
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json)
Hash identifier: xwHmsYKIITOOXLmNKWy8Yt51ZCwSAfsmGbMU+eND22o=
Subject key identifier: 58:7D:FD:EE:1E:6C:65:44:C6:A5:BD:19:16:FE:84:F3:87:9B:E7:15
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
Manifest number: 0279
Signing time: Wed 19 Aug 2026 02:32:10 +0000
Manifest this update: Wed 19 Aug 2026 02:32:09 +0000
Manifest next update: Wed 26 Aug 2026 02:32:09 +0000
Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: 0QWntuS8spEVjLB/SVRzy2xYflfchcuo812QQW52mJc=)
2: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: YlAauxy525S9XOXs7fFMSeSVZDB92cfvJ9ujaExNVJk=)
3: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Validity
Not Before: Aug 19 02:32:09 2026 GMT
Not After : Aug 26 02:32:09 2026 GMT
Subject: CN=6a8515a9-2910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:5d:ab:e4:0c:a3:d9:e8:56:fc:a6:67:57:
0b:67:8a:8c:55:63:75:cb:51:1c:5c:6b:a6:41:9b:
49:e5:2a:fe:62:0a:fc:bc:f1:82:8f:e5:9d:f8:98:
93:f3:fa:c8:49:0d:cd:73:31:0b:53:3c:8b:5a:21:
ac:ac:bc:4c:9f:28:b0:f8:15:5d:a8:b4:da:5b:b8:
f2:a3:3c:f9:0d:c1:bc:2a:85:52:03:1b:2d:32:da:
96:47:f2:90:2f:a6:aa:16:70:b2:fe:44:e5:bd:fe:
31:26:93:e7:55:04:92:f8:dd:4f:6b:34:b5:16:9a:
3f:e3:aa:fb:8b:8b:06:63:c6:c3:f2:1f:91:d4:2e:
b5:58:36:de:a2:cb:c5:8e:db:53:c6:d3:b7:ee:1b:
66:0f:50:23:59:0b:cb:87:d8:29:ff:f9:66:06:ce:
71:75:52:e7:aa:5c:b7:86:2e:93:33:98:59:55:f8:
c5:0f:f9:6c:13:98:49:5f:bf:78:c0:b5:1e:c5:d6:
95:d4:e9:93:88:b6:a1:3f:0d:1a:86:8c:d9:a8:95:
e8:42:aa:42:7a:85:21:1b:48:04:3b:63:dd:c8:42:
3b:ac:cc:2a:8b:00:e4:ec:4a:07:e1:bb:5f:a1:4d:
68:8a:c1:b8:46:10:b0:76:75:6a:64:ad:35:42:9a:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:FD:EE:1E:6C:65:44:C6:A5:BD:19:16:FE:84:F3:87:9B:E7:15
X509v3 Authority Key Identifier:
keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:2e:e8:4f:4f:7d:8d:02:66:b7:6f:26:be:4f:9b:a1:f7:
8d:c6:b1:c2:34:7f:68:9c:3b:ac:29:50:49:b2:77:13:e1:95:
a6:8f:23:f0:4d:6a:64:87:2a:ed:ea:19:dd:ac:14:91:6e:88:
85:f3:0c:3b:7c:65:37:50:61:47:63:e9:fb:49:78:64:55:e6:
04:2a:f7:e1:ba:e0:7f:d2:df:2c:a0:0c:6e:eb:c5:a9:0d:c8:
0e:13:6f:0b:a6:98:9b:17:27:7d:c7:70:ec:66:1a:78:0c:f1:
ed:8e:c0:8f:95:a5:76:59:53:60:8b:e3:eb:4f:80:47:1c:88:
57:96:b9:61:90:ea:30:0a:dc:9b:d0:01:70:12:b3:c7:b0:c6:
db:65:c0:34:9e:74:f1:30:0e:d1:1e:24:f3:a7:45:bb:46:1a:
24:63:f9:65:52:d6:f3:44:f9:1f:26:f5:fa:d0:de:b5:a1:44:
90:3e:23:85:80:0e:b9:f7:5d:ed:38:a1:82:9c:dd:11:af:36:
68:68:26:85:02:04:03:b0:e1:68:3f:2a:98:eb:ec:78:5c:a7:
f1:f5:35:75:86:c3:d8:4e:fc:c8:1d:80:8d:1a:7c:d6:46:ed:
7d:7e:37:0c:d4:6b:2e:3b:a4:d8:63:62:bc:ac:f7:a2:5b:1b:
63:08:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:30 2026 by rpki-client