
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: 7Mib1M4i/eaOGztRbjWcY1B+UqB1B5IOKl4veyORtcM=
Subject key identifier: CF:5A:97:60:DA:13:01:1D:F9:4C:DA:99:95:C3:F6:E6:F6:48:CD:C6
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 045F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 043D
Signing time: Tue 10 Mar 2026 23:47:30 +0000
Manifest this update: Tue 10 Mar 2026 23:47:29 +0000
Manifest next update: Tue 17 Mar 2026 23:47:29 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: KRgq5oePqfl1qqhUJoa0vTRR/lnu92VTrwAEDAipR5A=)
2: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: xr5mxzxZdrq2ogWRRq3jhLKL51if7GSAH8Ndn8OeVk4=)
3: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: zmUGqNKP1l1FS6Nt/6rkwRmHKjZnQKttQWEMo/g2TI0=)
4: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: NKaPuf5hInjJ10XsRF1MsqvWr59ZYXc6bDzbcRMrpWs=)
5: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: M6U8swF0ly3cMKXv8vDoiWv6ScGR2XkNJAyosXpW1y4=)
6: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: zyYzT/V9u8dqJ4WQrQE3OrZiw2M5A6hoVzyDJPpodFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 23:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Mar 10 23:47:29 2026 GMT
Not After : Mar 17 23:47:29 2026 GMT
Subject: CN=69b0ad92-eb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:03:d4:61:72:55:9e:2b:0c:bb:f4:4e:ba:
eb:4d:ce:dd:b6:d3:4f:a4:c1:c9:32:62:74:39:1f:
50:a4:81:1a:5b:53:c7:f6:62:f2:0a:f7:1c:27:66:
39:06:90:0f:85:6a:f4:3d:5d:c7:df:b3:68:f8:19:
46:14:9f:42:f6:a8:d9:0d:2a:43:2a:d9:cd:78:75:
38:94:fd:40:98:60:e4:58:55:3b:9c:ce:a5:a6:5c:
78:79:4a:2a:cf:f1:07:7c:14:d9:06:8d:b0:14:52:
c7:4f:0f:90:41:8f:c9:e4:3f:d9:1f:33:c6:50:af:
27:50:d9:13:b8:f9:36:91:b4:d6:58:21:57:51:6a:
e2:f0:b4:c5:9e:f5:db:6b:4c:fe:25:c8:69:d8:5a:
ba:4d:ea:f5:a4:3d:4d:1c:f0:ea:d8:79:a7:43:81:
7c:f3:f7:a1:f8:61:3d:55:dc:e2:c3:31:79:8c:3c:
53:54:f1:43:f3:58:8d:1e:0c:b5:11:97:58:c8:8f:
4a:70:da:8a:63:e2:b2:66:3a:80:5a:08:a1:18:69:
aa:61:44:dd:1e:2e:1c:7c:06:97:9f:20:05:3c:a9:
d1:2f:fe:12:f6:5e:e6:20:bf:aa:e8:46:d2:6a:eb:
b9:9d:fa:b7:de:a5:93:e0:f1:8e:34:3c:d9:e0:5f:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5A:97:60:DA:13:01:1D:F9:4C:DA:99:95:C3:F6:E6:F6:48:CD:C6
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:39:3f:33:62:a3:60:ce:17:fc:61:91:20:f5:2b:6f:68:
5f:ba:83:66:f4:bf:3d:f2:e7:19:a0:ec:e7:1d:f6:79:22:1d:
05:19:43:97:fc:44:03:e5:e4:52:25:cc:f3:32:fe:b1:22:0c:
ac:26:dc:74:4c:2b:cb:c2:9e:9a:66:3b:27:15:d7:ba:ff:e0:
8d:18:2e:22:73:ae:b6:a1:20:86:f4:f7:91:0d:10:a4:cd:36:
e7:9f:1f:f7:42:07:7c:43:2e:74:2e:ea:27:2a:f4:47:f6:29:
60:b0:c4:3b:aa:cb:d0:9a:77:2c:36:3d:aa:a9:6c:48:0a:f0:
41:a0:f4:ad:f8:9f:ff:36:7f:a0:c9:0a:ce:48:b3:10:e4:1c:
5e:37:d5:62:08:39:a3:f0:e1:0d:c9:d1:a0:9d:d7:2c:f6:9e:
a3:12:04:f2:21:77:d3:05:88:ea:2a:5c:88:44:f2:19:fa:9a:
3e:cc:d3:ba:63:23:14:01:42:84:04:bb:50:1e:0c:f3:14:d0:
55:75:ae:c6:37:82:be:19:f5:4b:64:e0:97:b0:2e:80:51:dc:
e4:60:1e:5e:27:75:13:1c:09:10:09:56:32:cc:6a:21:a2:d8:
ce:12:7c:16:7d:15:41:6b:aa:c1:92:c5:ba:66:1f:40:78:23:
5b:8b:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 22:23:08 2026 by rpki-client