
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json)
Hash identifier: dIAfelp2ibgtnk8XiS4hnJaBDblcRbRf09M5MWKz4J8=
Subject key identifier: 0C:E4:38:CB:D2:FD:AC:FC:69:CE:A3:75:C2:D8:1D:4D:31:F6:C9:4C
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial: 0D2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
Manifest number: 0D26
Signing time: Mon 02 Mar 2026 02:50:07 +0000
Manifest this update: Mon 02 Mar 2026 02:50:06 +0000
Manifest next update: Mon 09 Mar 2026 02:50:06 +0000
Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: hnXh7QtAxWA8euAaxjUrGVVloe22+CGgBsEgM/9Ru0c=)
2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Validity
Not Before: Mar 2 02:50:06 2026 GMT
Not After : Mar 9 02:50:06 2026 GMT
Subject: CN=69a4fadf-5838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:d0:78:b2:c6:51:0f:90:43:7b:25:26:7e:
5f:60:34:9e:17:93:81:b8:a3:1b:df:57:a9:18:95:
bc:14:67:87:54:6e:d5:3c:51:18:d6:0a:36:f2:93:
78:21:ac:11:9d:a2:82:03:8a:6a:d3:95:2a:eb:09:
e5:62:ff:9e:48:74:64:eb:37:31:7f:0e:90:85:60:
bc:72:64:d3:85:f7:ce:5e:3d:5e:81:b3:2e:31:60:
e1:c8:6e:73:e4:4f:2f:e1:ac:14:66:8d:02:3a:47:
31:9e:99:0d:2e:57:d5:fb:1e:95:e7:9d:00:86:1d:
c9:14:ed:1d:a8:1e:61:f5:5f:b8:a6:54:51:18:98:
f1:a4:30:3f:2a:0f:a0:b1:e7:50:e3:de:73:64:fc:
b4:9c:bc:3d:7c:49:bd:3a:a5:4d:54:46:1b:0c:0d:
48:83:07:1a:ad:62:f1:25:1d:ad:c6:f8:fb:b2:89:
62:f3:0a:68:43:f7:5a:ef:38:1e:ce:b1:7c:c4:43:
ae:ab:60:1d:82:a9:6c:ea:99:a6:3f:b3:0e:07:ad:
3b:2a:6f:f5:7b:0d:69:80:4e:ec:f2:7a:cc:8c:57:
3b:93:72:7f:85:88:ab:2f:11:36:43:ef:99:62:ae:
ac:78:86:74:e2:e7:61:e8:50:0e:17:a4:11:19:2e:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:38:CB:D2:FD:AC:FC:69:CE:A3:75:C2:D8:1D:4D:31:F6:C9:4C
X509v3 Authority Key Identifier:
keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:8d:0d:a2:9a:3c:96:c7:79:68:e8:69:8e:32:7b:86:13:
1d:a3:56:be:61:dc:64:e5:08:6e:e7:91:96:fe:55:ed:32:a2:
66:3f:44:bc:8b:b2:e6:9d:e5:a6:6e:96:cb:d1:49:14:13:2d:
53:e5:70:fd:ff:35:99:7e:82:59:01:f0:4e:34:c3:2c:41:31:
06:d0:5f:f5:e5:14:4b:f2:c3:2b:08:5f:1f:5e:61:04:e0:4a:
17:0e:35:09:4e:0d:17:6f:9e:22:6e:6e:49:87:c6:9d:7b:99:
c8:f4:bc:71:a9:1d:c9:e4:58:3a:fe:28:cb:62:da:c7:68:7b:
a3:d5:d2:94:9a:c8:72:c8:d4:76:35:15:1f:ec:cf:9c:56:f1:
57:41:d0:fb:68:dd:7f:eb:c4:86:6b:f6:d9:c6:e9:24:df:2c:
40:55:50:14:bc:2a:ab:49:88:74:aa:1a:b7:e7:7f:b0:49:5a:
a7:c4:ba:b1:19:1a:f8:ed:f3:f2:cd:8f:7e:04:48:8d:73:18:
47:fb:d9:e4:09:79:8b:78:d0:ed:c0:e2:8e:c1:dd:ea:b4:f8:
2c:01:a1:a8:d9:f2:e1:3c:49:73:c8:d9:0c:4e:9e:f0:43:1a:
8a:c0:9e:ed:50:6b:8b:4f:c8:79:fb:6b:d7:b9:07:ae:89:4a:
25:aa:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:26 2026 by rpki-client