
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier: uaOTfXEbaUk9IAI+KjKSKM0ixG1nJylCSeSXDgQ0dHM=
Subject key identifier: 1B:29:1F:5D:90:90:0F:69:71:15:49:7C:A7:AC:72:08:95:B0:5D:C5
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number: 0459
Signing time: Wed 07 Oct 2026 01:57:10 +0000
Manifest this update: Wed 07 Oct 2026 01:57:10 +0000
Manifest next update: Wed 14 Oct 2026 01:57:10 +0000
Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 3s5UTYzOgTx9tVZ+ofomKpxTFSovef0UJn6tJ23HwGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Validity
Not Before: Oct 7 01:57:10 2026 GMT
Not After : Oct 14 01:57:10 2026 GMT
Subject: CN=6ac5a6f6-e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:7d:96:10:48:ff:49:51:0d:50:08:22:11:
fb:6f:e3:1a:65:a4:9b:c8:59:85:ce:34:61:d5:00:
83:dd:c5:4d:33:bf:29:13:97:b4:38:0a:e8:ec:f1:
37:dc:14:ac:b9:1b:a5:b9:02:38:75:80:35:22:d4:
57:63:0b:f5:3f:02:ad:37:32:16:84:52:be:22:99:
1f:e9:c7:12:3f:ba:d4:be:8b:e9:96:ea:8d:47:b1:
95:47:69:86:e4:23:69:49:a5:8b:14:57:e1:66:cb:
11:2d:a5:1d:29:3f:6a:fc:b1:52:9f:98:fd:e5:83:
64:62:ab:10:f8:75:5a:58:09:71:22:6d:6d:3b:6c:
d5:ca:10:26:36:f3:8c:67:04:6a:cc:4e:e8:d8:f8:
a9:64:80:66:fd:4a:54:5c:9c:e9:a3:66:cd:9d:a8:
8b:c6:0d:5e:6e:54:ab:d9:81:0c:42:71:9d:9c:46:
bf:e9:8f:86:97:cc:35:64:c7:24:0d:11:32:53:dd:
36:e8:1f:0a:16:5b:2b:88:f1:24:5c:ca:0b:e5:2e:
dc:3b:97:08:6f:45:83:fe:aa:7a:e8:85:2e:e0:e3:
be:19:c7:e2:af:08:f4:d0:74:26:5f:35:a0:28:d4:
05:97:65:5f:c4:25:26:9a:39:35:47:bc:63:2d:e0:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:1F:5D:90:90:0F:69:71:15:49:7C:A7:AC:72:08:95:B0:5D:C5
X509v3 Authority Key Identifier:
keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:b7:b5:2b:ab:40:39:04:85:7a:e9:e7:1c:58:bb:84:e8:
fd:7a:3d:2a:e1:20:f5:83:59:4d:74:1b:22:e4:ff:dc:37:91:
89:48:ed:d6:23:b6:81:15:20:13:16:d3:59:1c:a8:24:dd:e2:
86:d2:20:65:67:34:e0:82:d0:85:c8:d1:08:d1:c7:65:b2:b7:
b7:7e:7a:51:22:e0:c2:f0:74:f6:cd:83:e0:1a:63:84:13:fc:
b1:b8:43:ca:61:57:92:96:1f:c3:aa:7d:2d:4a:ac:ce:1f:c9:
f0:99:00:23:69:2d:97:3e:7b:d5:8c:c6:fb:47:04:b4:f0:65:
2c:bb:c1:2b:fd:e4:b1:20:c5:88:ab:58:12:3f:0c:63:4a:2a:
e9:d5:13:68:85:2c:ff:e0:43:b5:a0:17:90:02:49:c9:ea:6a:
b3:b7:f8:72:63:7a:83:35:bb:f3:a3:76:33:c5:13:10:db:7c:
f0:f0:17:ac:1a:c2:03:b2:0c:1d:a5:67:2a:20:5f:37:53:ee:
5c:d5:f7:ae:4b:76:d2:fc:5b:5d:28:bc:71:d6:ab:dc:f3:a2:
cb:43:7f:80:b5:48:c3:08:12:1c:b4:a7:8a:b7:87:6c:1e:c3:
f7:d6:72:ed:e2:58:1c:65:c3:04:21:c7:2f:ea:36:99:8d:82:
4a:ce:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:39:50 2026 by rpki-client