
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
File: cXGYzRpGea2dRS7h2wLQASpDdOw.mft (raw, json)
Hash identifier: qeajK4BaVf0TNlT+BbWjg3dqY1Odc7hH/hL8cUEXVBg=
Subject key identifier: 11:6B:74:54:97:43:E7:CA:94:5D:B9:DD:73:89:B6:D3:AA:47:57:B3
Authority key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Certificate issuer: /CN=A9169F49/serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
Manifest number: CB
Signing time: Sun 05 Apr 2026 06:10:36 +0000
Manifest this update: Sun 05 Apr 2026 06:10:36 +0000
Manifest next update: Sun 12 Apr 2026 06:10:36 +0000
Files and hashes: 1: cXGYzRpGea2dRS7h2wLQASpDdOw.crl (hash: tMzc3uJ1bln30cbB1u+ufQjqbqEK2NQzORJyq+8GpOc=)
2: 2B42D1D8F9B611EFB3AB154BC4F9AE02.roa (hash: EILeiHdgRS5T+00CqE1QLUGZWDX5PLvwuDPP5GaU2OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169F49, serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Validity
Not Before: Apr 5 06:10:36 2026 GMT
Not After : Apr 12 06:10:36 2026 GMT
Subject: CN=69d1fcdc-b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:c5:0b:49:b4:a3:20:a3:02:00:ae:81:c0:
30:18:03:3d:b3:09:32:cd:da:41:32:6b:34:18:0d:
bc:94:ae:de:ac:04:0c:e9:ab:e8:42:59:1c:56:16:
e9:0f:2f:4c:e6:f2:ef:f5:b7:75:d8:6b:c0:04:f0:
94:e4:bb:c0:f5:a0:fb:bf:7f:0b:2f:7a:72:b0:af:
fb:a8:32:2a:eb:71:49:95:94:b0:3d:9a:38:f3:6d:
89:b5:04:a5:3b:60:7f:58:b2:c9:e0:3d:f9:ec:ff:
68:3e:49:40:d0:4f:43:bd:e2:72:d7:3d:71:c1:9e:
e2:06:7f:16:0d:2c:92:5e:d9:73:8f:8d:59:fe:75:
34:67:80:76:f6:40:66:83:28:5e:cb:cf:e8:55:21:
ba:08:b4:94:e0:26:36:4d:08:c3:0f:23:90:1a:46:
89:33:79:e8:fd:85:e4:88:86:24:88:84:4c:92:03:
70:ad:dc:9b:fb:a8:23:54:71:2e:8b:40:30:ed:34:
1f:db:35:17:47:b4:24:c9:d8:a4:4d:b2:fc:f1:05:
4c:9c:4f:5c:ea:94:ea:59:29:f7:c5:b5:0e:cd:9f:
2b:90:c7:14:61:92:b0:35:64:ba:4c:75:99:1c:5e:
f8:cf:64:61:e6:c7:08:95:89:66:53:bb:22:86:50:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:74:54:97:43:E7:CA:94:5D:B9:DD:73:89:B6:D3:AA:47:57:B3
X509v3 Authority Key Identifier:
keyid:71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:c4:67:7d:7a:bb:80:7a:20:7a:89:24:50:41:d7:23:c8:f3:
c2:91:50:e1:a1:49:d4:3a:7f:b2:2b:b1:b9:bb:5f:9c:35:b1:
b3:09:5e:c7:1a:ae:68:f6:39:ca:6e:36:40:d7:00:7a:5b:cb:
f6:c8:d2:2a:ab:bc:57:a5:39:e6:95:e1:d8:d9:d0:af:bb:c5:
2c:33:4c:e1:e4:b8:33:5c:e5:fa:3d:d9:de:05:c7:15:4e:5e:
96:f1:0d:87:bd:3b:e4:06:c7:92:e3:e0:5a:df:4f:05:ba:ed:
99:99:05:50:2b:51:a0:a1:57:c3:60:a1:8d:af:69:62:e6:d6:
21:bb:c5:c3:a8:10:2e:5b:e3:30:74:d5:6b:49:52:f6:d5:c0:
c8:45:44:6d:88:e7:40:d3:23:89:3b:3f:ba:55:b7:92:fe:06:
45:79:22:39:e2:cf:d4:53:c1:eb:0d:ae:99:e3:39:a2:4b:8c:
39:1d:c1:f3:ec:70:43:a5:54:9a:87:e8:66:04:b0:97:56:4d:
68:5e:cf:08:37:70:c6:0f:4a:ba:fd:6e:66:0e:92:df:f6:9f:
ae:b1:a1:f4:f3:b3:bb:73:25:13:31:47:ee:5e:ea:32:23:d1:
fc:48:c9:be:8c:ce:c3:a2:2d:4a:10:e7:cd:79:e8:7e:39:9a:
11:ce:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:04:03 2026 by rpki-client