
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: RPpF16CZSVjUofRdm/XlwFoYFTCQY9MvtsNgP+rY/C8=
Subject key identifier: 48:04:66:54:D9:3B:2A:79:A7:68:86:77:4A:13:D2:13:3F:A9:35:92
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0FD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0FC3
Signing time: Fri 12 Jun 2026 17:29:17 +0000
Manifest this update: Fri 12 Jun 2026 17:29:16 +0000
Manifest next update: Fri 19 Jun 2026 17:29:16 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: HLm5qLG+PF+vudu3l0AN7ISfP2NX3IX1rznU5y1Q5aU=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: IEwmF1YPiOGApN7H4VHhpg4ij4obs6SexWhQUYa7bXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4057 (0xfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Jun 12 17:29:16 2026 GMT
Not After : Jun 19 17:29:16 2026 GMT
Subject: CN=6a2c41ed-5e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:ee:a9:5f:bf:23:26:05:39:60:ea:62:f5:
9d:eb:f5:cc:40:4d:4a:39:6a:47:d4:9c:23:63:cc:
27:d9:4d:62:62:58:4c:b8:0c:62:4f:64:41:e8:e5:
bb:df:30:87:ae:a0:73:fb:1e:11:d8:b7:94:40:1c:
93:b5:af:eb:f3:76:2b:d3:05:55:3a:ca:b7:af:57:
e0:a6:f8:98:c0:90:fc:a5:e2:f2:b8:90:9c:35:f3:
8c:d4:9d:0c:3b:0d:e5:a9:93:fb:3c:ef:c3:6c:7f:
1a:c5:da:7a:29:c8:af:d4:2f:0c:78:9c:7a:c4:d5:
85:87:11:30:a5:c2:d6:64:91:6b:8a:b0:cf:77:51:
5d:6d:5a:41:fa:ad:09:51:4b:72:50:1e:41:3b:70:
9a:9c:6c:3e:99:3b:15:d6:0f:c5:87:9f:03:f4:05:
cd:93:88:4e:7f:1f:37:5d:20:bc:d4:bc:c9:96:9e:
2d:87:36:ae:b9:17:66:03:2c:04:be:5f:b0:2b:d3:
c8:a2:38:ca:10:48:bf:8f:02:46:34:d9:34:d4:d8:
c6:62:b4:57:56:0a:e4:b4:f7:c2:fb:e0:36:40:ce:
e1:94:94:8b:6e:df:ce:e3:f5:14:c5:38:2c:c5:1d:
70:b4:53:02:71:fd:6f:a1:ec:ef:07:7a:c8:54:65:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:66:54:D9:3B:2A:79:A7:68:86:77:4A:13:D2:13:3F:A9:35:92
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:f9:b5:39:0e:a8:85:58:13:39:57:c1:c4:d3:ff:ca:c7:
7c:49:f2:a8:b8:71:a7:ae:03:93:39:15:c3:17:e6:d6:42:8f:
0d:f2:6f:af:9f:8e:15:d4:b5:80:f7:3a:20:20:21:0d:a0:06:
8b:82:9e:af:0d:b2:fe:26:99:91:4b:6a:00:3f:7a:f5:b7:9d:
5e:18:ba:e1:94:1e:19:a8:c7:db:c7:19:60:82:f2:ce:d6:0c:
ba:f2:77:69:a0:5c:b0:f8:45:d0:07:73:88:ab:64:9a:3f:ca:
15:ab:06:35:d7:8b:28:99:2b:07:d1:5b:57:95:40:7b:ee:c1:
3f:bd:ba:6e:41:e2:af:e2:bb:f7:b7:e1:4d:47:81:5a:be:ad:
ac:73:f8:e2:51:fa:20:6a:dc:28:23:9d:6d:1b:4f:c1:9b:55:
f7:fe:91:94:0f:c3:b0:1a:31:7e:06:48:1d:09:d9:4b:29:7e:
e8:fc:c7:62:5e:ed:d8:1e:32:31:06:80:6e:1f:6a:99:a8:fb:
21:eb:f4:14:c1:1e:37:51:30:7b:16:66:25:70:42:37:d7:0e:
f3:12:21:0b:7e:90:b7:53:74:ce:ef:d9:60:08:7f:c0:25:83:
02:76:4d:5f:5a:12:50:dc:b3:f9:59:ce:85:ce:21:c8:3f:bd:
91:01:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:38 2026 by rpki-client