
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json)
Hash identifier: dkp6HJbhE2II039X2uVagn3BXAwPOe/DBHPQc9DrLaA=
Subject key identifier: 35:B3:00:31:4E:AF:C6:AF:39:A0:31:69:29:A9:4F:7E:BE:72:20:91
Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
Manifest number: 0433
Signing time: Sat 22 Aug 2026 23:58:32 +0000
Manifest this update: Sat 22 Aug 2026 23:58:31 +0000
Manifest next update: Sat 29 Aug 2026 23:58:31 +0000
Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: ihzC+kPdajo/wTgzqSXlqOJlFj62NnBYM3SD6e1mfek=)
2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: EiXaWk8MN8PRU4m8/hbOE0IqPBgeOCBNgzztG3jvQeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Aug 2026 23:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Validity
Not Before: Aug 22 23:58:31 2026 GMT
Not After : Aug 29 23:58:31 2026 GMT
Subject: CN=6a8a37a8-6a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:98:92:ce:c8:a8:ca:d8:d0:1c:c6:fa:22:
01:43:b7:1f:db:e5:36:89:fb:be:23:27:67:ca:82:
52:06:78:e9:9f:d4:20:ec:e0:ae:f0:e7:99:58:94:
4a:ff:46:d2:c3:7c:f0:d0:b6:b4:fe:01:1f:92:3a:
12:a5:bb:71:0b:ae:ae:b4:66:01:02:61:43:5f:72:
66:1e:8d:fc:2f:76:e5:4e:e3:06:d1:9e:d3:40:11:
3c:83:df:a9:90:01:43:3d:dd:7f:62:e0:c8:fe:9f:
46:ca:2e:83:84:1a:67:2c:02:e7:4f:f5:1c:ab:17:
81:c0:8e:f4:77:03:75:79:8c:9d:94:2d:46:6a:05:
75:91:8f:a7:fc:17:7b:9d:2d:f7:76:68:bf:16:1a:
03:6c:f4:09:fd:a3:7b:a8:e1:01:3f:6d:af:c6:90:
ab:4f:d5:3f:46:d2:ca:e9:90:6f:6f:58:91:10:28:
71:df:0e:7c:c2:e3:d0:84:4c:2a:a0:68:ad:4c:99:
60:88:c1:27:09:f1:f5:0f:19:49:1f:f3:01:75:f0:
b8:6f:ac:79:37:db:a9:40:52:12:e0:af:70:99:85:
69:2b:85:33:5a:54:de:bf:20:81:92:23:70:b2:59:
b5:21:95:94:3d:40:10:d1:51:fa:a6:f0:41:a4:d7:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:00:31:4E:AF:C6:AF:39:A0:31:69:29:A9:4F:7E:BE:72:20:91
X509v3 Authority Key Identifier:
keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:22:74:6e:35:fc:e9:ff:20:ab:2e:7c:78:3a:ff:65:25:05:
b0:56:50:51:04:55:b7:c2:dc:f4:63:73:bc:7b:40:0c:c1:5e:
57:ea:f5:7b:02:0c:2c:05:2a:9a:b7:dc:2c:b6:8c:e8:09:5e:
a8:70:bd:29:46:c6:cf:1d:a5:bb:e0:c0:88:d7:36:14:90:04:
cb:67:ed:b6:ea:66:33:9c:61:9f:cf:01:a9:3c:c6:3f:f8:9d:
ab:16:70:8c:fd:bf:cf:3e:e0:35:bd:98:cf:ec:48:0a:af:61:
d0:0c:31:2a:96:ac:0e:8a:9a:c6:b5:29:f3:92:de:25:86:09:
32:02:1c:2b:41:39:00:4a:94:a4:4e:e2:f2:fd:30:52:bc:12:
b8:05:da:b3:60:1e:1d:c6:44:01:7a:0c:90:75:94:f5:37:dc:
20:3f:3a:02:0a:b0:50:14:b7:de:0f:e4:1a:92:2a:ae:36:fb:
96:eb:3b:28:46:66:3b:28:c4:76:1f:91:f3:ae:41:e5:52:1f:
c7:c1:b9:1f:a1:5e:ac:b0:4a:04:cf:28:6f:7e:e4:d3:cc:37:
38:88:88:a6:b3:ed:64:eb:08:c8:84:02:fd:6e:90:58:a2:62:
15:7e:a4:eb:cd:47:eb:75:5c:b2:a0:05:f5:93:b1:a2:d8:85:
d6:5e:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:57:29 2026 by rpki-client