
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json)
Hash identifier: svHtg9HDlD6rOmOCYztDt226nX8sqvDDanIhYVOjIAA=
Subject key identifier: 5A:05:C4:5A:BD:F9:B9:51:0D:32:F8:A6:AE:CA:67:A2:FF:22:E5:F3
Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Certificate serial: 178E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
Manifest number: 177E
Signing time: Mon 12 Oct 2026 16:38:57 +0000
Manifest this update: Mon 12 Oct 2026 16:38:57 +0000
Manifest next update: Mon 19 Oct 2026 16:38:57 +0000
Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: Z2PwamF9+Arva/7NAgNaCsOfNPSfMRindPoFBVtI/fk=)
2: 2D0DE7E686F011F19E006003A7EE528E.roa (hash: rGULIr/0PbAQmWI1eqw0UeD5is0Q7jDMnhNuffPvPUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6030 (0x178e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Validity
Not Before: Oct 12 16:38:57 2026 GMT
Not After : Oct 19 16:38:57 2026 GMT
Subject: CN=6acd0d21-5920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:49:31:d7:69:fe:85:8b:de:77:9c:a1:b1:
07:c0:94:3b:a9:d1:af:91:fe:10:7d:f6:63:aa:5d:
78:17:ac:5a:3f:1a:5a:07:bf:6e:1d:79:53:3f:fb:
5d:d8:f0:f9:3c:ed:08:7e:d4:66:15:98:c3:c3:47:
72:41:fc:e8:b3:d8:fe:33:e9:84:0e:b7:b0:3a:6c:
12:22:44:12:71:88:30:22:69:5a:8b:e3:c6:b0:c0:
fa:e1:6d:39:2f:3f:05:f9:b5:a7:ba:ba:af:39:54:
36:b7:86:a2:fe:8b:d3:6f:24:00:c3:0e:0a:2b:99:
bc:6b:67:fa:48:b5:35:5d:44:ad:ce:af:48:61:4d:
37:fd:53:be:e4:62:f5:e0:cb:2f:ba:1c:57:a9:1b:
8e:4f:87:0b:89:de:b8:eb:11:6b:ef:94:9f:69:21:
17:21:5a:3d:b6:8c:86:83:fb:99:5d:52:f9:70:3d:
3e:c1:e7:17:54:18:79:24:e9:fe:c0:f4:b1:0d:0e:
a7:7e:d5:86:52:4a:da:9f:4d:2b:82:b2:41:c6:8d:
a4:0a:f8:98:49:84:67:3d:6a:ef:81:43:76:6e:3f:
ea:0f:21:8e:ca:83:e4:70:c8:6c:f1:32:ab:7f:6c:
4f:0b:26:90:a7:3e:01:87:da:5e:81:86:a4:85:e4:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:C4:5A:BD:F9:B9:51:0D:32:F8:A6:AE:CA:67:A2:FF:22:E5:F3
X509v3 Authority Key Identifier:
keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:7f:8d:94:b8:0c:28:e0:51:74:f5:fa:c6:0f:f1:56:ea:
64:8e:3f:29:d8:8e:e4:5c:ee:31:2e:34:58:f6:e7:13:cc:e0:
38:cf:3f:70:cb:7e:79:79:5b:13:20:ad:d8:69:9d:84:08:77:
8e:0a:84:be:a4:b6:3e:30:92:fc:24:d0:a4:f1:e5:3d:11:ee:
e2:4a:95:cc:08:ef:f0:00:8b:7b:d2:30:f5:5e:8d:a7:2b:f3:
38:97:b7:45:3c:b3:29:7f:46:03:5a:22:5b:cb:2b:59:c8:d3:
cf:c0:07:d3:92:0c:ac:b2:f6:be:12:cf:49:87:9b:14:29:1e:
8a:c5:01:87:79:8d:81:f0:39:c5:61:ec:a3:22:71:14:c3:8b:
5a:24:b6:08:5c:69:35:b7:7f:42:2e:f9:33:85:c0:1e:60:a8:
9a:26:02:ef:fa:2d:b3:13:1a:b9:6c:5d:a8:4b:7d:2f:c2:0f:
d1:c5:23:a3:eb:26:bd:af:66:f1:53:6e:64:39:73:30:e2:9e:
90:aa:a5:61:f0:5f:35:f2:4b:c7:48:32:9e:09:2d:92:89:56:
49:dc:c5:08:3f:22:59:78:4d:d5:ba:88:66:5a:1b:f8:53:b2:
a4:51:0c:7d:dd:00:2b:82:56:bd:53:b3:b2:a7:4f:c4:f1:40:
e6:1c:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:29:27 2026 by rpki-client