
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier: E8OJ3Qns4wcg9qu/r/x2b1uBgR/ENmaVk14uLLRjiWw=
Subject key identifier: A8:B3:C5:68:AF:93:BE:C1:B3:2F:90:01:C3:BE:6B:1C:08:F6:0B:C1
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number: 03DC
Signing time: Sat 13 Jun 2026 02:05:12 +0000
Manifest this update: Sat 13 Jun 2026 02:05:11 +0000
Manifest next update: Sat 20 Jun 2026 02:05:11 +0000
Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: p+OTwCWoZh4VRNCp/JcHbkiM1cg3RxmA6RNE3aejxsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Validity
Not Before: Jun 13 02:05:11 2026 GMT
Not After : Jun 20 02:05:11 2026 GMT
Subject: CN=6a2cbad7-a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:eb:97:b8:91:77:cc:de:72:b6:5b:7e:49:
fa:de:0b:fc:c3:ae:90:79:e2:8c:4d:0e:43:8f:71:
d7:f2:90:84:c9:ed:c5:2e:77:52:e7:eb:22:a8:2d:
1b:57:26:4c:ad:cb:18:35:56:e9:75:ca:ad:33:56:
e0:4c:07:2a:6c:32:9e:96:dc:eb:f1:05:61:fb:17:
b7:92:32:7d:d5:5a:10:eb:13:4e:1c:79:55:2b:08:
30:cf:13:24:e0:6c:78:bf:e5:35:30:0a:62:bc:11:
20:d4:69:eb:c7:2e:c8:6e:14:34:2b:87:91:27:65:
1c:69:52:4b:fc:e5:79:fd:6a:8e:f0:c1:7e:75:00:
5f:53:98:b3:2e:03:12:15:35:f0:bb:52:db:52:99:
a4:a2:9e:31:c7:72:d4:76:b6:3a:e1:4d:f5:c3:b8:
df:09:d3:89:51:55:a8:f4:a4:fa:c8:9e:5a:e8:69:
f1:ab:13:71:16:45:92:3a:07:59:60:3e:7f:e8:87:
81:4e:fe:bd:d5:4c:9a:f7:eb:68:71:37:62:21:9d:
37:ac:07:2f:14:2c:8a:51:e5:06:45:b8:28:73:9b:
bd:81:d4:3f:2b:e0:83:52:ff:56:4c:c2:22:1c:9a:
58:11:02:ba:a8:1f:1e:88:c3:3b:23:23:e2:a5:64:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:C5:68:AF:93:BE:C1:B3:2F:90:01:C3:BE:6B:1C:08:F6:0B:C1
X509v3 Authority Key Identifier:
keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:5b:74:4d:57:27:30:c4:3f:18:4d:ec:a0:4d:7d:83:36:
a7:c8:3b:97:33:57:98:a5:0f:e6:12:bc:62:d7:11:8c:d0:19:
16:8f:9f:58:ef:ae:ef:00:0c:5e:57:d3:b9:64:40:9b:a8:46:
7a:53:11:39:2e:bd:32:d7:e8:0a:04:42:a3:c0:4f:7f:8f:4c:
18:2b:9b:52:b5:4b:f2:cb:b0:2e:56:0b:c6:bc:ac:4b:ad:3e:
d0:11:10:82:e1:fa:b6:4d:5f:3a:f1:7f:bd:f6:f2:b2:c0:1a:
86:0f:fb:3e:8b:67:00:56:2c:4d:97:65:2c:16:83:fd:01:3e:
aa:71:8d:b8:ac:4b:b5:83:49:a2:fc:68:44:2c:70:46:7e:54:
d6:ff:6b:68:0d:3c:55:0d:f3:ba:4e:e9:33:08:ec:37:d4:c8:
9a:5e:3d:b4:ba:df:75:8d:32:d3:95:05:60:94:cf:9d:58:d7:
a4:1a:10:db:c0:e3:d5:84:e7:5e:b0:12:e9:c7:b6:ed:88:a5:
67:bc:ef:5f:3e:8a:aa:1d:70:95:fa:dd:2d:a7:da:bc:38:bc:
57:0f:3d:2d:81:ab:32:13:74:69:57:90:31:4a:d4:25:80:05:
d6:30:e2:21:b3:08:08:d7:ef:52:fe:1e:7d:1d:5c:a2:43:30:
14:d3:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:39 2026 by rpki-client