
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
File: cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft (raw, json)
Hash identifier: Va5ICHqed49+GjZoJ9SBE0++kekmq3Tvp628BBAmVjM=
Subject key identifier: D0:D3:E5:B7:A5:1F:E0:8B:70:96:D4:5E:CE:31:08:0E:0F:3A:10:CA
Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B
Certificate issuer: /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
Manifest number: 16
Signing time: Fri 17 Jul 2026 10:26:07 +0000
Manifest this update: Fri 17 Jul 2026 10:26:06 +0000
Manifest next update: Fri 24 Jul 2026 10:26:06 +0000
Files and hashes: 1: cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl (hash: e1HJ2fXRWefzH6J/zemV8LcEIjL9IyibbuFeDqkqT4Q=)
2: 1603FF2C6AE911F1B5ED47487247A888.roa (hash: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl
rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
Validity
Not Before: Jul 17 10:26:06 2026 GMT
Not After : Jul 24 10:26:06 2026 GMT
Subject: CN=6a5a033f-0a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:87:53:f7:97:90:aa:5c:20:3e:5c:79:e6:
ef:f4:60:e2:7b:91:2e:fe:28:04:8d:4c:a6:7f:e5:
8b:fb:e8:59:8b:c0:f8:37:37:29:df:b6:22:3b:90:
3a:40:f9:57:35:ae:e2:e9:4a:67:0c:c4:76:4e:5f:
81:02:27:54:61:81:fc:12:45:3f:b4:61:62:88:f2:
e4:0e:8b:ef:fd:1f:aa:9f:58:b0:75:d3:53:35:96:
79:5c:a3:97:65:74:48:00:b2:21:f5:44:0e:13:4a:
da:7e:40:30:ba:d1:73:f1:90:2f:70:2e:c1:dd:cc:
48:4d:fb:70:cc:45:d9:98:85:30:13:7b:d6:a1:89:
43:fd:1d:29:f5:0c:6d:14:14:fb:77:2a:00:73:b1:
a3:06:99:a3:17:e5:58:72:99:1e:ed:a1:77:9d:92:
ab:a6:6a:41:9f:83:b6:17:84:cd:10:41:7c:95:54:
5d:1e:f8:f8:a2:cd:99:0f:e4:1b:03:9c:c9:a2:e6:
67:dd:3c:fe:58:1c:14:ce:e5:d8:8e:44:37:2b:2f:
88:1e:7b:d4:da:2e:ab:9a:ee:5d:ed:18:22:93:30:
e0:e1:06:3f:a3:35:0b:ed:8b:b5:ab:1f:38:48:b0:
e2:f8:85:85:cd:df:86:e3:b7:08:37:bd:6a:60:78:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:E5:B7:A5:1F:E0:8B:70:96:D4:5E:CE:31:08:0E:0F:3A:10:CA
X509v3 Authority Key Identifier:
keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:99:5f:2a:1e:06:95:32:dc:f9:cc:ba:24:18:8f:aa:aa:35:
3e:68:14:59:70:d6:ba:26:9f:01:2b:72:d0:f0:b0:f8:38:c7:
fb:40:93:c2:74:20:fb:32:a2:eb:b5:da:37:f5:c1:32:56:a4:
f3:34:e9:72:09:bf:c4:49:8d:25:fa:c3:42:6c:4d:9b:90:47:
14:08:73:82:89:be:cf:14:74:3b:c9:06:de:6a:9c:d7:4c:67:
e6:af:91:4c:8c:df:18:14:01:be:14:74:a9:90:2f:de:ae:f0:
28:0b:00:38:f2:de:c7:ea:60:2a:0d:ca:86:56:7b:9f:d1:9d:
b2:aa:24:92:b5:6e:5c:f6:a1:0b:b5:a7:3b:89:96:bf:d9:6f:
f2:91:dd:fd:ab:ea:4c:6e:64:aa:a2:16:e5:6b:f8:06:a7:0c:
ac:31:96:7e:a2:ff:9b:b0:c5:6e:cb:5c:72:ba:67:f6:8d:43:
ae:ee:d4:e8:55:ef:de:43:fe:2b:bb:8b:bd:ca:2f:f3:7e:d6:
f8:9c:1f:29:ce:93:da:c7:20:2a:22:7e:ec:ab:ab:9a:28:95:
18:72:41:b3:66:08:31:a4:5e:50:a7:87:20:be:24:b9:32:c3:
6b:77:d0:42:4f:f1:c9:23:14:61:5b:85:4a:73:9e:bb:b9:60:
ba:e4:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:15 2026 by rpki-client