
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier: iTvZCVRBoxCrynqk0K+66DbHgtPhAo2lgcsVjbzjW8k=
Subject key identifier: 65:CE:9B:E8:9D:A9:7D:CC:9C:51:06:14:CE:D9:06:91:39:9E:5C:6D
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number: 0201
Signing time: Sat 03 Oct 2026 03:46:11 +0000
Manifest this update: Sat 03 Oct 2026 03:46:11 +0000
Manifest next update: Sat 10 Oct 2026 03:46:11 +0000
Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: xZPmSQSS3/KBgRPurpLfMd7K2vPo9o8GmXXJPJLPp5s=)
2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: A77x6jjPqEqz/VnapKYzVBvxBHWwqdh+Pq5JdZT0OUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Oct 3 03:46:11 2026 GMT
Not After : Oct 10 03:46:11 2026 GMT
Subject: CN=6ac07a83-f487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:f5:6b:d7:8c:b4:65:4e:bc:2a:4e:38:0f:
45:4e:50:68:b3:e5:67:3c:da:e2:48:99:f5:3f:8c:
a2:da:a0:9e:25:71:c8:18:c3:14:c3:d2:04:00:58:
05:5b:68:e1:fc:c0:e7:af:b1:14:33:df:3a:97:1c:
d0:5a:d7:6f:41:5f:e5:8b:22:0c:29:49:79:d3:d1:
aa:82:1c:54:a3:9e:91:a3:e0:88:cc:43:8a:f9:b2:
99:d1:76:11:d2:a7:c4:8d:9c:e9:38:17:b1:88:d1:
6c:b5:b7:62:c6:9d:74:b8:6d:72:14:2e:95:bc:59:
36:1d:eb:1a:ba:bb:9d:76:11:0b:0a:56:64:95:ce:
74:63:24:27:1c:8c:82:2b:0e:09:47:8f:97:23:f0:
c6:c7:59:15:7b:78:41:38:8b:93:c1:87:3c:4d:cf:
cc:68:96:b2:95:3d:05:f5:eb:a4:2d:1e:b7:09:13:
ce:94:2a:83:fb:3d:f6:f6:69:4f:ff:25:6a:ea:4e:
6a:5e:07:e1:db:12:3c:0b:5e:05:2e:14:0b:55:ee:
77:23:c5:c7:f0:fe:0b:1b:73:a4:9b:4b:b6:4f:ee:
a8:e6:fa:c4:0d:7e:59:e5:80:49:bd:7e:2b:13:c5:
fb:d1:08:21:8c:f7:14:9b:d0:e6:b2:f2:97:5a:3c:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:9B:E8:9D:A9:7D:CC:9C:51:06:14:CE:D9:06:91:39:9E:5C:6D
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:b0:5f:05:e1:19:23:41:08:1f:8c:b5:65:bb:d6:ea:ba:
b1:49:b9:d9:ac:c7:a5:07:9a:4b:bb:9b:9a:a6:88:e2:65:f7:
47:2b:d6:f9:42:f1:de:a3:15:48:ae:cf:14:e1:c9:9f:65:3e:
ca:a0:dd:a3:ae:17:90:58:c5:0a:47:2c:3d:93:fe:a8:e4:d5:
d3:17:58:19:39:e1:d3:b0:3a:17:37:ae:17:ff:f2:2c:b6:b6:
89:70:13:cd:6f:ff:e0:d0:b8:88:c4:6c:be:4f:e2:91:5e:46:
d6:8f:fb:8f:75:8f:26:5f:5a:5b:5c:be:1e:56:9a:b2:5f:d2:
61:17:b4:b6:82:89:d0:88:97:50:29:38:95:55:23:95:48:9f:
d4:95:f3:a7:d3:88:53:eb:6c:db:30:41:f2:af:43:28:80:af:
97:0f:9c:70:0f:9a:e0:8f:2b:f0:a7:71:4d:9d:c4:55:db:69:
8e:e5:72:f4:53:d2:ed:85:4e:c7:50:0f:9e:e9:55:2d:5a:5e:
15:a3:3c:90:69:a5:ae:b5:a4:ae:ed:60:a5:c1:3c:b7:7f:14:
b2:f1:60:c9:a0:8d:a5:4e:fb:d7:29:7d:38:49:7f:9a:24:32:
b9:06:83:0e:a4:8f:f9:02:65:f4:88:82:3e:1d:19:15:b1:1d:
c9:c2:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:43 2026 by rpki-client