
$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: TkEO4ZUtG6f6eFVdHwIO5YFmQzq5o8tgcA2GAU1cot8=
Subject key identifier: 79:0B:FC:00:24:4B:F0:20:D1:5D:70:84:B3:04:44:F4:A1:D1:B7:6F
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: 78
Signing time: Tue 07 Jul 2026 09:02:57 +0000
Manifest this update: Tue 07 Jul 2026 09:02:57 +0000
Manifest next update: Tue 14 Jul 2026 09:02:57 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: nKyq52EkMFSnuqr2IJBfX9uo0DKzplgyoBI+TiCqbCQ=)
2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 89NQPcLshXPkKgPq6c+ywAb5yirtq9AA9hqm/7FcBQU=)
3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Jul 7 09:02:57 2026 GMT
Not After : Jul 14 09:02:57 2026 GMT
Subject: CN=6a4cc0c1-c136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:b6:33:49:98:af:ff:eb:e2:ea:85:b2:65:
f5:5f:4b:ea:e4:5b:00:af:7e:e5:0d:41:ba:3a:49:
ed:3b:98:13:3c:66:2f:6a:1b:64:27:9d:bd:39:e2:
0c:aa:68:82:f5:05:73:3f:8f:4d:42:46:3e:48:cb:
1d:79:83:be:17:7d:65:89:a0:d1:7d:f3:4d:5b:6e:
77:a1:db:3a:83:60:24:dd:f1:f4:60:84:3b:90:b9:
85:c7:b0:9c:db:bc:c8:e1:c4:69:5a:13:8f:02:c3:
0e:c0:e5:14:d5:4c:e9:cd:fa:a4:77:54:86:ca:77:
59:30:6e:0a:76:e5:6a:fb:0f:1a:ff:51:c2:21:b4:
fa:95:94:03:3c:7a:9e:ff:d2:f4:2c:00:6f:dc:91:
0e:1c:fe:d0:a8:b9:53:8c:8e:19:2b:40:3f:33:b7:
cc:7e:5d:52:6e:74:e2:9c:b9:f9:04:07:8b:59:cc:
13:56:4e:40:60:fc:ef:52:22:be:87:e2:b1:9c:30:
e2:42:4a:f6:be:18:2d:a8:87:ca:82:1a:3c:1e:23:
53:d4:24:25:5a:98:38:7d:e7:01:43:7e:d4:81:84:
31:ff:e6:d3:1a:7a:ef:a0:01:a9:f1:24:80:d4:5d:
e7:f6:24:08:35:93:16:e7:8e:01:f4:d0:40:e7:73:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:FC:00:24:4B:F0:20:D1:5D:70:84:B3:04:44:F4:A1:D1:B7:6F
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:f7:bf:3d:cf:93:54:08:72:23:fc:ae:8c:3e:2b:57:ff:
4b:5d:1b:ac:40:b6:f2:f3:5b:ee:c1:d4:5e:b3:3e:c7:f3:f4:
ff:f8:62:7e:55:dd:67:01:84:45:5e:20:cc:7a:c0:79:60:91:
24:45:68:40:92:37:72:92:97:dd:7e:f8:89:c4:17:bf:91:11:
a1:64:6c:9c:8e:51:43:20:c2:27:08:23:e5:27:18:d8:47:d6:
53:08:82:41:22:0f:91:55:be:54:56:42:63:26:a9:1d:af:c4:
30:ab:a2:8a:88:be:91:e5:36:ec:7c:d9:96:e0:7a:43:f2:8c:
a2:67:b5:fc:74:37:6d:22:4f:fe:dd:4d:84:12:ff:08:7b:ca:
b6:3b:d8:bf:b1:ad:33:d5:6c:57:0f:25:eb:3d:c1:23:7c:da:
2c:c0:3a:2d:10:6b:bd:81:23:d3:e1:e0:c1:38:d9:cb:1d:35:
e0:a0:12:fd:0e:91:8d:6e:4c:d5:d4:80:30:37:9d:90:f6:90:
66:5b:cc:83:d8:46:24:27:76:7d:e9:a1:c5:0b:a5:90:3e:69:
04:ee:b6:05:34:a1:85:d8:e3:5c:d7:ff:c8:15:17:1c:4a:66:
a9:d9:2d:a2:2a:f6:cf:b6:3f:32:cc:ed:d8:0d:6b:8c:09:15:
25:13:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:27 2026 by rpki-client