
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
File: CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft (raw, json)
Hash identifier: YfRby34b9g+2hJszXaZULjlMymS31PEz4LsiyTJYqTY=
Subject key identifier: AC:35:9E:65:E5:1F:9C:55:A0:3F:26:3E:C8:18:93:3B:A3:AA:5F:7A
Authority key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
Certificate issuer: /CN=A91F89DB/serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
Manifest number: 04
Signing time: Sat 13 Jun 2026 09:16:48 +0000
Manifest this update: Sat 13 Jun 2026 09:16:48 +0000
Manifest next update: Sat 20 Jun 2026 09:16:48 +0000
Files and hashes: 1: CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl (hash: Bxhjkqv9BcUwBKb4qr4C0AX9iISmPGZsrmJ+wMBcsWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl
rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Validity
Not Before: Jun 13 09:16:48 2026 GMT
Not After : Jun 20 09:16:48 2026 GMT
Subject: CN=6a2d2000-7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:8a:50:4f:44:96:3e:bb:ec:55:38:29:78:
51:96:7b:6e:85:b6:33:86:ae:6f:0d:e3:f0:e5:ef:
72:94:cd:51:9f:5b:35:c1:bd:04:37:bc:0d:14:63:
98:2a:fa:87:f8:b3:66:57:a1:eb:e9:0b:b1:f1:9d:
b9:93:d1:60:68:44:03:36:b5:2e:c4:90:7b:d4:f9:
a6:7b:23:56:13:0f:3f:e6:85:7b:65:56:90:41:ca:
e2:33:c2:b3:86:28:db:3e:7a:f0:1b:3d:bc:3b:99:
4e:74:e5:6f:b6:5f:7d:b2:44:49:d2:00:99:30:c6:
6e:2f:ee:17:71:f7:ff:ed:5d:c7:92:50:c2:73:76:
62:84:db:dd:4d:7e:0e:8c:cd:bc:b5:5b:cb:90:9e:
6f:5e:21:09:e6:a7:ab:98:3b:b6:08:38:5f:f9:25:
24:4c:47:3e:cd:d3:42:6e:24:30:22:cb:33:1f:a3:
fb:91:23:3e:8c:b7:b1:e6:de:5e:ec:e7:73:05:a5:
05:d5:ba:60:29:a4:bf:13:18:67:06:cd:49:87:ea:
5c:2e:fb:92:49:49:c1:f0:a3:09:17:33:a6:27:d6:
f2:be:e6:01:f6:45:8c:43:4e:91:4d:f8:65:f9:dd:
e5:98:29:f6:93:ed:3c:0d:e9:6d:1e:18:96:90:98:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:9E:65:E5:1F:9C:55:A0:3F:26:3E:C8:18:93:3B:A3:AA:5F:7A
X509v3 Authority Key Identifier:
keyid:09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:97:4a:e4:24:b9:cb:d6:20:ac:ea:4d:06:3d:3f:a9:1c:
20:23:95:af:b2:0f:e1:55:7b:56:1c:b3:bc:b1:37:f4:a9:ab:
a1:ba:1d:9e:f3:f6:86:7c:df:cf:37:3e:b0:ea:de:c9:73:53:
7c:ab:01:c3:32:83:e2:e8:69:8f:13:51:f6:24:d3:20:cf:cd:
cf:1c:f0:a9:24:8e:7a:c1:79:e1:15:05:ee:de:3d:7e:f8:5d:
fe:26:ff:25:c7:d7:c4:0d:83:d2:fa:0f:d3:49:cb:73:98:ad:
02:0b:1e:79:12:32:ca:0a:6a:c1:72:13:69:49:f8:2c:ec:e0:
0d:7d:49:f8:a7:40:27:ed:e1:3c:51:1a:04:b0:44:24:89:97:
19:b1:e3:61:a5:17:c0:aa:54:85:28:c3:2c:25:c7:10:90:88:
1f:88:39:b9:4b:7a:b7:c1:79:b5:6f:07:60:65:d3:84:0b:d6:
15:38:27:dd:e1:6a:f0:be:71:bf:56:8a:cc:30:43:49:fb:99:
5c:cd:76:69:80:e3:2f:e5:84:fe:6b:92:34:18:53:01:de:9b:
07:55:99:e8:e2:2f:e0:3e:b9:07:f0:f1:e3:e5:5b:64:ad:23:
b8:99:65:3b:a3:f5:bd:6f:7c:6d:b5:d7:8f:89:6c:3e:2c:24:
24:60:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:15 2026 by rpki-client