
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json)
Hash identifier: zJy0nnk11cLEUDzyxMn2WC7n7cEDjd0WhM4yvovEc4I=
Subject key identifier: A6:70:10:AB:FD:14:68:9A:94:4A:4A:E5:E6:FA:02:B1:CF:B6:A9:0C
Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
Manifest number: 50
Signing time: Thu 04 Jun 2026 14:32:43 +0000
Manifest this update: Thu 04 Jun 2026 14:32:42 +0000
Manifest next update: Thu 11 Jun 2026 14:32:42 +0000
Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: auQNDB/f4giaUyTsXCPwQ8FCiJAPCueQWCB47L53qdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Validity
Not Before: Jun 4 14:32:42 2026 GMT
Not After : Jun 11 14:32:42 2026 GMT
Subject: CN=6a218c8a-cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:30:b7:8b:d3:90:7e:99:a6:0b:6c:4e:87:
b1:b8:65:3b:ea:66:5f:26:e0:51:c9:e3:cd:13:c3:
93:9a:31:97:9c:9c:50:68:8c:97:19:73:a1:9d:15:
9f:0d:df:a3:3b:57:18:c8:9e:1d:d9:51:2f:77:a8:
b8:61:6f:46:2f:61:cd:32:f2:21:d0:37:23:5c:c2:
1b:f3:19:95:b2:63:9a:09:84:cc:81:99:24:14:59:
05:35:e8:de:fd:f7:1e:9d:08:61:28:cb:10:26:23:
92:be:96:e6:06:89:6b:31:3c:1e:97:27:21:22:0f:
80:a3:9c:39:bf:46:7a:49:1a:d1:a8:e8:18:74:97:
81:f1:34:80:e8:86:5f:d4:e8:da:93:08:df:33:65:
e0:3c:9c:08:7c:9c:8e:a8:e6:0e:15:1c:53:ee:e2:
0d:32:37:57:40:61:10:87:b8:d4:69:2d:3b:b8:c0:
02:49:7f:9c:c7:21:49:7f:4e:5a:b4:bc:6c:d9:c2:
37:93:0f:48:1f:24:ec:5f:e7:e2:b7:b9:37:3a:33:
f1:36:db:ee:67:03:34:aa:16:dd:78:f6:fb:b3:15:
21:4f:69:c1:0c:ab:2a:3d:2f:e5:7d:8b:9b:8d:49:
a2:b2:e4:e8:a7:f1:d7:21:dd:fb:9a:9c:f1:0a:b6:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:10:AB:FD:14:68:9A:94:4A:4A:E5:E6:FA:02:B1:CF:B6:A9:0C
X509v3 Authority Key Identifier:
keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:0c:28:a6:86:6a:30:fc:8f:2b:62:37:29:55:3d:63:d7:1c:
5d:8a:e8:36:17:0a:15:e6:16:69:40:67:24:26:17:5e:56:4a:
ae:a0:2f:84:ca:44:cf:6f:57:c2:27:ec:c8:49:82:14:c3:ad:
b8:c6:c6:69:07:95:dc:0b:fa:5f:fc:a2:40:9f:4b:3f:b5:e6:
b3:07:03:b8:40:08:4f:9a:a0:c0:7d:1c:db:08:93:a4:e6:cf:
3c:2a:2e:8c:30:a2:f2:fa:24:a7:65:7a:d0:8a:bd:a5:98:75:
a3:db:26:f8:52:41:cb:84:67:6d:6c:24:28:c5:53:5e:99:60:
44:f0:db:70:96:46:05:f0:cb:09:09:b5:dc:f0:5c:70:74:66:
b4:22:ac:4b:d5:77:09:e8:b4:62:58:17:2b:99:e2:11:57:57:
40:9b:c5:1c:b0:43:a8:1d:cd:0f:4a:6b:d6:12:52:fb:69:8b:
7a:93:6f:2b:ec:cb:8b:82:d4:3c:9a:c7:8e:32:0b:84:d6:c1:
8a:c4:dc:a9:85:73:ff:ee:b3:68:c2:bd:89:b6:ba:0b:62:f0:
93:74:a6:16:a2:5f:85:a6:1f:d1:af:3b:e4:05:56:51:91:86:
44:ee:76:fa:f9:72:c3:9a:39:23:cf:83:8c:59:fc:0a:8f:c7:
27:d1:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:03 2026 by rpki-client