
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File: 1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier: p8S8AJR75gexXIimaYJM5cFdejz/9MMNGVGA0obG8NQ=
Subject key identifier: AA:1C:F9:26:F7:BC:32:A3:0D:AB:05:E9:30:13:80:95:08:63:A1:6F
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer: /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number: 4C
Signing time: Mon 21 Sep 2026 08:24:39 +0000
Manifest this update: Mon 21 Sep 2026 08:24:39 +0000
Manifest next update: Mon 28 Sep 2026 08:24:39 +0000
Files and hashes: 1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: IcTunhqhRBVs7xc6vnDOl9qkY7J4hdicjrqaj+Fy1NI=)
2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: 6EW9oyrc2THGvuQYeyC3+cEZ3GaEIxha4d/V0/xHUxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Validity
Not Before: Sep 21 08:24:39 2026 GMT
Not After : Sep 28 08:24:39 2026 GMT
Subject: CN=6ab0e9c7-7d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:18:8a:e7:fa:e5:dc:32:cf:7d:cc:21:52:
33:5c:a1:3e:21:f6:c3:45:bf:a0:f2:af:3b:ed:f3:
c8:4f:57:7d:c6:7c:ce:08:6b:d6:6a:23:37:9d:db:
bc:1e:33:74:59:e2:8a:e5:d2:eb:51:a8:75:35:bc:
96:c9:77:0c:c1:12:74:8f:46:0a:c4:4c:54:ef:3f:
11:c1:81:94:25:a0:46:84:d5:da:18:ce:a6:55:86:
4c:64:42:3f:b8:d4:9f:c4:15:be:4c:1b:32:59:e9:
ff:f2:08:af:37:a2:6a:4d:c5:8b:2e:4e:35:40:31:
33:62:66:3a:c0:72:e1:13:58:03:dc:ef:d4:64:aa:
23:9e:1a:75:73:cd:63:13:cb:db:19:07:47:3b:48:
34:5b:07:cf:7a:1c:7b:67:01:bf:3b:bb:18:18:df:
7b:4f:d8:cf:07:58:87:eb:a8:0e:b9:56:13:69:c2:
c8:eb:46:ad:fe:6b:0d:41:c5:01:f0:94:01:52:4f:
23:82:7b:48:fe:b0:f1:cb:d2:17:ad:b7:1f:64:b4:
d2:c8:37:0b:fb:ef:b1:c1:33:76:15:18:4a:29:a5:
fa:7a:49:72:0f:d6:37:81:3e:39:07:62:d7:03:ab:
51:d9:84:05:3a:85:5a:b8:8f:79:b5:db:fd:16:13:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:F9:26:F7:BC:32:A3:0D:AB:05:E9:30:13:80:95:08:63:A1:6F
X509v3 Authority Key Identifier:
keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c9:8d:83:02:b7:6e:cb:b1:40:cc:2a:41:6a:04:60:ee:7a:
6f:f7:12:22:17:f9:b6:9d:3c:cd:fe:4e:bd:54:a9:10:69:ff:
f7:9c:83:73:a6:13:ec:70:9f:6b:26:a2:18:a0:4a:ad:bf:e5:
f7:1f:48:08:52:e6:d5:56:ec:da:2a:65:ce:70:f3:75:be:92:
8e:d7:61:f7:c1:2a:4d:aa:a3:d1:64:90:5e:9a:51:e7:c4:46:
4c:f2:9d:bd:33:53:84:39:20:9a:ab:ea:7b:0c:65:e7:57:5e:
17:35:58:01:93:be:4b:c2:41:7c:db:26:0e:2b:93:78:b7:58:
62:ca:bc:5d:a9:2e:75:ad:9e:50:c6:1a:ad:1d:57:6e:a8:2a:
28:5c:89:98:51:79:73:ca:a4:0a:c9:87:da:44:12:7b:95:3d:
2e:a9:74:4f:ab:82:d4:0b:8f:19:4a:82:b5:1d:58:3e:18:73:
d2:96:c5:11:e2:b7:95:16:1e:d2:f4:e7:7e:38:b2:48:08:5f:
0a:39:0e:75:71:55:9f:09:05:52:da:b4:57:2d:48:39:75:66:
39:4f:ed:56:27:96:5f:77:17:40:75:30:66:f4:67:aa:33:a0:
d0:4d:5b:88:4a:5d:ca:96:6e:54:03:d6:e5:fd:3a:1e:b5:fc:
7d:90:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:00 2026 by rpki-client