
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier: cBhDRWDDFHfiSk67yOOVqJL176x7AYZg4x1nbqEOyBo=
Subject key identifier: 46:D7:D8:F8:D2:4C:5F:EF:1A:49:E6:2E:0D:FA:B3:91:A2:10:C7:9D
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial: 0BA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number: 0B91
Signing time: Tue 02 Jun 2026 19:07:52 +0000
Manifest this update: Tue 02 Jun 2026 19:07:51 +0000
Manifest next update: Tue 09 Jun 2026 19:07:51 +0000
Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: LtUYGkEWl/dwalPIIbPoDSQdXpXTVntBi14c3CJyoog=)
2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: ioS23iGIP3uzA+1OKUGYBP4QYkMLTLuRrz1j1/Q9s4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2976 (0xba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Validity
Not Before: Jun 2 19:07:51 2026 GMT
Not After : Jun 9 19:07:51 2026 GMT
Subject: CN=6a1f2a08-0f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:d3:3a:84:49:09:fa:18:83:cc:c5:df:da:
76:ac:e7:87:8e:e9:67:33:7d:5c:c8:2c:e2:88:8b:
12:bf:9d:95:a6:85:04:c6:84:95:c6:4c:2a:e5:a3:
fd:8c:1f:fa:37:9a:60:2a:a0:b7:da:a7:03:5e:a4:
52:76:e3:83:69:16:1f:ae:ae:2f:53:a4:66:3d:7b:
04:f0:be:31:29:32:ad:8d:fd:4e:e2:6b:e2:d8:66:
21:91:d1:83:48:3d:bb:48:5d:22:af:b7:0b:73:b0:
bc:94:f1:e0:f6:95:4b:d0:90:9c:10:b0:13:98:f1:
f9:8d:ba:b2:a3:52:a2:dd:cd:e0:5e:7e:63:50:f1:
1d:6d:1d:51:89:bf:d1:b7:33:76:2f:52:8d:4e:da:
5e:3e:45:5d:8e:0b:64:c5:d6:e1:bb:c2:12:10:8b:
d6:e3:9c:2e:9a:41:81:5e:22:3a:e6:53:b9:5a:a8:
0f:14:2a:9b:ec:43:e0:0a:25:ae:b4:bd:b1:a0:46:
6b:4f:2e:0c:1c:92:b5:31:15:60:50:bb:df:6c:61:
01:06:a7:97:f6:ed:5d:89:be:f2:6e:cb:21:00:5b:
7e:b6:60:45:ed:b2:9e:77:62:09:33:31:ef:04:80:
a7:25:84:a7:eb:bc:4d:5d:54:c1:df:ae:0f:ed:b1:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:D8:F8:D2:4C:5F:EF:1A:49:E6:2E:0D:FA:B3:91:A2:10:C7:9D
X509v3 Authority Key Identifier:
keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:bb:30:fa:73:d4:93:7b:83:a5:b4:7f:2f:da:d9:de:c1:
ac:ea:07:30:28:87:83:19:97:0b:da:de:4c:82:58:eb:7e:87:
c3:56:90:68:91:e5:c8:82:18:05:21:99:03:96:cf:35:10:2c:
f6:bf:26:b6:c6:94:0e:55:52:ba:df:bf:b8:65:27:e9:df:4d:
9a:23:75:19:cf:d1:c8:f4:63:40:45:75:60:57:69:f5:93:ac:
58:c5:ab:11:a3:1a:5e:ff:dc:81:60:97:80:a0:82:8e:bb:29:
a8:85:4e:7f:80:1c:e0:67:e5:f2:93:e1:52:3f:51:69:ca:a7:
70:5f:9b:f0:19:37:d8:da:b6:ae:f9:81:7c:13:16:87:2e:60:
7d:6f:2d:71:c8:fb:1b:87:4b:39:f6:50:10:f1:75:a4:90:7c:
ff:68:39:e9:94:6c:a1:5d:bf:56:d4:e8:85:fe:05:b2:a6:72:
dd:64:27:ee:0b:c4:3c:74:3d:ec:73:26:52:4e:7a:33:aa:9c:
48:46:13:68:09:4d:90:11:2e:8f:77:4d:1b:a6:85:18:f8:b0:
85:c7:17:16:09:6f:0b:2c:b1:43:d8:43:69:73:a5:f1:2f:02:
64:b1:89:00:52:ff:3c:df:4c:27:ce:53:2a:64:6e:cd:3c:d9:
0f:d6:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:10 2026 by rpki-client