
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier: hq3J/1R4gNs1P//PGn6+XUg8UmPWE2/cGe9Ufu/EpsE=
Subject key identifier: 15:E5:48:1C:94:14:06:37:6C:0A:52:30:75:0B:C1:EB:32:F1:22:0D
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number: 0252
Signing time: Fri 11 Sep 2026 02:24:09 +0000
Manifest this update: Fri 11 Sep 2026 02:24:09 +0000
Manifest next update: Fri 18 Sep 2026 02:24:09 +0000
Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: 4nkdETy0syeEzoe/dvy70hRIoTtg2aCI6WXMJwGkkUc=)
2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: yd8nZQYXpuBuXMJow036oPSXKDSenHOrq9DNYBNpxgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Validity
Not Before: Sep 11 02:24:09 2026 GMT
Not After : Sep 18 02:24:09 2026 GMT
Subject: CN=6aa36649-3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:03:28:86:03:45:b9:97:14:0a:f6:d3:ca:
bb:b0:26:6b:15:9f:16:5d:84:a8:60:16:8a:21:ca:
82:51:69:4a:fc:35:25:d4:ff:b2:bf:ba:03:c0:7e:
9e:97:3c:36:c6:14:e8:15:db:43:12:bb:01:ec:7f:
08:a9:11:94:f7:05:aa:3d:83:50:d9:11:0f:43:c4:
bc:7d:98:1b:d7:26:a2:f9:08:2a:f5:bf:be:9b:95:
c4:06:4e:8a:84:c6:8f:84:62:87:db:b5:e8:90:95:
15:28:67:e5:bf:07:54:53:70:2f:98:87:b9:b5:d7:
99:76:42:af:d4:c3:d5:40:7a:97:a4:8b:f0:b2:cf:
a1:f4:3a:a7:a4:d9:78:ae:d3:6e:e7:8b:d0:81:06:
5e:56:ab:2b:ec:cd:5c:53:f7:af:d9:24:f1:b1:d8:
62:32:bb:db:28:82:90:33:e9:21:06:0e:d0:65:30:
04:56:2f:dc:d7:01:c6:c0:7d:30:a4:a0:7d:d8:66:
17:cc:bf:e0:7c:6e:92:c0:f6:63:e9:51:a5:9f:02:
71:77:da:ec:57:c2:d9:23:32:31:2b:73:c2:83:bf:
cd:39:93:28:50:23:77:5d:39:2a:45:67:ae:f0:ef:
e8:9d:91:a9:ee:9e:26:d1:22:0a:ea:23:1b:f2:e4:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:48:1C:94:14:06:37:6C:0A:52:30:75:0B:C1:EB:32:F1:22:0D
X509v3 Authority Key Identifier:
keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:82:38:4e:1f:02:92:21:c3:5e:c9:0b:5f:35:be:80:51:
ce:cd:3d:6c:35:95:da:14:75:ff:fc:2b:ae:0d:99:fc:1c:c0:
43:a4:05:b9:45:ea:8b:f5:5d:0c:9a:aa:d7:bf:0a:dd:c2:5a:
71:91:c6:d3:a2:4b:7b:65:5e:b3:3b:75:f0:4a:86:c9:2f:6d:
ed:57:db:0e:07:ca:fe:02:6d:98:90:66:48:9d:da:95:04:a8:
0d:ca:7a:92:a9:d0:63:05:f1:90:1a:43:db:55:f4:b2:79:4d:
a3:53:4a:6e:ef:2e:52:c7:04:9d:44:df:0c:6a:00:26:3f:f0:
e0:06:da:7b:e3:07:b0:7f:b9:9e:3a:c7:e6:cf:6b:79:cf:61:
d9:20:e3:c1:8e:e5:12:df:67:70:7b:f9:c8:0b:a3:88:11:d6:
1b:b1:75:c0:12:a5:b7:8f:eb:46:0e:92:86:e2:7c:91:7b:75:
25:74:4b:93:67:c6:85:a9:db:90:f0:55:3e:24:61:75:38:a3:
9b:74:61:a6:63:92:96:66:5b:49:b4:cf:2f:6f:c3:c2:43:8e:
75:ae:09:c2:1a:85:ba:70:b7:8e:6b:24:f0:f0:84:53:0f:4a:
e5:c8:8e:e5:a2:88:6a:d8:7d:45:41:b6:50:2f:a0:38:89:e5:
a5:cf:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:02:04 2026 by rpki-client