
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier: Cmz9nta2f5DLcvuKaq9GnmIIzg5pCucbdyIm1F5WpE8=
Subject key identifier: 3A:7A:C4:3C:9F:A8:30:A1:50:C7:E8:2B:B3:0F:9A:CB:C2:53:A3:5D
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number: 027C
Signing time: Fri 09 Oct 2026 02:48:13 +0000
Manifest this update: Fri 09 Oct 2026 02:48:13 +0000
Manifest next update: Fri 16 Oct 2026 02:48:13 +0000
Files and hashes: 1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: ejpycMul5TniLxZ6BkP4rzKiFlFJFQCZs5JgeqV8wWo=)
2: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: ZUZGRqzABF3e0vVh1u5ovpeNC6Jdx+LCWvAUVh0diJ8=)
3: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: CV2Ah2EheqVgYD3smx7l67bOLL4aEoMWAZ6LiDXLGYU=)
4: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: qfIgVPe/LxXZegiY3OPJ2qs6ZgHHnZ2Bm9mQCgyt9nk=)
5: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: CFxEqODtPIM78XqoJNJ4wLRkngw17N28FutDZmF3VNQ=)
6: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: f+7hbFu2v1z1/CI2FBI+l9ik9Oq5JXZ77of4oiG/jFU=)
7: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: IC6S29BDCA3ebJHkBP133EcDGdXxl8/oyFCmOevksxg=)
8: 616950CE619411F1AAF641588347A888.roa (hash: 85l6JVvihxAkzulND/6hVXZpBAFkUy/kNDU9a1Amuro=)
9: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 65XWf2ICyot2hiO2LgcHuRKF3Gi9BMxT6EzYSw7Gng4=)
10: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: gpZAC3B4cf0P/imDYdwj9wYrl+UznoKvZqgWUfxAVec=)
11: 4A122A3C663E11F1833519836C47A888.roa (hash: s1J2I1iS7t0NO7B3FkWj76CTzugstD7J6jKlwLSSwgo=)
12: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: g83NG1HZfiJL+vcjzqOivBUnHMB1ELqSwaUNsJNE1VM=)
13: 9FCDE686692911F0882CE164C4F9AE02.roa (hash: q1atvLCPmFeISYOaPa6hcCxxU8WtvI4/Bj2pv4TpJfs=)
14: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: wkvyO2o6LF9oqZ2WfiFlM73GqnUxri239jf1iKk7alc=)
15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: hQK+5lOgMzpih2UWUzxKi+xGcJjqrXUJ3V2GWbdrHec=)
16: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: mxv19lUdvAACnTLBCNoKDJxY8cmrT91nRYUb3vfLzoI=)
17: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: duE0RdpAcQS37YUm0MBesLZjHqBTcqo/iP96oTdR2f8=)
18: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: HWDKrWR4ZSzndqYGfGz3yyZCIawFWZQQaQyTTbVr3n4=)
19: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: mhHZJkVP5QGZ7wHebgGKhz8nBGrVw5ynPXxgzGT5fJc=)
20: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: 034Zu5c2DMARaxqbGq7TvBZSQWPeiz/F0dFBreItvdg=)
21: 16824DB06EAD11F1BEE2281461A30FBC.roa (hash: UDgCG/Y4K0eNvh7QSVH/Px5XQGlS4hFfpmn0e16+X/g=)
22: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: qLH3fu12ggtmW0BfMc4e6M7eHEyxfR+qrZxDfYpP4SQ=)
23: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: W0ZAQl0CnTBSVyek7GiP39Gt1w17u/6L/QzWTcVOfoQ=)
24: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GchPLS5J236W2KlAoH2YoU77qngjuKMqUIBqFM1TIcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Oct 9 02:48:13 2026 GMT
Not After : Oct 16 02:48:13 2026 GMT
Subject: CN=6ac855ed-124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:f4:0f:6c:ad:68:da:78:e4:ef:cb:47:a8:
65:26:65:2b:f5:fb:35:7c:87:82:87:20:ab:9e:cc:
a4:6c:89:3b:9e:9b:10:6b:e4:25:7a:16:b3:87:6d:
3c:1b:5d:35:b0:4b:17:35:bb:9a:96:7b:82:2e:d3:
80:9d:81:d9:f5:97:05:82:80:c8:27:5c:5d:4b:42:
db:93:7d:c4:8a:e4:3e:7e:be:d6:45:22:16:2a:3c:
95:e9:e0:fa:c9:e2:17:93:0c:ce:0c:ba:dd:02:fa:
9c:ba:02:e7:ef:e8:f7:a2:c9:f8:4f:6f:7c:fd:c7:
06:b6:f1:d0:2b:57:90:31:db:6d:f5:36:bc:6f:8d:
bd:3d:6a:83:97:81:58:12:57:f8:d0:0e:84:ef:ec:
5b:98:ef:5a:f5:a4:cb:fd:51:f6:1d:5b:f5:91:88:
85:e3:b5:83:55:3c:54:ac:3a:29:9b:44:c1:cb:d0:
7a:e6:af:bc:49:9a:02:22:b4:70:2a:ec:c5:da:bc:
f9:fa:de:6a:c0:b5:52:e7:95:6f:f9:94:5e:8b:98:
de:59:2d:3a:fc:ac:8d:29:36:6e:0e:94:38:ee:f8:
6d:14:52:8b:a4:b0:b1:4c:73:1d:c0:73:9c:73:40:
c1:37:46:14:f5:5a:97:95:56:e4:7d:0d:bf:1d:65:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:C4:3C:9F:A8:30:A1:50:C7:E8:2B:B3:0F:9A:CB:C2:53:A3:5D
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:b5:bd:32:22:f9:23:92:d8:ee:a1:3e:21:0f:87:56:c1:
1d:77:b3:15:3a:95:b0:c1:0b:a1:f7:fc:73:65:f7:7b:28:e8:
52:3c:dd:24:d3:06:8e:88:74:3a:45:b1:d6:4f:8e:2d:3f:96:
d7:a5:f4:95:30:26:b7:c3:f0:0a:ff:8d:91:2c:a6:99:16:ca:
35:33:6c:6f:6c:8d:88:8c:40:48:0b:ac:25:2e:1c:26:f7:4d:
21:bc:d1:53:75:20:36:9b:1a:51:9d:f9:82:ec:e6:18:04:b0:
73:92:93:b2:bc:87:51:48:13:50:19:21:57:30:0f:13:d5:54:
ba:1d:ec:23:3e:e3:5b:7c:2a:80:c5:4a:ff:41:7f:ac:e4:bc:
d4:4c:4a:64:0f:3b:79:4d:3a:ab:12:df:6e:25:a9:44:5d:de:
d4:8c:bd:78:29:7a:74:e5:2b:67:0b:05:3f:8a:1e:0e:8e:96:
b6:ec:6b:6b:39:be:4a:fb:6d:83:bf:2c:c4:d4:83:b6:f8:23:
a0:e6:f6:2b:d0:ee:a0:3d:e2:d8:6d:52:74:97:d7:a4:d1:2c:
3d:f5:07:8d:69:af:77:af:9c:e3:d5:f3:7a:7a:6f:ff:81:2e:
d4:3e:ed:0d:ee:3c:a6:f7:89:f2:12:53:73:82:07:d7:84:1c:
af:8c:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:52:15 2026 by rpki-client