
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
File: cLCoplSBz0wlAPm3SpG0Rkxybx8.mft (raw, json)
Hash identifier: VDy2ukJ9mDobLYEegG+qqKnjv1a39fYpzTZXMio6n+o=
Subject key identifier: E8:99:F3:FF:3F:62:03:D6:C5:5D:35:F3:03:7F:C1:71:7C:92:E2:34
Authority key identifier: 70:B0:A8:A6:54:81:CF:4C:25:00:F9:B7:4A:91:B4:46:4C:72:6F:1F
Certificate issuer: /CN=A91DD7A0/serialNumber=70B0A8A65481CF4C2500F9B74A91B4464C726F1F
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLCoplSBz0wlAPm3SpG0Rkxybx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
Manifest number: 06
Signing time: Sun 15 Nov 2026 09:23:22 +0000
Manifest this update: Sun 15 Nov 2026 09:23:22 +0000
Manifest next update: Sun 22 Nov 2026 09:23:22 +0000
Files and hashes: 1: cLCoplSBz0wlAPm3SpG0Rkxybx8.crl (hash: +Qcwv5O1nnZSMSErDUC1VMeGKXMMmvimw3TMT2uLyMU=)
2: KqqU0UF8sQJd3gCsHjiN5pm7x2E.asa (hash: nkm1TUU9Xao9sRBRaihTCL21WFqUsVzfgPfAQG8YrCE=)
3: HsqR3Kw8N7vpJMNvmcFSVfPW9ms.asa (hash: 0TxqvywKvWw0nMMxJe0oARMFw7sBwwuI0XnnLsGbRPQ=)
4: sqiFn7iZBcV1j_P8uPJnnsQsyCU.asa (hash: 5To+EIAorMMYMFhK5b99fucSFkfyfFUVkmNb6YJzQBU=)
5: al-Q41GyK_3ImT0D1-NK2y1WRdI.asa (hash: RGR0o738ZBoG8ZvY7DYsEt09WMwZK9GYd3kCxkZlOVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.crl
rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLCoplSBz0wlAPm3SpG0Rkxybx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 09:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD7A0, serialNumber=70B0A8A65481CF4C2500F9B74A91B4464C726F1F
Validity
Not Before: Nov 15 09:23:22 2026 GMT
Not After : Nov 22 09:23:22 2026 GMT
Subject: CN=6af97a0a-cfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:e6:bb:68:70:64:37:56:0a:1e:af:b1:00:
3d:ef:88:4f:45:ea:9e:8b:e9:0b:c9:48:cd:2c:c6:
18:cb:5a:df:60:1c:bf:17:98:89:7a:ef:f8:94:b9:
b6:6c:9a:2f:fa:e4:16:18:7c:9d:93:63:98:1e:db:
48:74:07:92:54:d6:cd:79:9b:50:e6:60:49:06:db:
93:08:1d:11:cc:76:f2:ca:69:9a:c9:c5:fd:6d:11:
62:8f:b1:a1:95:7a:07:4f:ff:0f:70:72:8a:49:b5:
23:46:c3:e8:59:9f:99:11:01:ab:db:63:d3:47:6e:
c4:ac:ee:8b:4e:45:e2:dc:36:ab:14:15:f2:fc:2f:
63:cf:90:f2:11:d1:76:41:ba:4c:54:98:8a:84:5e:
b7:79:cc:f1:58:93:91:98:e5:e1:a4:9e:05:b7:6a:
e3:3b:e5:0b:32:7b:b9:36:a9:5e:5e:29:01:bf:98:
a8:84:b2:80:9c:7c:44:ce:d1:89:54:aa:ea:0d:04:
50:48:42:de:3a:04:86:fd:35:e6:55:4f:c6:19:f1:
af:19:63:3e:f3:b3:50:a4:34:c5:09:7d:d3:b8:e0:
8f:fc:e3:10:11:e0:9c:bc:15:e7:c1:14:d9:26:39:
90:14:fc:2d:c8:4e:0e:93:01:2a:70:61:be:65:80:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:F3:FF:3F:62:03:D6:C5:5D:35:F3:03:7F:C1:71:7C:92:E2:34
X509v3 Authority Key Identifier:
