
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier: kFOyvXMqTdAk/pzYsQM090KeiYW+5CnxQd7XjzGLwIw=
Subject key identifier: 74:B6:27:C7:7B:64:EA:84:E9:53:EF:DC:56:E3:71:2A:08:5C:05:0F
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial: 0489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number: 047D
Signing time: Wed 19 Aug 2026 00:28:23 +0000
Manifest this update: Wed 19 Aug 2026 00:28:22 +0000
Manifest next update: Wed 26 Aug 2026 00:28:22 +0000
Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: 4tub+d1j1/yVfKifLu87c0qQzCS6SSQHCU3H6UUWcmE=)
2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: boY95/F6jAr6/89pfz1ZqR8pyyfkr02tE223Jg5btWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Validity
Not Before: Aug 19 00:28:22 2026 GMT
Not After : Aug 26 00:28:22 2026 GMT
Subject: CN=6a84f8a7-e23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:dc:85:f3:0d:9f:db:9d:d0:9c:cf:8b:f3:
a6:c8:c2:f6:c6:22:23:cc:39:ab:61:9d:04:27:26:
8d:c5:6e:f2:e5:50:96:0a:dc:77:28:04:a0:b9:b1:
95:08:db:cf:70:b5:d7:25:28:5e:b9:1b:fb:b5:52:
0b:b5:f7:53:da:a8:df:0f:2e:61:7a:91:96:e5:52:
89:81:75:b2:98:8f:26:1f:a0:67:71:a8:f4:3a:25:
65:3d:80:90:c0:bd:77:02:72:c4:c2:8d:08:1a:18:
27:90:5d:4d:94:a2:20:24:0a:94:e8:8d:2e:81:40:
b4:91:be:0b:81:bb:39:b3:e6:46:09:8f:a9:6c:0d:
b3:10:f8:ae:9f:26:e9:9d:3a:03:5e:ca:fa:96:9a:
60:09:5d:e0:78:bc:98:d4:7d:ff:a8:37:7d:a7:2b:
45:c8:36:81:83:5e:db:02:d6:7b:5a:d1:d3:15:6f:
d9:01:5a:0a:d9:8b:a4:a2:45:2a:5c:01:87:68:9e:
7d:58:40:02:74:4b:34:96:9a:89:36:ce:82:33:0d:
a5:da:2f:05:56:eb:69:90:72:60:02:a8:52:ab:6e:
ee:fb:79:65:96:8f:8b:08:fb:3f:e1:78:fb:7f:c7:
99:ed:34:b5:de:41:7d:5a:70:9f:8d:97:db:c1:9e:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:27:C7:7B:64:EA:84:E9:53:EF:DC:56:E3:71:2A:08:5C:05:0F
X509v3 Authority Key Identifier:
keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:75:02:22:f1:0c:de:88:d8:e7:c8:f2:ca:4a:6f:58:73:4f:
2a:42:89:9a:40:ae:25:86:09:22:db:c4:7d:df:44:b0:95:94:
c5:5c:66:c1:b9:8d:5c:00:73:51:e3:31:cc:96:9a:8c:f0:3b:
f4:44:72:25:e1:44:37:76:27:2f:c2:53:00:77:20:b0:c9:42:
4b:b9:3f:e3:de:fe:a4:78:10:95:42:10:5f:d7:58:47:d8:6f:
97:57:1a:a5:a3:67:ec:3e:c1:bd:af:c0:8f:03:43:fa:5b:6d:
95:dc:ab:7d:7d:3a:6f:5d:44:04:a5:f8:a2:26:59:ba:7a:43:
74:bc:41:26:c7:c2:8b:e2:cc:51:a1:e3:cb:ac:77:3e:42:8b:
8b:d1:6d:42:0b:ac:85:53:26:27:25:c4:38:33:46:5b:a5:cd:
8b:c3:70:74:aa:55:e0:16:82:96:a8:0c:29:80:c0:c6:f7:53:
ec:52:fb:b1:86:00:31:8e:5b:3b:81:31:1c:15:44:8e:3b:4e:
2c:87:c4:52:e2:79:a8:a0:54:c2:c4:8e:aa:07:24:81:25:69:
e3:ca:7d:36:2e:1e:7c:a2:b5:ee:6b:ee:6f:ff:67:5c:ed:f9:
c7:c7:c3:2c:5d:a3:2f:a9:02:66:c5:7e:01:5a:2e:e7:c1:8c:
0b:8c:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:53 2026 by rpki-client