
$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
File: Cxopcl-6iizdVPJWV-WHR46_u68.mft (raw, json)
Hash identifier: vUm+A0bXbOuHgTXYGs77PFDkDHGoYbNwufbzdcDw5O4=
Subject key identifier: B3:AC:9F:86:23:47:58:86:81:13:44:89:2A:A9:8C:7E:5E:BA:0A:C7
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
Manifest number: 62
Signing time: Sun 05 Apr 2026 07:25:08 +0000
Manifest this update: Sun 05 Apr 2026 07:25:07 +0000
Manifest next update: Sun 12 Apr 2026 07:25:07 +0000
Files and hashes: 1: Cxopcl-6iizdVPJWV-WHR46_u68.crl (hash: ad9V9TTglHGw1V0rQcUO7muZCPpLebmaa1x+xTPEbY4=)
2: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (hash: hNeWZLMK+GfB4WxJKadmJOzLAqi6pUlx0i7I6EatF7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Validity
Not Before: Apr 5 07:25:07 2026 GMT
Not After : Apr 12 07:25:07 2026 GMT
Subject: CN=69d20e53-9bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:c1:71:d5:69:aa:96:ac:81:81:40:16:cc:
09:b7:07:a9:30:b5:4b:dd:12:34:5e:00:f2:6c:e1:
a5:8e:78:5f:51:cb:84:2b:74:b3:cb:f5:d8:02:ca:
7a:11:c8:f3:e3:30:ae:ca:40:e3:e5:fe:8d:fd:29:
08:f7:81:a4:29:11:f7:66:e2:f7:28:d3:a7:d8:e4:
e8:e7:b8:94:72:38:e3:94:1a:07:64:70:4d:98:b0:
54:9e:1c:94:d7:45:83:37:a8:3b:2a:8f:c0:23:d7:
63:3c:df:6f:e4:dc:44:21:22:2c:8f:e6:0f:a4:3a:
cb:be:10:fb:57:12:87:67:90:df:fb:5b:ef:f1:36:
aa:97:55:50:18:ab:cb:49:ef:aa:07:72:4d:d0:37:
29:a4:d0:12:58:76:ac:ba:9c:e1:fe:85:4f:07:b1:
bb:f5:20:72:7a:41:ba:9f:e8:27:f1:f3:35:af:f0:
08:51:0f:cb:90:92:0c:1a:d5:11:76:d3:c5:39:47:
6f:7d:75:92:c9:fd:9e:50:53:57:e2:ce:7c:d1:c4:
4a:77:89:b4:45:8f:f2:9f:07:41:00:2a:c6:f6:50:
ae:fe:65:da:62:5f:74:91:eb:49:ca:0a:3f:a9:5d:
53:39:e1:ba:46:53:45:09:8a:8e:3a:fa:7d:05:37:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:9F:86:23:47:58:86:81:13:44:89:2A:A9:8C:7E:5E:BA:0A:C7
X509v3 Authority Key Identifier:
keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:30:39:13:50:0a:e4:72:aa:de:8d:fb:62:9a:02:33:4d:
3d:eb:56:92:58:02:a2:bc:63:da:07:3a:e3:0c:c5:90:bf:3c:
71:19:87:63:3a:36:d1:4a:b0:3a:1a:86:09:7c:4c:4d:f2:a7:
a5:c9:63:31:1c:89:f1:f8:37:a5:0b:fe:72:3c:c5:4a:a1:6a:
4b:a3:db:97:3c:e9:36:7e:f8:f1:d4:39:32:38:21:95:e1:63:
71:b9:bd:6c:92:77:51:27:96:69:82:25:13:58:af:60:8e:38:
5b:82:1d:81:b7:33:6b:88:03:65:f3:e6:d7:61:02:3d:ef:9f:
b9:22:8e:78:77:4c:c1:cb:68:29:01:57:bd:54:3a:fb:26:67:
41:b2:9c:ea:ff:c9:6a:b3:8f:35:59:70:62:1e:a2:76:c4:07:
0e:f0:04:dc:f7:07:37:91:26:23:94:e6:c4:ed:32:9a:1b:8a:
83:81:c3:93:40:25:3b:1d:2a:65:df:5d:42:ff:e2:3f:08:9e:
7f:e7:fa:4b:b5:1b:10:1f:5a:c1:d6:b3:b1:20:19:4a:05:30:
80:bf:0c:07:c7:48:2b:24:fb:51:d4:73:62:6f:e3:7f:b0:8b:
86:5f:cc:d4:b1:ab:e2:cd:5f:c8:6d:d4:1b:b0:bf:c6:c0:0a:
ca:c8:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:15 2026 by rpki-client