
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json)
Hash identifier: uBIxKWJgMR3067gm90v3/ETMcO5NNG4QLY81SPmUyNE=
Subject key identifier: 2C:3E:29:C2:74:CC:3F:74:BE:B7:34:FD:49:77:6C:90:2C:3B:29:2F
Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42
Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
Manifest number: 074C
Signing time: Tue 18 Aug 2026 22:04:51 +0000
Manifest this update: Tue 18 Aug 2026 22:04:50 +0000
Manifest next update: Tue 25 Aug 2026 22:04:50 +0000
Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: KCzdJmeijn21HqeLMz1Lt/qDmqqz5sYQQr8m6FSkPsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl
rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942
Validity
Not Before: Aug 18 22:04:50 2026 GMT
Not After : Aug 25 22:04:50 2026 GMT
Subject: CN=6a84d702-1b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:b9:30:8f:0e:dd:06:0d:a5:0c:86:7f:9a:
c1:ad:05:b4:35:85:08:67:05:54:21:48:c4:c7:01:
74:6e:44:91:ef:8d:00:0d:03:0d:df:ac:22:5e:a3:
c6:37:33:a5:ff:22:c5:b8:a6:e1:f4:e1:29:27:46:
72:1a:77:ff:c3:da:fa:2e:f3:eb:67:a9:7e:62:e3:
3b:79:bd:47:57:4d:87:9f:8c:e0:39:13:a6:2e:41:
d1:73:51:9e:1b:37:2f:a0:f0:a9:8f:3e:b3:21:09:
7f:e8:70:6c:dc:fe:9d:c2:d6:dc:87:26:2c:5f:24:
5d:30:3e:6f:ba:28:25:d1:19:2d:84:5e:3a:7d:ec:
0e:a7:b8:4e:42:09:d3:16:e2:2e:67:95:10:5d:20:
e5:bc:c2:7a:72:7c:33:60:f0:a9:0e:3c:4d:f7:34:
5e:7d:be:57:54:3d:09:c8:c6:5a:4a:53:18:c9:03:
ff:bb:07:ae:a8:03:ed:4f:cc:bc:02:aa:c9:b8:6d:
a2:c4:7e:ae:05:17:f8:af:92:bd:eb:72:28:da:21:
a8:0d:49:8e:62:63:61:bb:13:02:3f:f3:1a:08:96:
21:a5:e7:41:70:15:1c:d2:dc:90:22:ac:3f:f0:ad:
1d:b6:31:86:07:13:7c:fe:83:08:ee:21:e6:14:f8:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:29:C2:74:CC:3F:74:BE:B7:34:FD:49:77:6C:90:2C:3B:29:2F
X509v3 Authority Key Identifier:
keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:eb:c7:4c:65:78:c4:5f:c5:1a:77:5d:e7:b5:17:4e:17:5f:
af:fe:cd:cd:f4:22:b6:90:aa:9a:b7:01:e2:ae:82:73:8c:18:
fe:8d:7b:ac:91:48:7d:08:37:d3:66:53:78:02:ed:fd:73:a2:
49:3c:d7:c9:b3:bf:50:c5:58:5f:3b:b5:35:de:45:91:f4:a8:
4d:cc:d7:6d:96:92:0c:56:dc:72:f3:04:0a:a9:a1:9b:48:4e:
42:e0:7b:c9:4f:bb:48:ac:a1:09:16:88:db:a5:b8:80:b2:28:
3e:94:5b:eb:0e:de:2e:bc:8c:2a:ce:af:aa:55:e5:b8:c9:f3:
25:33:47:52:71:b7:4e:0c:c9:0c:ce:ff:59:31:f5:7f:58:bd:
2e:a3:ed:cf:ff:f6:09:7f:53:32:d4:d4:80:47:bc:cd:b7:51:
81:ae:49:4d:3f:ab:9f:98:1a:4d:99:eb:a6:d2:73:47:76:a3:
e4:9e:47:35:52:85:77:e5:aa:02:90:31:32:42:fa:bb:d4:f7:
62:be:a1:85:a1:5a:a8:cc:ad:53:8a:24:52:98:f8:f9:0c:76:
c0:84:cb:01:65:8b:9f:32:55:78:02:c2:70:8a:81:8f:57:67:
30:d0:8d:e2:a9:1e:7f:85:de:3b:63:cc:9a:7e:3f:89:8b:38:
dc:f0:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:00 2026 by rpki-client