
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File: 1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier: XNO9EvBtxqCnKs6LVYnoJhGpjnpC4j8qwe3MkF9wu3k=
Subject key identifier: 39:50:ED:B9:93:01:9D:45:02:EE:F0:5B:54:16:4F:91:D7:27:84:13
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer: /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number: 42
Signing time: Thu 03 Sep 2026 08:45:19 +0000
Manifest this update: Thu 03 Sep 2026 08:45:18 +0000
Manifest next update: Thu 10 Sep 2026 08:45:18 +0000
Files and hashes: 1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: deMst+adyJ3twKqMsEWdErEILm+EdEvWvILoLWhxdDU=)
2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: 4kmKcblD4wdTmxGgk/4VMvZd46VPu73tC+rcETmeaGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Validity
Not Before: Sep 3 08:45:18 2026 GMT
Not After : Sep 10 08:45:18 2026 GMT
Subject: CN=6a99339f-f508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:7e:a1:6d:66:7e:e7:cb:3b:25:9c:dd:69:
6c:34:53:f5:d5:9b:6e:79:ab:e0:89:b6:8c:f5:43:
69:0f:e8:a8:84:cd:7c:b8:c9:12:00:f1:48:c4:40:
02:32:70:14:ba:16:1d:23:4f:5f:a3:3b:ad:4e:6b:
55:7d:8b:ca:f2:02:6a:56:41:7e:c0:ec:cb:07:a6:
7f:f4:8f:6f:c8:d7:8d:b5:34:34:13:18:55:78:1a:
32:2e:ee:e0:ec:c5:e1:30:be:70:01:7d:9f:a0:32:
be:60:2d:09:1b:0c:d5:0b:05:12:46:00:c5:68:28:
c1:b0:b9:dd:1a:96:50:ea:97:1c:5c:a8:7e:d1:cb:
93:94:45:14:3b:34:85:fd:6b:ce:d1:a3:3b:64:31:
bd:05:dd:e8:83:56:85:ea:43:72:4b:a5:51:15:2e:
18:65:bc:2f:70:c6:aa:a7:94:f0:10:c1:72:c7:2a:
9a:99:7b:04:f7:c9:f4:ca:66:1f:85:dd:87:25:d2:
98:eb:93:fc:c0:88:93:6e:da:9a:46:25:fb:b4:56:
2b:33:ed:21:f2:6c:5e:1e:22:f1:26:f3:7f:ca:1f:
9c:ca:32:fd:76:ad:fe:0d:f4:b8:ef:e2:79:23:86:
a8:01:59:ee:b2:76:91:f1:1c:52:d4:ee:04:ca:72:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:ED:B9:93:01:9D:45:02:EE:F0:5B:54:16:4F:91:D7:27:84:13
X509v3 Authority Key Identifier:
keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:dc:b2:f7:75:12:ea:25:b9:c6:53:a3:d8:74:82:83:68:7b:
0d:d8:c5:0a:a5:11:d5:7c:e0:ca:9b:b7:1b:8d:83:52:91:68:
ea:a5:81:61:1b:e0:01:d9:6c:05:50:1a:74:1e:09:a2:5a:8a:
9c:dd:55:c6:fe:34:08:04:40:cf:9d:b7:ae:7f:1f:64:2c:75:
cf:10:09:21:61:16:ac:1c:51:cc:fa:75:80:61:c5:fa:96:4a:
ad:a7:88:b1:c5:03:25:88:a5:18:9c:1a:f6:09:cf:2a:33:95:
4f:b9:23:14:0e:08:41:49:e9:62:a9:76:55:b2:15:1d:35:79:
48:b6:41:e3:c3:1e:c9:0b:6a:83:f3:99:40:be:73:11:1a:6a:
70:3b:79:e2:48:97:77:29:8c:65:ab:81:f0:68:d7:07:8a:61:
87:f8:0b:c8:3d:ad:7f:25:c0:ac:aa:42:f3:0a:bb:e4:69:f4:
9d:95:ea:50:e0:59:31:e6:8e:3b:72:05:90:40:e2:2d:bb:1e:
53:92:e9:d1:85:1a:63:ac:70:6c:a7:96:d4:50:3f:d5:af:33:
9f:70:02:bc:f7:8f:5c:6c:8e:05:af:79:0d:ba:ca:ae:4a:31:
e2:80:9d:10:e7:a8:02:5f:f7:b0:6f:9a:ca:ee:74:d8:42:6b:
f8:f9:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:32 2026 by rpki-client