
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: t0pIQyHlLz9Ky6brXOYIhNY+7JI2ECw5xvF+HoNePWw=
Subject key identifier: D1:94:5D:FC:79:C4:57:2A:91:4A:B8:32:D7:5F:D1:5C:C9:41:44:82
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 04CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 049F
Signing time: Wed 09 Sep 2026 00:00:23 +0000
Manifest this update: Wed 09 Sep 2026 00:00:22 +0000
Manifest next update: Wed 16 Sep 2026 00:00:22 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: xem4EX8R34c3/ETfJlTZhZaxM9ejcIhu2t250wt6GK8=)
2: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: mRQhgZ81M0Ts1pMOJw8D4F0g0lJj03RtR9EyLiUMZPc=)
3: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: I+xSYvR5vfpxBiIRAe84JarFe3Ja6Qu8IKK38QKP4g4=)
4: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: NUGAPcQG3JutO9qEKwmx4ZtFctU4cvoVKH+jTCY6e9c=)
5: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: Bx/J/S8TWW2QQNpW8oZ/fMwuA/TbhW9uJ00ERz5Dobk=)
6: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Sep 9 00:00:22 2026 GMT
Not After : Sep 16 00:00:22 2026 GMT
Subject: CN=6aa0a196-967a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:73:5e:98:7d:11:7c:91:1a:3f:06:87:8f:
ff:25:c5:b9:b0:4e:9c:10:95:b8:e3:8c:66:86:3b:
d4:5a:96:3f:3d:a4:43:3e:f1:c5:50:78:66:91:89:
f5:06:40:66:75:d8:f3:66:62:c0:99:36:c7:91:b9:
a5:74:01:c5:02:ca:7e:af:b4:03:0e:73:d4:c4:66:
81:77:11:6d:1f:7c:89:17:a7:30:de:e7:43:40:0a:
0d:47:ca:f1:11:88:b5:39:c2:f0:bf:dc:e3:e6:95:
70:aa:c9:18:a3:0e:0b:85:8d:0c:82:9a:eb:08:2b:
fa:77:b4:d9:7a:60:4d:24:ed:26:b7:17:58:02:7f:
b3:29:8f:8f:cf:db:3c:9a:99:1b:cb:1d:19:91:49:
d8:01:cd:26:f7:10:00:6b:ae:14:4c:a6:97:dc:70:
2d:d4:cd:9e:8b:c6:b0:e3:8c:21:bc:e6:ce:87:0b:
1c:32:9b:de:30:08:af:cd:7e:6f:f5:70:24:57:dd:
1c:eb:86:8d:65:8b:b9:9f:52:4e:e7:e5:4d:11:44:
f7:bd:99:da:19:13:60:3b:af:a3:d1:99:61:34:30:
1b:58:86:ef:33:bb:a3:db:e0:af:55:50:b6:ea:e1:
a5:45:c6:54:2e:d4:80:cc:08:24:98:14:76:19:6c:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:5D:FC:79:C4:57:2A:91:4A:B8:32:D7:5F:D1:5C:C9:41:44:82
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:a4:b3:5c:a1:ad:ac:bd:73:84:03:d6:ed:0b:b5:8a:28:
d6:5a:9e:87:ab:14:36:77:dd:38:2f:78:d1:bf:53:a9:c5:da:
96:53:1f:23:77:d0:4d:80:48:40:8d:03:73:c7:f1:b6:65:ad:
45:07:1b:e6:73:3f:dd:71:e9:2f:89:8b:af:c4:be:8e:fc:40:
c2:89:68:17:3d:06:c4:06:24:c5:4a:1b:02:e5:53:81:65:1d:
8c:f5:9f:1e:88:0e:70:5b:6a:dd:05:09:2f:5e:bd:d4:0c:97:
dd:f5:6e:62:b5:f2:b6:c3:c1:bb:ea:e3:67:d3:ba:14:b4:32:
3c:c0:17:38:e8:c3:1b:0e:2c:44:91:32:ca:80:e4:72:99:d0:
d9:90:f6:bd:dc:09:36:bc:3c:8a:0e:63:c9:4e:cb:9a:4d:46:
39:e1:78:02:db:7c:59:4d:15:d7:b3:9d:eb:c0:f3:5f:ba:94:
b8:64:8f:62:f8:7a:d4:45:34:bb:1a:d0:a8:fb:4e:bf:34:67:
bb:79:d7:c0:e8:c9:ff:82:a2:29:c3:0a:4e:1f:49:65:b2:59:
81:01:8e:80:28:32:ca:f3:58:db:2c:31:e3:7b:ab:b0:34:5e:
c5:36:2c:43:df:26:9d:1e:09:ab:c9:a7:43:bd:d8:5b:27:09:
8b:fc:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:33 2026 by rpki-client