
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: hUL1ykmCD0B9OlzXuHUsHlWrUChJi+xchR7MWpqsjgk=
Subject key identifier: 2B:C7:88:15:C5:42:2A:CF:58:AC:F0:24:5C:17:81:42:89:5C:18:5A
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 0488
Signing time: Mon 27 Jul 2026 01:05:53 +0000
Manifest this update: Mon 27 Jul 2026 01:05:53 +0000
Manifest next update: Mon 03 Aug 2026 01:05:53 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: RDE0A06ntSZ5rp62oFWeP5QcC9atMc1L3bev4s4AW7w=)
2: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: NUGAPcQG3JutO9qEKwmx4ZtFctU4cvoVKH+jTCY6e9c=)
3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: mRQhgZ81M0Ts1pMOJw8D4F0g0lJj03RtR9EyLiUMZPc=)
4: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=)
5: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: Bx/J/S8TWW2QQNpW8oZ/fMwuA/TbhW9uJ00ERz5Dobk=)
6: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: I+xSYvR5vfpxBiIRAe84JarFe3Ja6Qu8IKK38QKP4g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Jul 27 01:05:53 2026 GMT
Not After : Aug 3 01:05:53 2026 GMT
Subject: CN=6a66aef1-d4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:92:a9:0e:6b:5b:84:ed:41:7d:38:cc:3d:
1b:c6:ca:7e:df:ef:a0:6e:f2:54:1b:bb:66:a1:29:
e2:aa:dc:26:38:85:f6:bb:30:29:18:9f:f7:9e:05:
af:27:ca:e0:b3:2d:00:86:7f:4b:80:16:60:cb:c7:
3f:38:b7:ae:31:4d:36:62:6e:3d:42:4a:a0:a7:bc:
61:74:95:b4:13:17:38:40:9f:bc:45:82:d5:a0:d7:
29:3b:83:a9:32:23:55:ae:77:c4:66:3d:08:c3:f7:
f9:55:c2:1a:4d:f1:96:e3:2c:0c:cf:b1:d9:f9:8f:
b5:17:4e:04:52:2a:5b:98:f9:fa:1f:d4:b8:0e:87:
cc:10:76:eb:0c:83:97:6b:93:65:0a:1c:90:78:0a:
23:aa:49:41:50:ba:fd:c0:ac:eb:9a:2f:20:f7:97:
82:65:c8:86:89:6a:43:61:9a:6e:52:92:3e:c3:3e:
96:6b:6d:00:c2:85:e2:06:c9:7e:13:de:56:3d:cc:
20:0d:61:71:e7:12:49:60:93:f3:ba:73:18:9f:0b:
d6:b8:81:bc:ea:85:e0:ef:aa:15:7b:be:66:a6:38:
5e:fa:87:47:34:99:ea:b6:50:6f:c8:6b:b8:ee:f7:
0d:2f:42:33:13:7b:3b:95:63:d3:12:74:58:fd:6d:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:88:15:C5:42:2A:CF:58:AC:F0:24:5C:17:81:42:89:5C:18:5A
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:fd:9d:64:0d:ae:ea:58:8c:69:de:4a:0f:0e:b2:da:3e:01:
2f:25:ad:33:45:27:1c:9d:23:11:cb:02:a5:b4:cc:ee:34:ce:
ad:3c:19:e8:ca:13:bf:59:e7:66:fd:f8:34:0b:fd:59:24:35:
f1:f9:db:23:50:d1:eb:03:b3:de:0a:be:fa:46:46:dd:4e:c7:
ad:70:0c:1f:91:1a:fb:92:4e:a4:43:29:5e:d9:17:2f:30:17:
f5:0c:43:eb:1c:75:ed:89:b5:5a:85:a8:ec:80:5e:23:e9:48:
25:18:db:86:f3:2f:b9:ce:3d:ff:d0:f3:d7:0c:3b:f8:ee:4f:
5b:f5:10:e8:14:0f:be:28:36:10:5d:0d:df:ce:ee:77:80:d2:
ee:6f:38:ff:f0:a0:85:06:a2:ed:72:43:40:ca:47:d2:2a:55:
8c:63:1b:a1:af:54:39:de:bd:f6:51:77:98:36:d3:4c:26:7f:
e2:40:ff:71:01:c0:f5:ef:e1:87:65:04:fc:74:24:c3:2e:59:
3f:5a:bf:df:d7:17:47:28:ac:bc:10:ed:e0:9e:a6:e3:c2:e3:
d4:11:43:a9:5b:c0:42:bc:6b:62:33:f9:70:00:bd:b4:9e:65:
30:60:ed:b5:3e:6a:46:9f:4f:5c:a5:f2:6d:d2:1f:f1:fc:48:
51:ce:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:31 2026 by rpki-client