
$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier: 38FYxKNlBbfJdKAMDkZ+f9i6AZdWbTh8/Oc2LzxGe4o=
Subject key identifier: BE:99:10:F2:B6:80:FD:86:B8:1D:AE:CA:A7:65:F3:9F:C8:FA:80:4D
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number: 01A6
Signing time: Mon 02 Mar 2026 02:06:36 +0000
Manifest this update: Mon 02 Mar 2026 02:06:34 +0000
Manifest next update: Mon 09 Mar 2026 02:06:34 +0000
Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: i5ycjQzJy7OvdOHeDXeHzXpYcHfvxsw7IgpT7/ECY/k=)
2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: 00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Validity
Not Before: Mar 2 02:06:34 2026 GMT
Not After : Mar 9 02:06:34 2026 GMT
Subject: CN=69a4f0ab-7ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:55:83:c3:06:44:8a:11:40:68:fb:9a:e8:
19:8f:0d:27:8c:e9:11:b2:27:fa:09:b5:c5:9b:32:
9e:bc:e2:de:85:d6:aa:be:b1:be:6c:c6:3f:56:e2:
59:a6:26:36:6a:80:77:73:82:73:9a:71:a4:8a:b4:
e9:07:a5:37:9d:3a:b0:82:83:2c:7e:57:db:d9:86:
8b:ce:21:7f:db:ce:ba:a4:96:67:c6:8e:a0:fc:57:
4d:e4:04:da:61:cb:e2:a8:6f:70:f0:90:d6:30:dc:
09:9d:20:73:07:dd:5c:41:64:f4:36:bd:e1:ed:a3:
92:d6:8e:10:42:72:79:16:0b:b4:73:74:df:7a:7e:
c7:11:ec:ce:fd:4b:25:04:ed:5d:76:bc:ef:59:55:
1e:f2:09:7a:ba:a9:49:32:ed:73:4f:8c:df:6c:07:
1e:be:77:db:da:85:27:e8:c3:bd:81:05:ca:51:1d:
f9:85:55:a2:33:83:70:9e:64:5b:37:a5:96:8d:9f:
a8:4c:7d:aa:d7:e4:a1:fc:18:f3:ff:73:c3:0f:1e:
39:cd:ea:dd:0d:20:f5:8f:ab:ee:51:d8:cd:d2:cf:
91:f5:ef:63:e0:70:bd:0e:77:c6:2d:b3:ca:31:b2:
ec:23:89:a3:9e:00:1b:88:9d:a6:8f:a3:ef:dd:07:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:10:F2:B6:80:FD:86:B8:1D:AE:CA:A7:65:F3:9F:C8:FA:80:4D
X509v3 Authority Key Identifier:
keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:82:43:94:e6:1b:5f:d0:dd:7a:08:96:83:88:41:69:30:a3:
fe:97:08:6e:7e:fa:15:7a:2d:aa:a9:54:04:05:f5:d4:ac:30:
69:f9:96:33:ac:25:b3:d9:6d:3c:c0:27:d7:3d:08:91:40:8d:
dc:94:8d:15:94:44:5c:83:3a:6b:c7:fb:24:88:36:c7:f7:28:
16:4b:01:58:fa:84:80:fe:8f:84:71:57:8d:f2:8f:3c:47:8c:
1b:bb:e7:c4:36:f1:7d:ba:fe:4d:33:ff:7c:bd:ac:9f:5f:82:
4b:e1:d7:41:22:98:1a:1b:cc:f6:e5:80:f8:39:4f:5e:d4:3e:
42:ac:7f:e9:ac:ed:3a:29:e1:4b:47:7b:70:e5:b9:65:5b:c0:
14:d7:2c:c6:bb:bf:fa:c4:d1:b6:ff:da:68:cb:1b:38:fc:3b:
f1:47:b6:e9:17:b9:34:87:9d:85:38:e1:2d:9e:84:77:2e:41:
74:07:d3:f2:ae:9f:5f:ae:d7:82:f9:55:fb:e3:b5:95:0e:4f:
5d:ef:5c:2e:4d:73:9e:98:fc:84:16:89:ff:3f:52:23:7c:dc:
3f:8b:82:4a:a4:f9:cd:33:51:18:d7:88:bb:f0:cc:13:6c:69:
0a:09:47:7a:e4:de:22:30:5b:a0:91:ad:8d:00:5f:d0:d1:b3:
f2:ce:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:15 2026 by rpki-client