
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json)
Hash identifier: s+zKNyvbFKCGaGJgDzObFcZkL+vWjToA+tVTcZs0RKw=
Subject key identifier: 6B:96:DC:33:04:B0:5D:DF:1D:FE:4A:F8:BE:02:43:2E:CE:BD:99:3A
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
Manifest number: 0292
Signing time: Wed 07 Oct 2026 02:11:48 +0000
Manifest this update: Wed 07 Oct 2026 02:11:47 +0000
Manifest next update: Wed 14 Oct 2026 02:11:47 +0000
Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: zrYli0B4XflAauZ4HpMrEnAezFV91vgLupct/+RnWbc=)
2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=)
3: C9D1E34E3E6511F18329E1A9CD833773.roa (hash: YlAauxy525S9XOXs7fFMSeSVZDB92cfvJ9ujaExNVJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Validity
Not Before: Oct 7 02:11:47 2026 GMT
Not After : Oct 14 02:11:47 2026 GMT
Subject: CN=6ac5aa64-0b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:a1:7a:97:5f:f0:2c:52:4f:b7:11:e5:da:
fa:29:0f:ad:fc:27:53:f9:21:e3:ac:8f:ea:52:84:
49:7d:7a:9f:71:7b:fa:39:c8:cc:97:5b:00:7d:d5:
19:41:1e:9c:e8:7a:3b:91:7e:4e:44:f2:46:c6:9d:
10:98:26:45:28:14:12:2d:e9:95:65:72:c3:4c:f7:
ea:19:a0:a0:0f:62:27:f8:4c:05:f3:71:74:46:79:
3e:5d:90:10:71:a8:4e:2a:a9:2d:1f:cb:17:74:f6:
e7:47:03:13:1c:47:5a:d3:5b:8d:32:36:73:d4:d3:
77:96:69:65:5b:c4:69:cf:e7:78:1e:8b:d9:d3:52:
4e:43:87:83:33:f4:99:04:c5:56:8f:14:88:fa:eb:
b9:62:63:84:44:e0:28:f6:3a:74:0d:ca:fe:7f:4e:
cc:32:2b:83:10:db:44:16:2a:c5:52:75:3a:1e:58:
53:b2:de:48:d7:0d:fb:d8:1c:0a:d9:87:e0:b4:12:
3a:65:6d:34:66:f5:09:9d:d6:e1:10:60:03:96:97:
d8:0e:27:b4:42:eb:48:9c:e2:d0:47:2d:1a:1f:b6:
4d:6c:95:28:20:06:47:b4:f4:e2:06:cb:4d:ee:29:
e0:80:d2:67:f8:26:e7:4c:6a:4d:24:fc:5b:f7:14:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:DC:33:04:B0:5D:DF:1D:FE:4A:F8:BE:02:43:2E:CE:BD:99:3A
X509v3 Authority Key Identifier:
keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f1:3a:4d:ba:67:65:0b:f9:b6:30:7b:de:fd:5b:c8:24:de:
4c:af:1b:d2:20:d4:89:7e:b0:db:d5:4e:11:01:8c:fa:47:79:
67:91:83:9f:4a:a5:fc:32:46:fb:a3:41:5a:56:5a:b2:ba:c1:
b1:be:f1:d3:86:b9:43:86:79:a2:56:8f:8d:f3:09:57:4b:e0:
14:b2:ce:36:42:86:23:de:b0:18:b2:59:6f:61:42:03:a3:86:
27:f2:66:1a:8a:de:f5:c9:d8:9d:a6:95:3c:b6:3a:80:79:71:
a8:cd:b6:d9:61:73:8e:3f:e1:93:76:28:8b:ec:99:3f:b0:af:
de:08:76:a1:21:ff:29:cc:41:90:b2:24:9e:2a:e1:4f:0c:76:
2f:cc:93:b8:0e:15:f8:27:9c:34:5f:43:51:eb:e9:4d:ce:40:
b7:a5:9b:68:30:99:57:2e:d6:3e:75:d2:a3:87:1c:e9:e8:4a:
4d:b2:b0:6a:c7:06:82:8d:fc:96:d5:eb:39:d5:2a:30:4d:d5:
00:31:12:c5:f3:00:61:d3:e1:f7:d3:84:1e:24:6d:d5:e1:c2:
85:8a:9d:b1:e6:71:01:2f:f8:6f:86:aa:a3:f1:00:a1:94:c6:
56:dc:36:7b:0b:6e:33:2a:fa:b4:bc:fc:b3:8e:67:07:76:c9:
01:92:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:07:25 2026 by rpki-client