
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier: RCxSJ+xJKDFKZ7TNdpbsVmfFouNQNqpsO5AOJRl4U7A=
Subject key identifier: D6:D7:5E:BF:06:74:03:24:1A:DD:BD:D4:6B:07:6A:E3:31:7E:CC:AA
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number: 01FB
Signing time: Wed 19 Aug 2026 03:57:26 +0000
Manifest this update: Wed 19 Aug 2026 03:57:26 +0000
Manifest next update: Wed 26 Aug 2026 03:57:26 +0000
Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: Vn/VO/o+2O4RIi1tapWVyRkIZU/yMEdS+aiIPob5E8A=)
2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: 8SqapDtzV8gP+3KIVS1rPzQhCDf8h1pmDU5PztyzjBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Validity
Not Before: Aug 19 03:57:26 2026 GMT
Not After : Aug 26 03:57:26 2026 GMT
Subject: CN=6a8529a6-1fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:dc:03:8c:5e:37:5d:05:c6:18:52:9c:22:
13:17:95:71:d6:19:13:03:9e:76:5b:22:ab:68:55:
62:f3:b3:79:84:cf:3b:34:65:b0:cd:1e:38:da:d1:
37:ea:a4:b9:9b:6d:02:a3:e1:c3:bd:1b:6a:9b:da:
e1:f1:70:f8:f1:11:59:7a:1f:47:4a:65:3f:27:77:
dc:8b:d1:72:6d:b7:a9:a9:12:bd:34:d6:b6:33:42:
85:a1:12:ae:0d:7d:34:9f:7f:2d:e2:03:ed:1a:c4:
20:3f:96:bf:20:cd:ec:9e:ea:e3:78:04:47:27:bc:
6a:79:ad:9d:e8:73:3b:3d:ed:0a:a2:d1:41:bb:94:
46:8e:43:3a:db:e0:30:fd:08:0d:09:b0:15:8c:ab:
4a:85:0e:9f:e8:c0:8b:00:a3:bd:e5:cf:e4:ff:0e:
df:90:96:eb:29:5a:c6:66:56:5c:f4:e4:c9:c6:fd:
10:07:13:70:41:0f:9b:9c:15:14:dd:80:6a:45:68:
e2:c0:bd:28:10:26:ae:04:52:05:31:d3:42:fc:f3:
02:2a:87:f6:7f:dd:04:af:df:8e:5f:d5:a5:38:3e:
3c:c3:98:b7:ce:51:01:e0:e1:9e:a7:ae:55:77:b9:
97:cd:3f:b0:cf:aa:cc:32:89:df:ec:fb:cd:6f:fc:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:5E:BF:06:74:03:24:1A:DD:BD:D4:6B:07:6A:E3:31:7E:CC:AA
X509v3 Authority Key Identifier:
keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:59:55:6b:10:69:ea:fa:cf:f6:71:7f:27:39:8c:3c:1e:45:
f6:77:72:a1:06:cd:33:ed:33:1f:3c:17:1a:ed:78:0f:b6:77:
79:fa:8b:80:bf:50:f2:f9:b2:0b:08:2d:bb:02:a6:6a:c2:b3:
02:3d:6d:7d:44:6c:78:ca:ba:89:a9:96:76:36:2c:e6:b6:2a:
5f:5c:06:dd:5e:2f:df:52:3f:5b:5f:12:04:0a:aa:fd:e9:1d:
5e:68:74:35:58:55:5c:fa:1f:54:83:30:fa:3e:4b:14:11:55:
c1:f3:93:a8:8f:b4:3d:71:db:ad:b0:f6:41:d4:3e:be:6d:fd:
75:42:05:b4:be:ed:c6:9c:48:d1:97:3b:c3:84:4d:ce:74:34:
37:34:c3:b9:d6:25:18:1d:9d:97:84:9e:54:cf:b3:e7:86:07:
6c:a8:f8:72:92:6d:be:ea:3f:d7:3f:53:1c:ce:6f:e5:97:d1:
5a:ef:d6:57:88:fd:d4:65:0b:01:6d:42:d0:30:57:c7:b2:b4:
72:a9:b2:f4:d2:b8:9d:e7:2b:50:39:03:97:2a:a9:cd:71:63:
05:5a:ab:d2:a3:b4:29:cb:a9:c3:b9:f1:64:89:80:12:2f:69:
d2:0e:66:93:3f:c1:0e:04:a5:88:01:c6:a1:98:6c:a9:8a:f8:
de:ac:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:21 2026 by rpki-client