
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: 2C8goYPGsGNvv8mscJNBXoYecjWuZ0s562hZ0mHhtJo=
Subject key identifier: B7:B1:83:24:36:79:0C:B1:C4:EC:57:5D:2B:E2:91:18:D3:6C:E2:94
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 05BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 05B2
Signing time: Mon 14 Sep 2026 22:54:36 +0000
Manifest this update: Mon 14 Sep 2026 22:54:35 +0000
Manifest next update: Mon 21 Sep 2026 22:54:35 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: dYjCKtuN68AsBY+4DRQMuCgXj308vk/Tz2wbE1urU3M=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: +7NkBk/u5npDwrIEbh3l98hKn0nLCCDAbxWMC/GKCXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Sep 14 22:54:35 2026 GMT
Not After : Sep 21 22:54:35 2026 GMT
Subject: CN=6aa87b2c-853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:ae:c2:23:01:a4:28:85:e4:b6:04:b4:dd:
cb:0f:d6:32:1f:32:98:03:8e:58:de:c7:f4:50:63:
04:65:32:99:db:66:80:6e:b1:c4:2a:5c:31:55:b4:
2e:26:c4:55:f1:80:c2:5c:09:85:7b:4e:98:ac:97:
b0:7c:67:f3:43:94:90:32:4c:0a:cc:af:b8:4a:9c:
60:52:2c:27:e5:fb:4e:30:82:cd:bc:33:59:41:2f:
5c:bd:0e:7f:4e:a4:e7:47:8b:91:30:c8:56:fb:8c:
b0:a1:c2:3b:ed:e5:c6:28:bc:e2:99:10:cf:b2:1f:
21:3c:1a:63:ff:4b:72:6b:e4:02:02:ac:b2:cb:2a:
48:fa:46:e3:e5:5f:f1:5c:a1:03:d5:61:50:ab:c6:
0b:61:81:68:8c:e4:fc:da:cb:d4:78:33:12:53:51:
b2:ab:02:28:49:57:85:96:d8:59:e2:20:be:ed:f1:
36:9f:0a:6e:45:17:99:cb:07:98:ca:63:74:58:b4:
51:40:0e:8a:29:a8:9d:f3:1c:1e:43:6a:8f:1b:f1:
7d:60:6c:ac:fb:2f:98:68:61:92:8e:02:0d:4a:ed:
ea:65:8f:fc:ae:21:da:03:36:0e:67:0f:df:16:2a:
1b:a0:a0:66:48:8c:de:9c:50:74:c5:80:d7:c1:84:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:83:24:36:79:0C:B1:C4:EC:57:5D:2B:E2:91:18:D3:6C:E2:94
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:f3:9e:ef:cf:f5:e6:7b:0a:fb:d0:7d:80:81:43:70:0e:
20:db:6d:c8:3e:f7:09:43:aa:99:6b:d2:9e:66:0f:47:ba:64:
2b:a8:55:3d:f7:96:be:8a:23:07:98:57:39:21:fb:b3:15:87:
be:2d:28:2a:84:ed:ad:29:6f:81:82:8e:18:1f:e4:14:d0:90:
a0:8d:26:27:86:0f:04:e3:d5:14:8c:f8:6d:3c:62:e7:6f:27:
1c:c1:8a:4c:f0:ea:51:b2:70:14:a4:f8:80:3b:4e:39:7e:b2:
30:4a:01:22:de:d2:a6:c7:11:da:02:01:ea:43:81:78:0d:cb:
13:cd:40:1e:91:b0:4d:9a:0c:dd:1e:f7:b4:e2:ee:a8:82:ea:
5f:d0:12:8b:52:1d:ad:ba:b6:22:ef:c6:eb:9f:b2:e9:a0:ee:
6e:1f:f8:47:1b:2a:7b:93:6b:b8:9e:1a:70:a9:a5:be:f3:17:
57:bc:b3:ea:bc:67:0a:64:4d:9f:e4:d9:2c:9d:af:c6:96:12:
56:e9:6c:94:1b:cd:22:87:76:b4:a1:cf:15:1f:fb:fd:f7:03:
4c:7f:1a:f9:df:2a:6d:c9:c1:ec:88:92:dc:bf:bc:2e:01:51:
4b:5b:3c:15:e0:2b:57:0f:e3:b6:5f:11:aa:b6:85:d4:66:50:
59:cf:6b:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE
NzdGQjkyN0YwHhcNMjYwOTE0MjI1NDM1WhcNMjYwOTIxMjI1NDM1WjAYMRYwFAYD
VQQDEw02YWE4N2IyYy04NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JeuwiMBpCiF5LYEtN3LD9YyHzKYA45Y3sf0UGMEZTKZ22aAbrHEKlwxVbQu
JsRV8YDCXAmFe06YrJewfGfzQ5SQMkwKzK+4SpxgUiwn5ftOMILNvDNZQS9cvQ5/
TqTnR4uRMMhW+4ywocI77eXGKLzimRDPsh8hPBpj/0tya+QCAqyyyypI+kbj5V/x
XKED1WFQq8YLYYFojOT82svUeDMSU1GyqwIoSVeFlthZ4iC+7fE2nwpuRReZyweY
ymN0WLRRQA6KKaid8xweQ2qPG/F9YGys+y+YaGGSjgINSu3qZY/8riHaAzYOZw/f
FioboKBmSIzenFB0xYDXwYTnXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLexgyQ2
eQyxxOxXXSvikRjTbOKUMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB
NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW
ajJMTDV3V0ducjdYZjdrbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg/bznu/P9eZ7CvvQfYCBQ3AOINttyD73CUOqmWvSnmYPR7pkK6hVPfeWvooj
B5hXOSH7sxWHvi0oKoTtrSlvgYKOGB/kFNCQoI0mJ4YPBOPVFIz4bTxi528nHMGK
TPDqUbJwFKT4gDtOOX6yMEoBIt7SpscR2gIB6kOBeA3LE81AHpGwTZoM3R73tOLu
qILqX9ASi1Idrbq2Iu/G65+y6aDubh/4Rxsqe5NruJ4acKmlvvMXV7yz6rxnCmRN
n+TZLJ2vxpYSVulslBvNIod2tKHPFR/7/fcDTH8a+d8qbcnB7IiS3L+8LgFRS1s8
FeArVw/jtl8RqraF1GZQWc9r2w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 15:01:18 2026 by rpki-client