
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json)
Hash identifier: X2Rlv/9xLngMtRrIkCinPc5K8OQvZEhAZ8rrJBhEzvU=
Subject key identifier: A5:E9:D3:D6:CB:5A:6D:60:9C:6F:3A:B5:D7:02:7B:BB:1A:38:04:21
Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
Manifest number: 87
Signing time: Sun 20 Sep 2026 14:32:02 +0000
Manifest this update: Sun 20 Sep 2026 14:32:01 +0000
Manifest next update: Sun 27 Sep 2026 14:32:01 +0000
Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: rcR5rq7+HwIaRfaiD4pIkXJZeOxV+Z+m9fViwxk8028=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Validity
Not Before: Sep 20 14:32:01 2026 GMT
Not After : Sep 27 14:32:01 2026 GMT
Subject: CN=6aafee61-83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:2d:a2:50:1f:d3:67:17:14:57:19:1d:84:
64:fb:a5:da:9b:c8:8b:03:27:4d:48:30:37:1a:2d:
d3:34:38:d0:fd:10:17:af:a6:c1:59:64:a3:5e:17:
3b:76:d2:30:11:45:d7:b9:48:8d:a2:af:60:13:5d:
ee:c2:2b:bd:bc:0a:6f:38:3d:6f:ac:3f:18:b0:b9:
d5:9c:d8:5f:15:e9:70:c7:11:fb:59:da:a1:d6:a9:
30:0e:ed:c0:b7:a8:e2:c5:5e:88:6e:b0:4e:33:47:
c7:c3:17:bd:69:14:ed:62:56:fe:04:8f:b6:50:c2:
77:5d:97:32:85:cd:0c:cc:85:66:df:17:01:51:98:
b8:39:9a:30:f6:53:c8:1a:f8:7f:ce:61:20:3f:9a:
57:d2:a8:89:60:9c:6c:d5:6e:f1:32:01:07:9e:d6:
a0:2a:b2:2b:bc:08:6d:35:59:53:24:ee:d1:f5:47:
03:be:bf:30:70:cc:de:8d:33:ae:cd:12:c0:b7:23:
f4:fa:42:95:1c:f1:0f:09:8d:2f:75:1d:2e:01:a6:
f3:d0:77:05:fc:15:36:3c:6c:3d:94:5c:f1:73:fc:
35:28:60:36:65:94:9b:25:fc:18:57:f6:79:7a:b1:
36:07:2e:e7:3f:ac:84:10:af:a1:cc:09:03:ae:9e:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:D3:D6:CB:5A:6D:60:9C:6F:3A:B5:D7:02:7B:BB:1A:38:04:21
X509v3 Authority Key Identifier:
keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a0:13:97:29:6c:87:c1:8d:e0:7b:80:e8:d6:83:f7:40:08:
75:59:4c:c8:77:37:6b:60:ef:d6:b9:ed:be:04:53:46:dc:29:
fd:6b:e9:a1:1d:7e:30:0b:67:12:a1:3d:2f:49:8a:e2:51:88:
a5:cf:63:34:f2:f5:1d:96:82:8d:c2:49:1e:dd:71:d3:d3:02:
2b:27:5e:01:91:19:bb:1b:cd:ce:b9:3f:1c:a4:b1:46:60:d5:
86:11:5f:f6:20:eb:36:02:8c:2c:1a:99:33:c7:64:d2:7b:fa:
3f:c0:3c:e4:18:4e:85:3f:ca:ec:dd:a8:6e:82:f1:3b:d0:34:
cf:b9:2a:18:d5:f1:19:20:9c:f0:a9:04:0a:5b:09:ec:c3:9c:
62:34:9d:8a:92:6c:4a:a2:bf:48:7f:1d:86:17:d2:90:a8:21:
06:b3:da:b7:82:24:d1:9c:f8:e4:f3:47:b8:d1:a8:fb:7b:19:
2c:a7:1f:ba:48:89:a2:f7:8f:a5:71:1a:c1:8b:02:0e:6c:09:
c5:53:6d:3f:b7:25:42:99:69:f8:52:ae:10:04:eb:42:a0:10:
01:e3:b2:99:fd:e8:96:a8:d7:e9:3b:53:98:04:f3:ff:74:37:
fb:07:41:dd:1e:6a:d6:d8:cb:e4:09:d2:ba:ae:06:49:77:0c:
d5:ca:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:13 2026 by rpki-client