
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json)
Hash identifier: GGemtOjd4+o0QrBM+1tOmrZUiMasRmIda1Wd0EYAf6M=
Subject key identifier: D6:50:7A:79:9C:50:05:06:76:42:CC:3F:0B:0E:DF:35:AE:69:38:50
Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
Manifest number: 0248
Signing time: Mon 01 Jun 2026 01:18:58 +0000
Manifest this update: Mon 01 Jun 2026 01:18:58 +0000
Manifest next update: Mon 08 Jun 2026 01:18:58 +0000
Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: heHku8R8tB973vhDe/+Zg/r09VeY2wpxoke2axifpnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl
rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7
Validity
Not Before: Jun 1 01:18:58 2026 GMT
Not After : Jun 8 01:18:58 2026 GMT
Subject: CN=6a1cde02-dce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:a3:f4:6b:5b:a2:13:08:06:39:73:e5:03:
8f:30:ca:12:83:11:a4:63:46:b0:0d:a8:c4:cf:44:
d1:69:e7:40:c1:1e:fc:ed:2c:7a:6b:bf:34:0a:f6:
86:23:ce:62:0f:1b:9b:95:08:c7:5f:b4:73:20:30:
f2:32:7b:7c:57:c6:03:13:3f:84:d9:31:46:66:dc:
f8:67:5e:c1:50:7f:6a:b6:a5:57:2a:3b:04:41:ff:
02:8c:5e:71:c3:d1:94:61:30:fa:b7:8f:35:4c:99:
81:94:0f:a4:d6:af:3a:0c:71:5f:77:71:64:5a:03:
ab:8e:43:1d:cd:26:54:ea:50:55:07:ae:8e:93:a0:
d2:6f:13:99:70:88:0f:32:54:ab:79:6e:e2:b4:5a:
49:ee:a2:e6:13:bb:ff:f9:8d:f7:14:9d:1e:99:07:
37:13:5b:16:b4:6a:f2:e7:5a:bb:0e:45:9e:49:ed:
ba:37:93:9e:66:a2:97:13:15:4d:45:41:90:f2:cd:
0e:69:8a:8a:3b:84:6a:62:de:af:97:e1:cf:3a:6d:
0d:26:ad:48:f2:c1:a6:09:11:72:10:55:76:f5:9d:
f6:a8:66:c2:7a:9d:5e:b0:fa:c2:97:b2:21:a6:93:
cb:e6:ac:5c:ee:3a:48:2c:c8:aa:17:a7:cc:0e:2c:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:7A:79:9C:50:05:06:76:42:CC:3F:0B:0E:DF:35:AE:69:38:50
X509v3 Authority Key Identifier:
keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:a3:ba:a1:18:01:62:67:2a:b2:ee:6f:d1:55:00:e2:8f:
a0:73:72:89:d9:25:62:24:1d:8c:f2:d4:f8:0f:86:f1:77:5e:
75:29:d4:51:96:c1:c3:0c:90:5d:28:4d:8b:d3:5d:68:83:e5:
5d:56:ff:f5:5a:91:55:f2:9c:96:3f:9a:58:5c:94:1b:bc:30:
d8:90:e6:16:4b:f2:9d:6d:49:dd:e0:77:85:ce:0d:26:ed:27:
bc:df:cf:f6:50:c9:d0:fa:62:b9:bc:b4:1d:65:2b:be:c9:67:
46:d1:90:09:93:6e:cc:0c:18:c0:a2:69:60:49:b6:a4:2a:c8:
87:a7:f4:64:2c:bf:bf:a3:ce:88:cb:0d:0b:18:5c:8f:87:7e:
09:48:fd:aa:ac:6b:b4:ea:a0:e0:f3:e6:e9:98:e1:ae:11:a4:
d0:6b:f0:0f:04:98:17:84:56:d7:bd:10:8b:48:11:88:db:4d:
8d:4f:32:2a:26:58:c8:a3:7b:2a:be:c1:94:17:4b:3e:6c:04:
69:23:56:03:ab:85:16:1b:23:c4:4f:68:2b:01:7a:f9:ad:bc:
7e:0f:87:fe:9a:f7:cb:d7:04:0f:6e:1a:e7:38:c9:9d:fa:3d:
f6:f6:0a:d3:81:18:cc:4b:36:0c:6d:0c:db:f5:5a:13:16:40:
b2:9e:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:08 2026 by rpki-client