
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json)
Hash identifier: 6An3kbzEYl98/hhMJYra+hwE9LxhXzcuKNyIP1dF6ZQ=
Subject key identifier: F9:F3:BB:EC:13:48:97:A0:87:88:AC:91:57:42:37:41:E7:9F:0D:F4
Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77
Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
Manifest number: 06
Signing time: Sun 05 Apr 2026 08:32:11 +0000
Manifest this update: Sun 05 Apr 2026 08:32:11 +0000
Manifest next update: Sun 12 Apr 2026 08:32:11 +0000
Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: 16RuP2ZOCoO521OZobmtKxxIIsZSJAfg6/VCuyo3aB0=)
2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl
rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
Validity
Not Before: Apr 5 08:32:11 2026 GMT
Not After : Apr 12 08:32:11 2026 GMT
Subject: CN=69d21e0b-7f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:31:e3:ad:9c:b5:8d:2d:11:95:18:95:25:
88:06:f3:ba:9b:bf:fd:82:9c:b7:3b:8f:7e:0a:b8:
1f:be:c0:77:bb:70:b5:72:c3:af:14:05:7c:96:c3:
17:4a:42:50:99:5c:0d:a1:29:bc:37:4c:f6:6b:38:
30:fe:5e:d3:63:a7:25:fd:31:f9:e3:cb:dd:d3:6e:
3b:ce:33:ef:29:40:f2:ba:49:8f:5e:60:42:28:ae:
51:ab:17:b2:50:fa:bc:44:31:90:6e:da:9f:3d:71:
c6:99:56:e3:1a:31:07:6b:ea:07:28:f7:f3:ce:67:
b4:7d:f8:30:40:3b:97:34:49:dd:8a:77:2d:4e:45:
91:cd:01:8e:a6:c3:a2:fd:94:c7:c9:c7:4e:02:aa:
2f:a3:f9:5d:28:b8:13:3b:60:18:50:b3:ef:55:8f:
fe:e0:39:47:5e:48:33:33:96:d2:fc:4e:3b:f1:27:
3f:ad:2d:13:26:fc:4a:9e:86:44:31:53:b5:5a:ed:
d4:e8:f4:dc:07:ef:8d:63:92:24:72:3c:b3:bc:5d:
99:ad:19:a5:c5:b4:08:6d:11:75:df:da:bc:34:4e:
c5:2d:45:45:59:78:d1:3b:c8:11:f4:d8:07:6d:9a:
b6:f2:ac:e6:31:af:cf:3c:c3:01:d8:9e:a3:9c:5c:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:BB:EC:13:48:97:A0:87:88:AC:91:57:42:37:41:E7:9F:0D:F4
X509v3 Authority Key Identifier:
keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:15:e8:d9:45:95:d2:af:d3:84:16:f9:3d:3c:68:ff:1c:05:
4d:4c:97:74:21:e9:87:b2:ac:18:bd:f2:10:e8:6b:db:ad:a5:
1f:a8:cf:1f:35:f4:b0:02:97:63:a1:77:d6:63:14:b7:40:65:
aa:2c:62:cb:33:5d:4e:91:b0:6a:21:7d:c9:d1:d6:94:21:8d:
aa:ca:0f:4d:4a:4e:f0:a8:cb:bd:50:15:99:cd:0a:97:69:76:
bc:35:fb:7e:4c:d2:b7:a5:d8:63:3e:41:e6:5c:95:ee:b8:13:
16:a4:e8:d7:c8:b7:e4:22:f3:85:55:08:13:de:cd:d4:d7:e7:
83:25:29:89:5c:1b:95:4a:da:d6:97:51:15:6c:6c:88:31:fa:
09:6d:80:0a:be:0a:51:2a:77:ad:aa:0f:8d:7b:3a:bd:1c:62:
a1:02:10:d5:63:66:15:6b:64:8b:fb:1e:c6:66:ac:50:b7:33:
4f:4d:21:d9:ec:f5:94:1c:9d:41:17:21:a1:e6:e1:5b:2c:fc:
bd:d3:6a:28:4f:94:b3:5d:d3:c0:43:bf:28:af:7b:d0:53:22:
1b:6b:76:2c:58:12:f2:ee:6d:45:ae:9f:8a:65:93:c3:3f:32:
fb:fb:55:34:be:1d:38:43:1a:7f:35:6d:06:e3:12:27:75:5f:
dd:9d:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:49 2026 by rpki-client