
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json)
Hash identifier: YqTWrfFXEDccra70Lkm3hbgz6BnTN72Ry/G8jBnSx+c=
Subject key identifier: 43:37:FE:6C:1B:47:7E:68:E0:D6:13:FC:02:D5:09:8C:DE:F3:3E:E0
Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
Manifest number: 54
Signing time: Fri 12 Jun 2026 14:32:36 +0000
Manifest this update: Fri 12 Jun 2026 14:32:35 +0000
Manifest next update: Fri 19 Jun 2026 14:32:35 +0000
Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: 10Uf88aSYMQO1rwCNaqixQq9NZJQbzl+Vyi1mUP8fts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Validity
Not Before: Jun 12 14:32:35 2026 GMT
Not After : Jun 19 14:32:35 2026 GMT
Subject: CN=6a2c1883-804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:35:92:5c:da:ed:ba:16:ee:30:50:7f:8b:
4e:3c:db:f2:5c:2f:87:0a:f7:47:3d:f3:17:9a:f6:
8d:7e:b1:11:66:d9:81:18:15:c5:75:6e:a3:67:f3:
3b:3b:98:92:ab:3c:13:2f:ad:80:fe:89:8d:20:3f:
a5:91:63:03:4e:4e:a9:59:9f:1f:6d:3b:f7:60:11:
2d:74:61:a2:75:09:5f:31:91:14:d9:43:ae:4e:37:
65:2e:63:13:45:0e:b9:0f:e1:d1:ec:92:1b:ce:a6:
08:d5:d7:f2:50:1c:09:aa:ef:da:01:b8:ec:0c:2d:
46:a5:7c:5b:54:1d:8c:14:97:97:07:e2:97:87:4e:
88:91:7c:61:2a:27:08:c3:eb:85:48:12:70:61:be:
ea:80:a5:da:74:a2:16:4a:11:a1:a9:8d:6c:fa:61:
78:4b:78:da:fd:5a:b0:71:da:22:75:71:7e:ac:a2:
cb:ff:19:6d:89:90:a8:cb:29:d2:5f:43:97:58:e9:
18:e8:1d:02:6c:81:69:d2:68:d1:b2:5c:4e:64:77:
10:e5:45:10:96:f5:d4:1b:a4:78:af:28:d1:96:9a:
79:b4:3f:83:e6:6a:f3:52:18:2a:67:06:e4:ec:62:
9c:f7:5a:cc:3d:de:53:b0:ac:08:40:e4:b3:ce:70:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:FE:6C:1B:47:7E:68:E0:D6:13:FC:02:D5:09:8C:DE:F3:3E:E0
X509v3 Authority Key Identifier:
keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b3:b7:58:f8:9f:de:08:98:13:f3:f6:79:12:c9:b5:3d:59:
9f:ed:a9:93:cd:c0:7c:09:1a:72:87:9b:c4:2c:65:07:d4:ac:
7e:86:51:56:c5:2f:53:d3:25:44:59:2f:4c:61:19:d1:12:d5:
67:35:0d:30:c8:4b:e3:c6:2c:c5:ea:c1:0f:bd:18:f4:e8:2e:
78:8a:76:19:d9:01:7c:6b:1c:e7:20:93:eb:fa:f7:b7:13:c9:
ad:cc:85:59:8e:8d:94:13:24:44:3a:cc:ce:9e:8a:aa:b3:ee:
94:02:5e:93:92:c0:21:8b:7e:13:69:33:70:34:aa:5e:90:bb:
de:75:ff:34:ee:4f:88:a3:16:cb:2d:1a:b3:db:e0:2b:60:36:
ae:37:3b:98:eb:33:41:6f:a9:6c:71:29:ae:31:24:07:5e:9d:
2b:fd:dd:0f:1c:71:21:f1:98:64:1b:a5:e7:3f:73:b4:5e:ff:
c7:ca:d7:ff:c9:1f:92:64:bc:76:41:3c:c6:d2:25:b9:29:c6:
8e:b1:a9:42:b9:bc:45:d6:9c:9b:c0:93:60:78:d5:1c:7f:0c:
60:2c:1b:c0:41:93:80:da:cd:a0:16:64:ef:f3:fb:47:8a:79:
ff:be:a5:60:72:67:27:5c:17:27:b9:19:3f:9a:9f:b4:6e:be:
95:4f:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:51 2026 by rpki-client