keyid:70:B0:A8:A6:54:81:CF:4C:25:00:F9:B7:4A:91:B4:46:4C:72:6F:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLCoplSBz0wlAPm3SpG0Rkxybx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:1a:30:9e:5f:64:28:86:9f:51:1f:34:9f:00:b9:c9:b3:
f7:0d:50:cf:bc:2c:fd:85:e7:6e:a3:75:f3:ff:89:42:f7:8e:
59:50:29:1b:52:5b:c2:5f:3b:e9:4e:b8:7b:7a:93:1d:8c:72:
56:70:d2:6e:0a:41:af:f8:26:68:1b:db:c1:16:f0:20:57:e4:
c5:fc:32:61:14:f7:50:f8:8a:3a:d2:b1:b0:04:c0:ff:ad:1a:
1d:c2:60:d7:e0:28:fc:32:bc:cb:f3:b0:09:e5:85:d7:99:4a:
d8:f8:99:12:ce:69:06:1c:e1:8f:eb:93:a2:7c:9b:f9:d7:88:
c3:63:ed:b0:e0:74:1b:b4:81:d1:82:e4:40:83:da:44:ec:57:
8c:9a:26:fc:01:9a:5b:85:ad:0e:2e:1d:ff:1b:a8:c3:8d:f4:
6f:04:31:ce:05:d6:3f:66:a6:c9:7f:7f:d4:68:90:2f:12:fe:
ec:8c:5b:51:b1:90:33:19:81:6a:29:e9:fb:f3:57:be:1a:06:
74:29:64:2c:80:c5:2e:26:04:be:2b:95:9c:9b:29:e9:8d:5c:
27:07:ae:7c:f9:9b:49:5f:75:99:3c:53:4c:f2:d1:eb:ac:24:
72:03:73:a4:93:b1:0c:26:06:97:83:b4:30:5c:03:7f:44:8e:
61:de:97:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDdBMDExMC8GA1UEBRMoNzBCMEE4QTY1NDgxQ0Y0QzI1MDBGOUI3NEE5MUI0NDY0
QzcyNkYxRjAeFw0yNjExMTUwOTIzMjJaFw0yNjExMjIwOTIzMjJaMBgxFjAUBgNV
BAMTDTZhZjk3YTBhLWNmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA1ea7aHBkN1YKHq+xAD3viE9F6p6L6QvJSM0sxhjLWt9gHL8XmIl67/iUubZs
mi/65BYYfJ2TY5ge20h0B5JU1s15m1DmYEkG25MIHRHMdvLKaZrJxf1tEWKPsaGV
egdP/w9wcopJtSNGw+hZn5kRAavbY9NHbsSs7otOReLcNqsUFfL8L2PPkPIR0XZB
ukxUmIqEXrd5zPFYk5GY5eGkngW3auM75Qsye7k2qV5eKQG/mKiEsoCcfETO0YlU
quoNBFBIQt46BIb9NeZVT8YZ8a8ZYz7zs1CkNMUJfdO44I/84xAR4Jy8FefBFNkm
OZAU/C3ITg6TASpwYb5lgKcnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6Jnz/z9i
A9bFXTXzA3/BcXyS4jQwHwYDVR0jBBgwFoAUcLCoplSBz0wlAPm3SpG0Rkxybx8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREN0EwL0U5MkM0OTgwREJG
MTExRjE4RkM2NzEwQjBENjZDRUY5L2NMQ29wbFNCejB3bEFQbTNTcEcwUmt4eWJ4
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY0xDb3BsU0J6MHdsQVBtM1NwRzBSa3h5Yng4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
N0EwL0U5MkM0OTgwREJGMTExRjE4RkM2NzEwQjBENjZDRUY5L2NMQ29wbFNCejB3
bEFQbTNTcEcwUmt4eWJ4OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBnFhownl9kKIafUR80nwC5ybP3DVDPvCz9heduo3Xz/4lC945ZUCkbUlvCXzvp
Trh7epMdjHJWcNJuCkGv+CZoG9vBFvAgV+TF/DJhFPdQ+Io60rGwBMD/rRodwmDX
4Cj8MrzL87AJ5YXXmUrY+JkSzmkGHOGP65OifJv514jDY+2w4HQbtIHRguRAg9pE
7FeMmib8AZpbha0OLh3/G6jDjfRvBDHOBdY/ZqbJf3/UaJAvEv7sjFtRsZAzGYFq
Ken781e+GgZ0KWQsgMUuJgS+K5WcmynpjVwnB658+ZtJX3WZPFNM8tHrrCRyA3Ok
k7EMJgaXg7QwXAN/RI5h3pcX
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:13:16 2026 by rpki-client