:af:e8:15:ac:ba:53:d9:fb:29:a3:
30:f5:74:19:ec:d0:06:8e:89:2d:9f:a9:dc:2e:f2:
1d:26:e6:c2:42:9a:19:e7:e6:0c:8a:39:1d:d9:6f:
0d:2f:ac:de:38:c0:01:f3:b9:51:d0:31:08:d8:ae:
02:66:30:e8:a4:f4:89:78:8e:85:82:78:3d:c2:b0:
79:c6:9c:9f:f3:5d:32:70:ea:e5:95:ce:54:46:61:
b3:53:1e:46:6a:51:cb:ce:9e:98:7f:17:04:f5:ac:
55:cc:02:a2:91:fe:96:e4:da:5e:f0:f5:24:11:58:
9f:de:d0:c7:3e:55:d9:1c:b0:48:72:3d:24:e4:5b:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:C5:FE:AD:64:90:8C:32:A5:A1:17:5D:E9:43:0A:75:60:A4:6A
X509v3 Authority Key Identifier:
keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:99:aa:da:e5:fc:ee:29:9e:37:0b:aa:1f:76:ef:48:48:
74:33:5b:de:0d:ba:03:db:45:e3:f2:61:f2:4b:1e:96:cd:70:
4b:47:06:0c:f3:ae:ce:8b:e2:70:67:c1:1d:c7:03:7f:8b:a6:
64:90:d9:26:44:2f:c2:e6:34:26:3e:45:31:a7:5a:0c:79:e8:
23:62:75:b8:0a:13:22:68:42:8b:28:88:6e:42:da:65:2e:bc:
e1:b7:4d:1c:e6:d1:50:3e:61:4b:e9:8c:d8:b5:2a:c1:e7:b7:
6e:e1:77:36:a3:99:6c:d4:12:a4:2b:c4:f9:ae:c3:6b:56:67:
97:5c:67:34:39:a4:30:a8:21:8c:cd:b7:3c:eb:d4:69:b3:9d:
76:d6:94:18:cf:4d:30:96:41:15:ec:89:9b:e4:16:c4:98:5b:
92:f2:1e:20:5f:4e:49:1a:28:b3:0b:ec:ad:a6:22:05:17:4e:
3d:7f:90:cb:7e:44:01:ae:4e:b9:32:1c:84:a4:68:99:22:77:
34:a5:f8:67:b2:bf:09:3c:0e:ac:1a:f6:1c:19:38:bc:90:69:
60:3c:62:8f:b5:84:fa:9b:1a:76:d5:65:35:50:fa:b1:06:fb:
2c:ec:aa:36:e5:26:e0:47:b8:ff:2f:92:54:89:eb:74:33:71:
5e:9c:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:33:42 2026 by rpki-client