
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: BXe5ZhUDFNv8QS7D25rfTPxRlzJ57PJJrsFb/yXdVrM=
Subject key identifier: 9A:C1:47:56:07:AB:26:CF:CC:C5:9E:B0:A9:D4:3A:34:69:C2:91:56
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0B73
Signing time: Sun 04 Oct 2026 19:13:56 +0000
Manifest this update: Sun 04 Oct 2026 19:13:56 +0000
Manifest next update: Sun 11 Oct 2026 19:13:56 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: NW+TwI75+krThzT0r6U3qjbUtmPyJZ3CLGGyJsFc90A=)
2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Oct 4 19:13:56 2026 GMT
Not After : Oct 11 19:13:56 2026 GMT
Subject: CN=6ac2a574-934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:61:63:e2:f1:d4:8c:3f:f2:65:f9:80:c7:
fa:71:5b:6d:fe:00:ab:a3:f2:22:d7:65:64:d5:80:
44:5e:23:b6:37:28:5e:f5:71:41:7b:59:23:d9:eb:
25:e3:2f:96:cc:89:ed:be:dc:f2:e5:0f:c6:fc:57:
b2:50:8b:e2:fc:b2:08:34:8a:5d:2a:05:9f:58:e4:
10:18:1a:2e:3b:dc:2b:30:a0:5d:96:34:be:1f:8b:
4a:a9:40:72:d3:b4:1a:e7:f1:e4:18:f3:76:f5:14:
98:2b:c8:59:40:e9:34:73:12:0e:08:d0:32:ad:8f:
00:22:8b:eb:a6:16:5b:ae:87:aa:65:06:b3:64:1d:
5d:6b:8b:a7:28:b0:6a:10:5e:31:b6:69:ef:15:65:
84:be:7a:90:4f:0f:17:3a:d1:9e:c3:ff:e3:f1:f9:
7c:96:c7:06:6b:41:22:32:94:c2:00:33:43:63:55:
bc:66:0b:e1:f7:e1:d5:12:db:7b:7c:24:0f:31:94:
ac:36:21:f4:27:93:4e:36:0e:a5:93:6b:a3:4f:91:
ac:9e:72:2b:42:28:ea:0c:65:50:78:66:a1:a9:9f:
18:df:d3:a7:c8:ad:49:03:66:f9:5e:84:87:2e:30:
ea:df:4e:eb:12:a3:bb:6a:55:1e:9d:21:e1:48:b0:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:47:56:07:AB:26:CF:CC:C5:9E:B0:A9:D4:3A:34:69:C2:91:56
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c4:f7:55:84:09:6f:f8:70:71:db:4b:97:fc:68:f1:5c:34:
78:19:1a:91:f0:cc:8b:c9:de:87:62:a2:da:55:96:ed:4c:7f:
78:cd:f8:df:7c:03:66:4b:b6:1d:ce:f1:db:b7:b0:91:2b:3c:
3c:78:e7:e0:7b:ed:a9:d4:7d:5c:37:b4:87:d2:85:9d:71:82:
8e:2a:d7:b6:38:92:37:26:89:6c:ef:a7:2e:d3:54:41:76:26:
80:cf:29:9a:22:b1:e8:f8:3d:4a:4f:f2:f0:01:36:a2:8e:00:
13:f5:09:03:08:ae:5f:31:47:ef:3f:0b:12:b7:bf:aa:ed:10:
89:01:6b:ea:7e:dd:12:9e:6c:af:00:c6:50:d5:66:80:f8:1e:
12:46:4b:9b:e6:24:b9:e1:68:e8:19:25:94:28:30:5b:35:96:
67:e6:77:63:2b:b8:24:40:1a:be:cd:86:a4:63:b5:3f:74:e2:
10:0a:ce:aa:57:98:95:43:c1:ff:c9:1a:c8:e1:6c:24:95:62:
e5:72:9c:90:3d:f5:e9:44:1e:bb:ae:dc:61:2b:1d:69:31:29:
b3:6c:8b:08:16:37:05:79:6f:cc:d9:46:ab:c3:b9:88:07:2d:
79:6e:b8:ec:8f:75:6f:65:49:e0:b6:28:f3:08:a9:4a:20:f9:
30:50:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:52 2026 by rpki-client