
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: arToeReZoO16B8BwmCwlA6ugWBGT+1bkXI5nnCg8hjc=
Subject key identifier: 6B:14:3C:86:C9:DE:D9:21:B5:F2:27:2E:9E:3F:FC:9A:32:C9:EF:8A
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 02A9
Signing time: Mon 05 Oct 2026 01:49:36 +0000
Manifest this update: Mon 05 Oct 2026 01:49:36 +0000
Manifest next update: Mon 12 Oct 2026 01:49:36 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: FGMoCBz5/cbj1LfJv6yjHdsHR8oq3vl9euLp7PTj2mA=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: oLcbULM09SoM8P3NXBEFz9GKgs07j0+fqmAjxB04G7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Validity
Not Before: Oct 5 01:49:36 2026 GMT
Not After : Oct 12 01:49:36 2026 GMT
Subject: CN=6ac30230-8861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:47:92:67:c6:85:f8:fc:fd:c8:3d:10:14:
94:40:0b:1f:24:c9:46:6d:6d:df:bf:f8:2b:a2:8f:
1f:6b:af:d4:2d:07:1a:95:b5:71:57:cf:43:ab:51:
9d:e5:61:33:d9:85:fc:17:ec:ff:9e:aa:5e:2d:f5:
d8:5a:72:1f:c3:f9:b5:b9:69:82:07:98:18:c5:67:
e7:60:9a:19:39:fd:23:e4:04:ec:9e:0a:cf:a7:c0:
67:81:99:58:19:4c:c3:b4:8c:6e:0c:d5:df:9f:42:
fd:4f:67:d9:c9:06:b3:95:85:5a:f7:90:dc:5a:73:
5a:0a:24:88:c4:2c:6c:7e:6f:df:00:a2:36:60:f6:
ff:1c:05:c7:1d:cc:93:99:ee:df:08:ad:df:0a:aa:
4f:bb:99:e5:78:2e:98:ad:7a:18:ab:24:bc:6f:1d:
cc:e3:1f:76:17:39:47:6a:8c:75:93:52:a4:35:e1:
80:d8:c1:c0:eb:8e:26:c7:6d:7e:0c:25:79:72:e8:
22:7e:44:d3:35:8e:a3:70:33:29:1b:9f:ff:72:21:
ac:a0:60:c8:eb:35:6f:f9:c5:07:ef:37:6e:99:24:
9f:13:09:f2:04:9b:ad:ed:a2:9f:72:f3:ee:e5:a6:
6f:85:67:f0:9b:97:65:1b:5d:fc:ec:07:f0:13:62:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:3C:86:C9:DE:D9:21:B5:F2:27:2E:9E:3F:FC:9A:32:C9:EF:8A
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:99:a9:b6:ae:85:c0:6b:d0:b0:7c:fc:49:b2:75:88:bd:36:
29:37:71:1d:a7:60:40:c3:18:01:b3:29:cc:db:fb:d7:01:19:
06:db:bf:fb:97:24:13:36:cd:c5:17:90:af:86:81:3e:38:2c:
34:60:d5:dd:fb:0b:16:02:67:67:2f:f6:a4:bc:70:f0:a8:79:
a2:0d:97:94:c4:76:9c:82:27:d6:97:02:df:7c:65:ea:18:6a:
96:ae:23:49:cf:a4:77:53:7a:ce:4b:61:bb:6d:39:23:50:a9:
a7:70:7c:f2:dd:9c:cd:4f:f9:59:04:13:74:90:01:a5:0f:95:
f7:79:14:23:23:3c:42:1f:e7:03:ab:04:b5:cd:c6:19:72:bf:
a6:55:7a:82:2c:f8:8a:ce:b3:6a:dd:31:f6:ff:6b:6d:40:d1:
b2:f8:24:69:63:19:6c:55:57:72:e5:2b:f1:1e:a1:c8:e1:88:
e8:ca:a8:5f:d6:f7:e2:a1:98:f3:ba:3a:c9:b2:7b:98:5e:8e:
19:96:19:36:d1:d4:17:f5:61:ef:91:3b:80:c7:53:fd:82:93:
e6:56:da:17:e4:c1:a3:9a:41:df:d6:30:fc:5e:20:e6:9b:42:
55:b0:70:19:60:9e:d1:77:e2:aa:34:47:95:73:83:0b:27:db:
a4:ec:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:33:30 2026 by rpki-client