
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier: 6N5FLv4IhZKcVcsqiGSJk4xvxIqyIhYzifxqjrIDe8c=
Subject key identifier: C5:79:9A:E9:A0:29:FF:F8:0D:DD:D8:F9:19:7C:42:C8:11:FE:27:4C
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial: 0BD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number: 0BC1
Signing time: Mon 31 Aug 2026 19:01:43 +0000
Manifest this update: Mon 31 Aug 2026 19:01:42 +0000
Manifest next update: Mon 07 Sep 2026 19:01:42 +0000
Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: YZaViuJb8WnRChqQP5YsBtqB/clxIl/Mvu6jhJAIa3M=)
2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: 4McE/O+QP2V8R9j++qZmwcXS2m87n+BBuLz8mpv2nxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Validity
Not Before: Aug 31 19:01:42 2026 GMT
Not After : Sep 7 19:01:42 2026 GMT
Subject: CN=6a95cf97-05ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:57:cd:80:50:6a:24:80:d6:82:69:19:38:
ca:a1:79:a9:12:64:89:f9:f9:1d:49:80:9b:41:e8:
3b:b1:e3:66:a9:98:29:80:a8:90:ca:f0:2a:01:6d:
16:c0:27:2e:ba:4d:fb:0a:8c:17:5c:1c:df:f0:05:
63:dd:eb:06:fd:82:3e:3d:92:5a:26:3f:1a:dc:14:
13:4e:23:8d:13:69:b1:63:24:23:51:a6:e9:39:9a:
55:b5:18:76:c5:63:2f:67:c8:e7:65:53:e9:a3:2e:
64:6a:e3:1b:56:34:36:a7:75:14:eb:20:45:f1:da:
30:e9:94:66:d6:93:03:66:dd:c5:95:ec:1a:1e:22:
7b:b9:83:77:e0:cb:12:21:ab:c0:88:1f:89:85:28:
05:26:cc:62:15:bd:7f:0f:a3:43:71:56:40:13:9d:
b9:5a:a9:d4:b4:e9:a3:bf:73:b0:e2:a7:a2:c0:23:
5f:eb:c4:dd:7b:a0:99:75:de:ab:95:4e:26:06:60:
c7:43:3b:e4:9c:b5:26:8b:90:ce:5d:02:85:7f:de:
9c:dd:60:30:a9:5c:a0:0e:38:31:95:1c:ee:f9:36:
c1:9b:24:16:6e:77:a3:43:d3:57:df:ce:64:44:ba:
0c:bf:6c:0b:89:95:51:b5:b0:96:7b:3f:4f:f2:34:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:9A:E9:A0:29:FF:F8:0D:DD:D8:F9:19:7C:42:C8:11:FE:27:4C
X509v3 Authority Key Identifier:
keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:1d:6c:a7:ce:cf:e2:42:15:8a:27:6c:16:27:61:60:09:
a4:9f:6e:13:96:cf:87:bb:8f:f4:16:93:4c:3c:0b:1d:b6:1f:
86:d4:54:a6:95:30:39:17:ca:76:eb:a6:c6:a1:30:6d:d4:81:
21:8f:ae:3e:33:e0:8b:bd:46:1d:ca:fe:c3:7c:2d:d8:de:87:
4c:ee:0c:90:97:f4:b6:40:16:b6:9a:c8:b4:16:e5:57:95:32:
61:24:05:e7:d0:e1:58:7b:c2:5f:68:44:c6:ce:e8:42:df:a5:
8f:0a:11:66:43:45:e0:9d:44:b3:d5:ab:8f:1a:b0:2e:eb:15:
37:67:dc:82:e4:c9:f8:19:88:70:f8:3a:1a:e2:9e:c2:1a:1c:
24:c2:5f:81:98:06:e9:ec:dc:3d:2a:41:de:3e:8f:ca:5f:d6:
4d:a3:4e:6f:1c:51:6b:cd:eb:c3:8d:a7:db:e5:fc:12:cc:b8:
f8:68:31:eb:26:12:2d:9f:74:b3:da:d3:cd:f7:25:cf:95:7a:
8a:65:88:1e:c4:cf:5d:40:73:7e:bc:a7:b2:41:b1:1c:bb:a9:
52:5f:50:8d:fc:7a:fd:80:4e:f8:03:ae:03:91:09:f2:f7:fc:
79:f3:47:8b:df:ea:ae:22:a1:e1:cb:9f:84:8c:30:61:e0:f7:
2a:65:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:42:00 2026 by rpki-client