
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json)
Hash identifier: fqlZjZSOkuQtDcP7qRvwmJ6zU+8EYPZYp5rbGrML3nA=
Subject key identifier: FD:3F:50:4C:8E:A4:67:ED:A7:78:7D:97:1A:8D:02:05:32:2E:AD:DE
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial: 0D97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
Manifest number: 0D8E
Signing time: Sun 20 Sep 2026 17:54:17 +0000
Manifest this update: Sun 20 Sep 2026 17:54:16 +0000
Manifest next update: Sun 27 Sep 2026 17:54:16 +0000
Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: SAxh0diN27T6r0ilGYnpI4VYAtMK4iI2ABiUHuvY1Qk=)
2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3479 (0xd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Validity
Not Before: Sep 20 17:54:16 2026 GMT
Not After : Sep 27 17:54:16 2026 GMT
Subject: CN=6ab01dc9-5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:c3:4c:2f:16:32:b8:65:df:83:5c:dc:6d:
4d:e9:96:7e:61:e6:84:ea:49:db:2e:f4:c8:89:25:
a2:0f:75:92:50:9f:f1:b7:de:23:01:56:63:e9:14:
9c:0a:5a:b1:cf:3d:81:6a:bf:c7:42:00:fc:05:d2:
f6:bf:bf:08:af:f2:bc:24:b3:e8:1f:cf:6e:d0:0e:
ea:56:ed:0a:d4:e5:bb:4a:6e:e5:f0:4c:57:cc:d5:
17:c1:91:1d:b3:3a:28:23:88:ed:4c:61:08:69:f7:
e9:e1:e8:1c:3a:00:8d:c7:91:19:30:20:97:63:1a:
db:0a:4c:57:3d:d2:15:88:f2:8f:43:02:c6:a5:4a:
62:a3:32:c9:66:df:87:96:96:ad:01:0f:d1:b8:43:
b1:4e:5b:6a:2d:6e:8c:f2:7e:fa:94:74:13:f4:ac:
b7:62:fe:55:be:d2:95:de:81:b1:04:ab:6d:ca:82:
3b:88:be:b5:dc:68:6b:26:0c:05:57:9c:18:36:29:
60:ad:95:cd:38:e7:f4:c9:3c:7a:66:6e:af:76:12:
b3:4c:31:9d:0e:c0:6c:27:c7:5e:69:97:00:55:f1:
0a:3a:d8:e2:c1:85:e2:c7:81:b5:e3:c8:bf:ad:8a:
7f:ee:c9:34:dd:43:cd:42:ec:0f:16:28:78:eb:9f:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:50:4C:8E:A4:67:ED:A7:78:7D:97:1A:8D:02:05:32:2E:AD:DE
X509v3 Authority Key Identifier:
keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:52:41:85:36:69:21:0b:7d:40:08:91:20:68:f3:8e:bc:
a6:b0:a3:e4:89:78:c7:47:48:58:1e:75:ed:9d:e1:c3:88:8d:
f5:aa:6d:ad:11:1c:20:a0:1c:23:6f:4c:4c:4f:f2:45:3f:0e:
09:5d:ea:da:41:0a:22:e4:84:14:0f:bd:18:55:e7:dd:41:84:
8a:1e:55:86:29:20:70:86:d4:a1:7b:29:9b:33:7e:37:dc:6d:
3e:97:5b:75:78:5c:f1:41:53:d4:0c:04:3c:a2:08:77:57:14:
cf:ff:3e:ab:d2:e4:b4:e2:00:b4:ae:ca:69:1e:bf:3b:10:9c:
32:f3:6f:58:6e:82:c5:68:0f:07:9c:dc:eb:87:7c:07:fe:b9:
72:61:72:1b:55:17:20:8e:4a:c4:00:f5:e1:99:70:d0:a1:7a:
35:ea:ca:a4:3c:40:bb:d0:4f:3a:8a:00:e5:9b:72:5e:da:fa:
0b:84:dc:5c:24:56:53:56:81:65:29:c8:e0:03:80:7d:ad:fa:
d2:59:75:93:a1:1b:4b:d1:7f:83:2a:ab:13:96:46:61:f9:db:
3c:e2:13:15:7b:ce:9e:e2:a7:68:d7:52:0b:90:68:47:b7:79:
49:1b:bc:a1:64:35:cc:c6:45:3a:7c:02:5b:ef:14:ed:48:1d:
90:35:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:19 2026 by rpki-client