
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
File: CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft (raw, json)
Hash identifier: KxouGifklujDF0ZmQMysDcYTsyGOB76qgBD042YwYgM=
Subject key identifier: B7:72:95:F6:D4:44:D7:8B:A3:C3:DB:51:E8:C0:B5:9B:DD:8C:BF:D2
Authority key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
Certificate issuer: /CN=A91F89DB/serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
Manifest number: 39
Signing time: Sun 27 Sep 2026 09:09:21 +0000
Manifest this update: Sun 27 Sep 2026 09:09:20 +0000
Manifest next update: Sun 04 Oct 2026 09:09:20 +0000
Files and hashes: 1: CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl (hash: Q+pkfrbMPO5T5Lb2CZZsybVG8Fp8jDhZXzQHNvw5PLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl
rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Validity
Not Before: Sep 27 09:09:20 2026 GMT
Not After : Oct 4 09:09:20 2026 GMT
Subject: CN=6ab8dd40-ab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:38:46:f2:9e:d6:be:4c:f2:cc:60:97:7a:
ee:7d:19:dd:7c:8b:cb:90:12:5c:36:b1:54:62:02:
18:e6:c8:30:22:76:b2:61:cc:b0:bc:b2:53:2e:28:
b4:fe:a3:6e:f6:45:80:63:60:42:57:00:dd:11:54:
4b:b5:40:74:be:da:b7:27:7c:6e:6f:4c:1f:c0:97:
63:51:4d:33:34:99:08:5b:f9:9d:b4:36:b0:98:b7:
74:f4:bc:92:1d:d4:a2:51:54:01:0e:4d:76:49:08:
09:0e:76:13:8f:a4:0c:e0:40:85:09:0c:d6:f2:f8:
af:fc:3b:5a:39:bf:2e:98:5d:08:34:fe:29:2a:7b:
ce:21:50:e4:b3:d1:44:b3:6b:e1:f3:60:70:50:11:
9d:df:1d:ea:6b:38:d1:96:f1:6d:38:ae:dd:ba:12:
59:ae:34:7f:10:05:bc:4e:96:dd:8b:7d:b3:7e:72:
ab:ba:c4:58:67:21:42:8c:46:10:59:68:19:36:9d:
c8:81:86:bd:a8:c9:73:e4:88:14:18:0c:87:b4:67:
2a:fd:75:69:40:60:19:68:4b:6d:45:bf:5f:94:e2:
97:82:83:f6:89:e3:90:c4:a0:76:16:97:e9:61:a0:
28:aa:24:a1:3e:32:b0:60:40:66:fe:98:cf:14:00:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:95:F6:D4:44:D7:8B:A3:C3:DB:51:E8:C0:B5:9B:DD:8C:BF:D2
X509v3 Authority Key Identifier:
keyid:09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:de:dd:04:26:4a:95:1d:37:18:ea:d4:1f:f2:bf:19:a7:
c0:ca:7d:1b:ff:b2:4e:ce:37:32:68:39:39:2a:2e:83:58:2a:
bf:d4:19:83:7a:50:3d:a0:d0:27:fe:c6:de:02:97:b5:66:dd:
74:39:1c:b0:06:bb:f9:bf:27:f1:63:ae:d9:38:f1:c6:6f:2b:
82:fd:63:e5:35:4c:cd:83:2b:65:ff:11:83:26:3d:58:4e:59:
22:19:82:54:90:a7:5c:dc:10:07:5f:f9:bb:33:e8:ad:c6:1b:
22:56:2e:de:07:df:eb:94:15:d9:e9:c4:ca:f0:e8:53:7f:08:
cd:b8:9d:ab:96:b7:82:7a:09:d1:65:e2:00:d5:8f:2a:1d:6e:
8c:cd:13:60:b3:83:6e:77:a2:d1:d6:4e:d2:2f:01:ab:be:75:
99:b5:ca:da:1c:1e:7e:2d:3d:22:86:c4:28:c4:e3:da:2e:e8:
cc:7a:1a:45:4c:c5:13:b5:12:5b:09:25:19:c4:bb:59:1b:26:
99:e6:80:3d:86:ce:ba:c9:41:21:e5:c3:fc:57:14:eb:68:44:
70:17:30:be:40:c6:bf:33:b5:6e:cb:75:7e:59:81:99:4b:72:
af:c4:f5:2b:e3:51:b4:52:62:d4:70:ad:d6:52:f6:71:de:18:
a6:ad:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:30:26 2026 by rpki-client