
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: dVVjyn5hyZqwey4rvGjNSPq48/+lFQnrMHIvX4eDfIs=
Subject key identifier: C5:D8:89:5F:72:EE:63:0F:34:84:D4:8D:44:8A:29:14:1A:14:87:89
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 01FF
Signing time: Sat 05 Sep 2026 03:06:32 +0000
Manifest this update: Sat 05 Sep 2026 03:06:31 +0000
Manifest next update: Sat 12 Sep 2026 03:06:31 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: +/J5LCWp7nc1fyzr8C9/MWOrjvkCUGRnUHxrkJc/G/w=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Sep 5 03:06:31 2026 GMT
Not After : Sep 12 03:06:31 2026 GMT
Subject: CN=6a9b8738-933b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:69:4f:10:1a:7a:26:bb:be:4f:ac:d7:f6:
f4:90:8c:8e:0a:ca:e4:80:49:63:86:1d:9e:25:2c:
f2:a0:4c:c3:b9:b1:7b:8d:4c:8a:1c:06:8d:91:79:
e5:4a:81:e4:e3:51:4e:b9:59:36:22:c7:0d:6a:f2:
2b:11:8c:74:4b:20:2a:b7:8e:fc:d6:0e:2e:0d:98:
ba:2e:cc:fd:71:0b:f3:dd:37:69:4f:7a:68:06:20:
92:b5:78:93:0f:db:ac:e8:53:26:b2:18:ab:e7:03:
79:f2:20:8c:dd:2c:44:cd:3a:55:d3:bb:20:69:76:
8c:d8:26:93:17:aa:d5:dd:f8:1a:df:34:e1:f2:c0:
35:7b:a1:b4:65:4a:b1:d5:f3:b7:e4:02:1d:11:69:
cb:f0:86:ff:5b:46:93:9c:47:9d:aa:14:d8:4b:d8:
cf:2c:dd:0d:ed:54:05:09:69:f1:63:57:ed:ec:2d:
49:0c:ba:34:08:55:06:4e:2a:88:12:98:01:17:75:
2e:95:cf:e0:50:00:03:ed:e6:42:8a:20:06:a4:55:
d0:d7:6c:62:05:6f:4b:01:2c:a5:67:37:c7:e0:ef:
66:b0:6d:f4:7e:b5:42:ee:18:8d:0e:9e:ce:c9:bf:
5b:de:6f:3b:78:32:e0:31:6f:b6:9f:b5:72:3d:e6:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:89:5F:72:EE:63:0F:34:84:D4:8D:44:8A:29:14:1A:14:87:89
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:3b:f0:42:82:a0:d2:e4:5e:2d:be:3d:af:68:c3:8b:88:
7e:dc:c5:d0:8b:be:cf:35:d2:88:62:bc:23:68:3d:92:c5:19:
2a:d6:85:5e:ad:35:21:05:04:dd:90:49:47:6f:76:6f:c1:d6:
f2:11:06:f9:21:2c:66:50:d4:20:17:5a:03:09:f0:e6:c1:5a:
15:2c:71:3b:d1:6e:10:2a:7e:ad:a4:97:24:b9:32:7b:dc:38:
1a:6d:1a:52:92:56:77:82:e7:19:a7:6d:49:3c:49:35:43:d3:
95:39:1e:fa:71:11:e9:81:92:aa:87:cf:88:5d:65:d9:b0:1a:
82:34:b1:c4:17:23:29:96:12:bf:ca:df:a7:1b:28:61:1f:d8:
54:a9:bb:9c:21:4e:83:5a:d2:67:94:e0:b3:ee:0c:c3:6b:fa:
dc:c9:58:9d:24:7a:73:1f:ae:14:3a:86:14:85:1a:3a:71:5c:
ab:12:42:30:2e:67:49:d8:20:1d:54:61:73:05:ed:26:bb:fc:
a9:7d:e6:27:35:ae:b4:6c:43:c1:23:ff:28:b0:02:d8:b7:b3:
95:07:ed:26:ae:54:92:05:15:d2:cd:c3:1e:9a:30:67:6a:41:
be:34:c7:e2:f5:7f:5a:68:df:d9:66:fa:f8:0d:f6:d0:1e:75:
f9:7c:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:19:38 2026 by rpki-client