
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: e6AcH3QNLOxri1beuIMa/Yt0QvaFBAm0S5xyq21wPCA=
Subject key identifier: F5:60:98:0C:40:EA:CF:DA:67:D3:81:ED:DA:30:0F:BA:EC:FD:BC:4C
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 0458
Signing time: Mon 27 Apr 2026 00:10:46 +0000
Manifest this update: Mon 27 Apr 2026 00:10:45 +0000
Manifest next update: Mon 04 May 2026 00:10:45 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: cYQtw1m4xZpAw1C7PZC4VdNaWHmeV49xCxgc3lYwmsM=)
2: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: SZDZjO2U/7XiarXyX086XnRBejlK9FVygwBnb0pSgvQ=)
3: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: b8nFndVC5ELHm6DiQIfUcSpA0YNOVb75TThfR/hUaSA=)
4: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: /0rdEm60SU3cn6yu//gYw2yshMtBj24Bm4EYaDFrubk=)
5: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: y512Vfv9khNilQdj8KLU0HhrU0fT3QsaNnHmkL8j2KY=)
6: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: i5R8VUyCEsYs87lziXPACinu0ljmmV6mAP0eNfHwrtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 00:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Apr 27 00:10:45 2026 GMT
Not After : May 4 00:10:45 2026 GMT
Subject: CN=69eea986-3800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:32:1a:07:87:02:ea:14:d6:91:e6:49:a1:05:
13:f0:36:23:79:0a:e6:a0:05:2b:96:dd:a8:e8:bf:
09:32:91:cc:83:9a:2c:a4:2c:35:50:26:e1:7b:5c:
53:bf:65:0d:59:db:d6:6b:3d:8f:b4:f7:f8:fa:9c:
96:dc:65:6d:4f:f6:21:9a:38:ba:73:50:ec:22:67:
33:26:ec:0b:7b:45:b4:b8:c7:31:2d:41:84:ac:da:
72:76:ad:6d:4b:91:29:66:07:81:09:21:71:26:7e:
8b:31:5a:f3:45:a6:e0:77:63:22:17:3f:e9:72:07:
eb:97:d4:99:fa:cc:58:53:5a:6c:58:7e:24:d9:6a:
67:b4:6c:7e:75:9a:f7:b6:1f:f2:f8:ff:58:53:07:
b3:81:a3:73:49:72:a5:1c:26:9d:65:df:c5:1a:91:
1e:23:b8:98:e8:ca:08:1d:30:fe:0a:a6:d8:c9:15:
bc:30:d4:a2:a1:31:df:41:99:49:2a:61:5b:2e:db:
a9:78:99:62:ef:28:45:b3:37:e5:35:58:aa:ff:0c:
09:f6:59:4a:09:fa:6b:79:8c:f0:37:d9:4f:cb:bf:
47:80:11:5b:29:04:02:a8:9d:84:92:fe:20:0c:94:
b9:93:64:66:4e:7a:27:b2:17:35:ed:88:47:6c:c2:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:98:0C:40:EA:CF:DA:67:D3:81:ED:DA:30:0F:BA:EC:FD:BC:4C
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:e7:b7:1d:48:76:fc:52:c1:25:23:f5:3f:f8:10:cd:04:
5e:16:09:18:bb:4a:1d:b7:d1:c0:73:d4:40:18:4b:3e:5f:e0:
1d:9a:7f:59:1c:8b:ff:c0:25:3a:d5:69:36:a2:eb:63:a4:1b:
3d:ed:11:33:fb:06:ca:ad:5c:65:9e:e4:f0:43:ab:53:1e:e2:
a2:84:17:2d:9a:ac:fc:3e:76:3c:cc:3a:27:74:de:bb:68:80:
83:77:3e:54:c7:9a:bf:db:d9:01:9d:58:98:be:8a:7b:e5:6c:
c7:05:8a:a6:ae:39:39:ed:58:fd:13:9e:fd:7b:a4:f8:b1:bf:
9c:a2:98:3b:db:43:83:61:b0:31:91:2c:bc:e9:c4:7f:c2:d6:
06:3c:95:00:d0:91:33:ae:a4:67:bf:d9:0c:a2:c5:9c:7e:88:
8b:72:4a:ad:b2:61:8d:db:14:08:3d:73:cf:03:2f:8c:86:fa:
16:b6:2a:22:e7:c0:1d:4c:8f:0c:bf:fc:b7:1a:a5:ba:48:9f:
97:bd:ed:d5:fd:b2:f0:d7:f0:cb:2b:fe:94:f5:6a:81:09:c7:
4f:f4:14:3f:1b:53:e4:bf:86:0d:fb:d7:5f:d6:10:8b:00:20:
66:f1:4f:73:b3:a3:c6:49:a0:44:dc:6e:e0:c8:c4:e3:a0:0a:
b7:79:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:19:39 2026 by rpki-client