
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: PVp3lVlu/mMz7xfMvzvNwsrG/YeiNJmCcAVvNPxsCCw=
Subject key identifier: B0:56:19:5B:BE:8F:AF:D8:3A:E8:A7:8C:00:0F:D0:92:AE:DE:7F:79
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 05B6
Signing time: Tue 22 Sep 2026 22:46:42 +0000
Manifest this update: Tue 22 Sep 2026 22:46:41 +0000
Manifest next update: Tue 29 Sep 2026 22:46:41 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: VTAzrN/aeoY0B7/0YjCjievqmuFHnKZ+etFUOiWtut0=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: +7NkBk/u5npDwrIEbh3l98hKn0nLCCDAbxWMC/GKCXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Sep 22 22:46:41 2026 GMT
Not After : Sep 29 22:46:41 2026 GMT
Subject: CN=6ab30552-7fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:33:54:f5:56:f4:ce:58:58:60:a9:f0:69:
f7:8e:2a:08:f1:b7:0c:48:5f:46:9b:1f:ff:fb:4d:
a4:24:92:e7:3a:a3:69:17:1b:63:c0:eb:b4:39:52:
db:ce:18:c3:13:07:d3:ec:fd:9c:cc:3d:f7:93:a0:
2f:60:b1:fc:1f:3f:b8:c1:3f:ba:3a:4f:65:04:1c:
6c:ea:01:96:19:10:2e:a6:22:ba:29:6e:25:7e:b4:
2d:51:c9:e8:ac:59:2d:8f:3a:fa:ff:68:39:26:2b:
9d:62:2b:5d:68:eb:75:84:02:33:f7:14:8e:05:53:
d1:f4:7a:c9:31:5a:a0:07:d9:a6:51:c3:9a:f2:63:
d7:03:93:92:03:14:0f:ea:6a:7d:2b:96:4b:4a:53:
91:ad:fb:fb:53:5c:25:18:dc:04:72:73:b7:e7:78:
c8:93:9b:9f:a6:84:8c:42:2b:e6:14:f4:bb:dd:3b:
0c:0d:ef:70:e7:72:d9:ec:74:d0:c0:c7:c7:4a:2d:
4d:97:38:46:77:c7:ba:8b:ff:12:d3:ba:e0:d1:25:
85:ac:5a:03:87:b5:12:34:71:fd:ae:29:b7:7c:50:
91:9a:d0:26:93:2d:11:b4:b2:b0:79:5a:b0:1e:f2:
5b:19:c1:2b:f0:cc:72:03:50:ef:ba:48:07:69:db:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:19:5B:BE:8F:AF:D8:3A:E8:A7:8C:00:0F:D0:92:AE:DE:7F:79
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d7:93:c2:d1:11:41:f5:37:13:9a:e4:e3:2b:73:90:cd:32:
b6:5b:5d:49:81:0f:91:e0:aa:67:1a:a0:23:f8:34:86:77:d1:
ba:aa:a8:a6:e0:e3:e4:89:bc:77:7d:08:ef:ab:45:0a:5c:4f:
1e:a4:c7:d6:50:83:8c:33:39:21:75:82:e6:22:cc:8b:27:43:
50:18:d0:5a:b0:54:2b:26:f5:48:24:5a:8a:de:3d:1c:d4:41:
ff:45:10:d4:87:24:91:4e:88:37:f7:27:c5:66:e7:69:06:35:
3a:83:bd:67:23:08:d5:02:76:ff:31:97:96:bb:6f:dd:bf:d7:
b2:9e:15:b4:3a:17:14:a1:c0:cb:49:79:8f:63:0c:6d:78:6f:
25:98:2d:e3:0e:cd:61:12:d5:de:e5:25:3d:e2:be:66:45:2c:
3e:2e:09:61:01:2b:09:14:34:ef:6c:ea:a4:e0:6f:e0:1f:85:
53:72:06:b1:18:44:8a:50:f8:3b:74:3e:44:60:71:8c:69:8a:
f8:3a:c4:a5:21:6e:85:c0:42:ea:85:1b:1b:7e:85:af:d4:06:
28:b1:41:56:da:b2:e1:cf:57:82:3b:f2:cd:00:5b:a9:18:13:
c4:01:7e:50:ac:e5:be:04:6a:be:89:56:72:5b:4b:3f:90:34:
1d:36:95:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE
NzdGQjkyN0YwHhcNMjYwOTIyMjI0NjQxWhcNMjYwOTI5MjI0NjQxWjAYMRYwFAYD
VQQDEw02YWIzMDU1Mi03ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniIzVPVW9M5YWGCp8Gn3jioI8bcMSF9Gmx//+02kJJLnOqNpFxtjwOu0OVLb
zhjDEwfT7P2czD33k6AvYLH8Hz+4wT+6Ok9lBBxs6gGWGRAupiK6KW4lfrQtUcno
rFktjzr6/2g5JiudYitdaOt1hAIz9xSOBVPR9HrJMVqgB9mmUcOa8mPXA5OSAxQP
6mp9K5ZLSlORrfv7U1wlGNwEcnO353jIk5ufpoSMQivmFPS73TsMDe9w53LZ7HTQ
wMfHSi1NlzhGd8e6i/8S07rg0SWFrFoDh7USNHH9rim3fFCRmtAmky0RtLKweVqw
HvJbGcEr8MxyA1DvukgHadviywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBWGVu+
j6/YOuinjAAP0JKu3n95MB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB
NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW
ajJMTDV3V0ducjdYZjdrbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEteTwtERQfU3E5rk4ytzkM0ytltdSYEPkeCqZxqgI/g0hnfRuqqopuDj5Im8
d30I76tFClxPHqTH1lCDjDM5IXWC5iLMiydDUBjQWrBUKyb1SCRait49HNRB/0UQ
1IckkU6IN/cnxWbnaQY1OoO9ZyMI1QJ2/zGXlrtv3b/Xsp4VtDoXFKHAy0l5j2MM
bXhvJZgt4w7NYRLV3uUlPeK+ZkUsPi4JYQErCRQ072zqpOBv4B+FU3IGsRhEilD4
O3Q+RGBxjGmK+DrEpSFuhcBC6oUbG36Fr9QGKLFBVtqy4c9XgjvyzQBbqRgTxAF+
UKzlvgRqvolWcltLP5A0HTaVmw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:43:27 2026 by rpki-client