
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier: og1F5+gc8hLO1/ChoyFQG6XLkWKDXvf5K8REIGwhwZ8=
Subject key identifier: 73:65:FF:C3:EA:68:66:0E:81:60:A2:6A:1E:3E:CF:C6:5F:8F:B2:D6
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number: 0376
Signing time: Wed 07 Oct 2026 00:57:55 +0000
Manifest this update: Wed 07 Oct 2026 00:57:54 +0000
Manifest next update: Wed 14 Oct 2026 00:57:54 +0000
Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: YEjzc5ZsvT8p+IqW+xPCm5PHh1upF7HN7ywciX/f4iQ=)
2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Validity
Not Before: Oct 7 00:57:54 2026 GMT
Not After : Oct 14 00:57:54 2026 GMT
Subject: CN=6ac59913-8a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:38:f5:e5:ae:54:27:97:d4:d6:47:a1:32:
7e:80:fb:06:54:ea:c4:66:97:30:4f:05:a7:1c:0b:
9a:e1:51:fc:88:a0:d1:c0:f9:a4:e6:60:3f:80:52:
db:17:4e:7e:e4:64:2c:21:79:f0:4c:c2:8e:63:5a:
1f:8d:81:66:73:27:78:95:a8:4e:21:86:6a:a8:f3:
8a:6f:3e:eb:55:df:ac:15:e1:a6:65:41:ca:a6:26:
ba:a7:5b:38:90:87:09:a8:83:74:55:37:96:c1:be:
c7:f9:d7:87:e3:f7:81:3f:02:68:46:6d:48:e7:1b:
c9:e3:2b:bd:13:bd:57:57:9d:b0:57:70:2f:0f:ee:
dc:0d:ac:c6:cf:96:36:ed:82:6c:4e:31:29:5c:78:
95:47:ec:0e:cd:e2:de:fc:cf:5b:a7:22:37:f7:2c:
eb:e7:57:b3:45:7f:a0:cd:73:a5:71:9a:f2:12:6d:
2e:31:f4:e7:bb:06:24:d8:04:e1:e9:ef:d2:e2:f2:
80:03:1c:4d:77:c7:7d:5b:59:32:27:80:f0:db:7e:
a3:96:c5:89:61:33:78:e7:7a:d3:c3:c3:a8:e3:45:
bf:57:66:e8:1a:9f:a3:ac:ad:40:fd:12:20:d1:bf:
13:4f:5c:b6:da:2b:68:44:ad:02:41:30:13:40:fc:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:FF:C3:EA:68:66:0E:81:60:A2:6A:1E:3E:CF:C6:5F:8F:B2:D6
X509v3 Authority Key Identifier:
keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:95:ac:0a:25:41:4a:b5:c3:04:ff:da:d1:75:fb:d6:b4:43:
33:4a:43:80:6d:de:03:6d:8b:be:e0:0d:55:55:99:73:e6:f6:
77:f9:c0:0b:45:7f:4a:af:df:6c:c5:6b:9a:3f:8e:b6:91:a3:
ca:4d:43:74:ea:83:65:fa:8d:1d:61:28:76:c7:d4:b4:41:fd:
56:f3:7e:b8:a2:c2:6f:5c:21:53:27:a2:d9:7b:6d:bd:6e:dc:
d5:77:44:8b:58:f0:04:da:5e:5d:c9:e7:e3:5d:7d:91:18:40:
c1:c3:ca:39:ed:b3:c7:61:99:34:33:f6:bb:6d:71:3f:12:4e:
e0:83:88:fb:5f:59:50:8b:65:0d:a4:1d:43:db:75:c5:8c:38:
e2:75:17:2f:28:0e:d0:00:87:ce:03:67:13:86:49:87:d6:02:
20:10:29:fe:2c:e6:f9:14:a8:60:2c:09:cd:84:a5:52:70:62:
07:27:fd:f8:14:74:aa:73:a4:de:28:bf:9b:7f:3c:85:f8:d3:
0d:ad:bd:87:83:78:9a:e6:e8:dd:fd:19:68:24:bb:00:ed:c0:
e0:ba:e1:8f:4a:03:60:44:82:23:bd:f1:08:58:97:fc:ab:df:
bc:e1:56:a0:5c:d4:0b:2b:1d:d2:12:c6:e9:c5:99:be:6a:41:
2e:8f:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:00 2026 by rpki-client