
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: 1r31jrSbWSZKfGLH80bHaTtPU+o2TMJB5xZTzX8vIcg=
Subject key identifier: 7D:85:DB:1C:43:C0:B6:DA:8C:DD:67:CF:7C:6E:31:C4:9C:69:B9:D4
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 01B8
Signing time: Fri 17 Apr 2026 03:46:32 +0000
Manifest this update: Fri 17 Apr 2026 03:46:31 +0000
Manifest next update: Fri 24 Apr 2026 03:46:31 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: vqalPYKSd6kcrKQvDeGQxnMqOEvKCDimob3O5n9lXBM=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Apr 17 03:46:31 2026 GMT
Not After : Apr 24 03:46:31 2026 GMT
Subject: CN=69e1ad18-627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:87:87:48:f2:0f:34:85:3a:b1:65:0d:6a:
97:5a:40:79:8e:54:01:a7:07:0e:af:72:0d:71:f5:
b0:46:03:0a:38:11:7e:36:7d:92:7b:20:b2:50:ff:
b3:d6:ec:29:d7:b9:0f:5e:ec:97:9d:4d:c1:47:36:
37:d2:41:73:0f:54:88:05:50:b8:35:22:ad:c1:64:
84:63:b6:17:cc:cd:84:73:91:16:35:09:a1:9e:c6:
6d:16:99:49:c7:92:b3:d9:cc:ba:14:9c:97:54:f9:
53:c8:c5:e3:8f:a3:4a:04:e6:fb:a6:4f:3b:2f:ef:
94:a2:f5:bc:a8:cc:b8:a5:65:e0:f2:d6:b1:26:36:
e7:83:ae:ce:bd:6a:9b:3c:4d:db:d0:29:3b:d3:ba:
4f:af:c4:93:fc:76:55:29:1b:74:00:20:05:b2:72:
62:39:6b:2a:e2:02:89:41:2c:fe:d6:6a:c1:ff:be:
46:40:27:c3:fe:00:64:31:9b:0a:e1:7a:24:4a:4b:
08:ee:b8:b7:c2:69:c9:4f:fb:42:d4:07:f8:a8:48:
84:27:61:dd:5d:24:bd:7a:bf:29:4c:2c:49:8a:1b:
5d:5a:8b:60:15:64:d3:7d:20:ed:91:6f:b4:9f:bc:
e8:98:2f:66:32:2d:52:63:8e:33:ca:e3:da:5f:f1:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:DB:1C:43:C0:B6:DA:8C:DD:67:CF:7C:6E:31:C4:9C:69:B9:D4
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:ff:28:32:e7:dd:31:5f:39:36:9c:49:da:4a:d8:85:f6:d6:
49:e9:bf:a9:13:e2:b5:45:8f:7b:e3:57:f9:52:75:1f:48:6d:
39:60:96:41:c1:b3:9c:ac:70:a3:8e:90:52:c4:fd:a7:9c:e2:
81:c3:98:a5:4d:fa:bb:2e:97:7c:6b:2e:d3:4d:80:c0:6b:ff:
d3:95:83:5e:37:98:86:db:97:17:ba:35:6d:fa:28:39:0d:86:
23:e9:00:ee:5a:9c:57:5d:8a:46:ae:9c:26:5d:d0:e0:c1:b6:
b3:4e:1e:50:67:b2:8e:ea:8a:3d:79:24:0b:ed:d7:0c:f5:c9:
53:50:87:2e:8c:a7:44:fc:45:e0:72:31:cc:e7:03:82:74:ae:
24:58:79:66:c9:fd:f9:b3:ee:15:07:51:c5:05:12:5b:3a:bf:
5f:55:05:c5:bf:7e:aa:fc:7a:f1:31:12:df:3c:00:7c:97:86:
70:83:ef:53:8c:f3:07:1f:cb:08:4f:78:08:a3:89:8b:5e:58:
bb:d7:3f:ce:76:0f:56:c4:fb:1e:c5:53:3c:80:d6:b2:db:5b:
f2:9b:30:9d:c4:f7:04:5f:03:a8:14:bf:16:06:8d:9d:9f:87:
e4:b4:21:e2:6a:2c:4a:a4:54:33:48:5e:dc:58:89:87:91:4b:
88:01:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:35 2026 by rpki-client