
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: eYFGMx/FSLT+YnM/zs+2oZQsycrua5Yr/4cF3jFC32I=
Subject key identifier: F9:A6:2A:7F:48:39:8D:39:11:C5:39:0B:61:5A:30:A7:8A:C0:74:5E
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 0162
Signing time: Wed 23 Sep 2026 04:51:49 +0000
Manifest this update: Wed 23 Sep 2026 04:51:48 +0000
Manifest next update: Wed 30 Sep 2026 04:51:48 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: pc8y3GI5Wdh34E0dB3n0cnLXtDLRvUGC53Q7o6hx+ss=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: Sep 23 04:51:48 2026 GMT
Not After : Sep 30 04:51:48 2026 GMT
Subject: CN=6ab35ae5-0d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:bf:0d:4e:b4:db:34:5a:04:9b:ac:ef:f9:
f4:31:30:54:30:43:85:26:37:c6:15:86:e2:ca:02:
c9:46:ac:36:5b:c1:b1:07:94:6b:df:2c:47:de:64:
e2:9a:7d:c1:be:84:56:da:4e:a4:b8:73:f2:c1:00:
bd:01:6e:94:97:b1:d2:09:cc:67:f0:c5:d7:a8:53:
dd:de:f2:ce:3f:89:0f:74:90:71:59:1b:d8:53:ee:
6d:f3:68:df:a0:86:af:d2:8b:1b:11:d1:54:5a:de:
87:e3:7a:be:ab:8b:83:e9:de:16:4e:73:18:1b:b0:
72:e0:a5:bf:71:f7:70:17:d5:44:e1:13:f5:03:bd:
16:ce:4b:f7:b3:56:e6:4f:74:e0:fa:49:9b:37:93:
da:98:3e:4a:39:2e:c0:e2:8e:0b:61:35:a1:1b:4a:
cc:47:bf:bf:a5:c5:ed:d5:e1:46:66:fd:b1:c7:a9:
46:1a:22:5c:23:50:d1:ef:5c:cf:ce:1b:a6:67:c7:
85:ed:c8:dd:72:2d:72:b3:ed:45:78:c6:25:b8:c5:
19:9f:7b:48:4e:89:bb:f7:0e:52:67:3c:78:1d:4e:
6e:1c:ba:07:9b:56:5e:8d:d6:24:52:7e:e1:b1:3b:
c8:cf:6b:4d:73:ea:f0:31:1d:68:fd:8d:0f:e9:30:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:2A:7F:48:39:8D:39:11:C5:39:0B:61:5A:30:A7:8A:C0:74:5E
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:76:0c:9c:1c:bc:c3:da:54:c0:db:13:c2:24:e0:76:9a:
5e:3e:c7:54:34:33:f2:5b:cb:8d:a2:d8:99:63:8e:9d:bd:a0:
24:dd:26:9d:71:76:62:e5:db:88:e6:f4:a2:c1:0f:3c:17:fd:
5f:96:b6:82:28:04:08:dc:a5:05:05:75:46:13:16:04:a4:5b:
e8:67:22:35:2d:6d:68:4b:62:de:3a:81:2d:14:fc:13:10:4b:
c3:19:fa:50:f1:15:0f:73:3e:55:85:69:b9:15:26:7e:4c:41:
44:0f:4c:51:3c:27:78:af:75:4a:64:d7:d5:04:b0:8c:fe:c6:
80:9e:8a:9a:a0:e7:a8:df:21:66:3a:32:82:c8:d8:a3:55:81:
94:68:03:e1:a0:0c:2b:7d:5e:45:da:06:d4:15:50:da:0e:1b:
b4:ba:70:6d:a3:ea:96:11:d1:83:52:c6:37:67:46:f0:4a:ce:
f8:14:5a:46:f4:bc:cc:e8:17:4d:9d:21:7a:34:3d:9c:6a:f3:
cd:bc:8d:c0:9a:b6:f0:dd:af:45:d4:e2:a4:28:30:a7:6f:53:
b0:df:35:22:44:6e:86:57:a6:53:15:95:33:df:55:7f:f1:e7:
1b:38:13:96:ff:bd:ff:b6:17:8d:0f:84:72:8d:27:d6:73:b0:
c0:1e:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:55 2026 by rpki-client