
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json)
Hash identifier: TYzrxeQXCrLHYBh78taz69jWfXxuTUjbakZqISzcBVI=
Subject key identifier: A0:2D:C8:F2:6E:13:81:6A:DD:2E:76:4B:E8:B9:25:51:04:75:BB:23
Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
Manifest number: 22
Signing time: Fri 06 Mar 2026 14:31:58 +0000
Manifest this update: Fri 06 Mar 2026 14:31:58 +0000
Manifest next update: Fri 13 Mar 2026 14:31:58 +0000
Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: fTu1evkUpwmGTonS+VW1ZRGf6aSnZ+fKHaV1Pog2hEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Validity
Not Before: Mar 6 14:31:58 2026 GMT
Not After : Mar 13 14:31:58 2026 GMT
Subject: CN=69aae55e-ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:53:79:28:c6:0f:d0:d2:1c:ca:2c:a5:9a:
5e:c6:9e:d6:5d:1d:6e:46:b1:83:b7:a1:0f:f0:ee:
ad:08:ed:0c:be:9f:3f:e3:dc:64:a6:f3:23:c9:be:
2a:de:dd:fe:db:e4:b0:4e:5b:49:06:14:ca:fc:cb:
f9:e4:f7:ad:df:56:41:1b:e5:bf:b0:41:00:01:98:
73:92:98:78:e6:1c:9b:e9:36:8a:41:b1:6b:a5:6b:
81:32:cb:54:f9:68:7e:32:0f:86:bb:6b:4e:89:09:
f1:4e:af:cc:68:54:ef:4c:1c:ee:37:3d:a6:f2:a4:
2d:72:01:94:ee:00:74:f7:d9:f2:66:1f:d6:20:c7:
6f:33:bd:33:ea:75:c5:12:8c:39:c8:e2:cc:9a:7a:
52:87:22:47:51:64:1e:78:3c:86:a1:af:ec:5c:1e:
9e:bb:f3:a7:58:73:9f:6a:2e:61:c5:7f:8f:92:54:
b8:39:16:79:60:ec:d5:a0:7a:c2:92:3f:8d:0b:1c:
36:01:33:93:c6:09:7f:9f:09:f1:58:47:61:0e:63:
af:45:52:6c:c0:3f:9c:a7:1d:36:aa:e4:68:5e:89:
1d:e8:72:65:48:2e:41:b3:86:19:cd:33:4e:5f:ff:
31:73:83:82:c8:2c:fa:31:9b:89:0e:94:17:fa:90:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:C8:F2:6E:13:81:6A:DD:2E:76:4B:E8:B9:25:51:04:75:BB:23
X509v3 Authority Key Identifier:
keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:8d:52:a0:c0:43:52:9b:4c:2a:c5:6a:4c:63:29:8e:84:
10:b0:c5:a6:3f:a3:04:6c:ef:96:b0:b8:14:1f:95:53:6d:7d:
5f:c0:21:94:fa:5d:9f:19:dc:fa:39:64:52:d3:4d:e6:c7:69:
54:26:4b:6c:00:a4:da:2d:9a:87:87:81:9c:80:b2:df:a2:85:
97:c2:93:f7:2d:35:37:f7:3e:2a:29:d6:9e:ea:13:2c:81:43:
7f:9c:61:5d:ea:90:c6:62:25:ff:67:79:d5:1e:5a:76:aa:8f:
ba:e7:d7:49:31:93:0f:04:72:5f:40:a6:03:57:03:1c:6f:4a:
75:98:fa:fd:47:29:4c:f6:bd:fd:d2:21:05:85:13:48:4a:ea:
e5:10:54:fb:b2:6f:af:fb:b1:f0:ba:cd:1d:f9:3f:5b:8b:1d:
77:fb:35:4a:b7:a6:a6:89:a3:9a:73:ee:b0:d4:df:bb:da:10:
cc:eb:17:a2:1e:2b:42:67:b4:2f:eb:bb:34:6f:1b:b9:f8:56:
69:85:9d:20:2b:cf:80:98:7c:26:10:60:9f:f7:b9:e9:6d:40:
96:70:cf:2f:aa:7d:7c:0d:7e:0b:35:7e:c1:bb:e2:a1:71:4c:
e1:50:ac:96:f1:18:fe:58:97:75:de:d8:82:f5:58:d3:54:c9:
f2:74:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:35 2026 by rpki-client