
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
File: Cxopcl-6iizdVPJWV-WHR46_u68.mft (raw, json)
Hash identifier: tD/qFDj7spXTAzY4H+M+c/J2trGcsss2Oa/AViUV5/8=
Subject key identifier: AD:CA:01:DF:B3:5E:1F:CD:F2:EA:45:5B:D0:EE:77:E9:92:77:ED:7D
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
Manifest number: CB
Signing time: Sun 25 Oct 2026 07:13:39 +0000
Manifest this update: Sun 25 Oct 2026 07:13:39 +0000
Manifest next update: Sun 01 Nov 2026 07:13:39 +0000
Files and hashes: 1: Cxopcl-6iizdVPJWV-WHR46_u68.crl (hash: YKFFXrd3/0R+I8og6t8DvNWWjrQqJZGhWiCpNVjOxSE=)
2: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (hash: qjD+AvVZTqHSpgLCl130QsUr3ubfqD9niD4t6/RFWng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Validity
Not Before: Oct 25 07:13:39 2026 GMT
Not After : Nov 1 07:13:39 2026 GMT
Subject: CN=6addac23-f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:e6:42:cd:c9:84:c8:62:44:ff:52:e4:98:
52:42:a8:a6:75:ba:00:e7:ce:db:c9:ba:05:7b:a4:
e6:e1:87:2f:29:58:70:a3:74:53:a8:e4:73:e9:6a:
fb:86:cd:f5:8e:fd:ba:8b:52:51:f3:74:9c:ca:96:
fc:1c:0c:48:c1:1d:2f:89:cc:53:e8:6d:fa:49:34:
b2:91:13:69:a4:d8:18:b7:a5:bf:d1:b7:53:b7:cc:
18:d2:04:ce:32:7d:54:c2:c9:d7:2f:25:a9:fd:91:
d7:0d:14:70:ce:4b:78:0e:89:d0:53:04:b5:f9:19:
64:3f:52:66:c0:ee:d0:dd:c7:47:b3:c6:44:6c:b9:
2a:90:9d:80:83:80:bd:fb:f4:d4:02:91:f7:5a:b4:
33:a4:d4:22:f5:3b:32:13:37:0a:d0:20:1a:3f:64:
b7:f0:13:2a:bd:e5:c9:d5:72:83:d2:44:07:63:78:
9a:97:e1:f5:98:96:93:74:54:0a:ae:bb:f8:bd:9f:
46:3c:b4:45:21:93:82:c5:8f:03:89:f6:0c:e4:b8:
0c:1b:83:28:08:07:7d:fc:44:26:9a:32:b5:c5:7d:
a1:8b:a6:9d:26:a1:94:15:39:2e:4b:4a:20:12:51:
b5:83:be:61:21:8c:be:a0:c4:3e:cf:cb:e5:e5:36:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:01:DF:B3:5E:1F:CD:F2:EA:45:5B:D0:EE:77:E9:92:77:ED:7D
X509v3 Authority Key Identifier:
keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:2d:53:f9:db:81:b1:d5:68:5c:f5:bb:e9:b2:7f:83:74:
b9:e9:0d:6e:dd:73:97:96:60:73:31:11:0a:f5:89:8b:70:bd:
a9:18:74:06:ce:01:46:44:6a:48:6e:52:e1:05:e9:20:1d:08:
ca:a9:d0:a9:a8:fb:60:20:2c:08:e9:02:44:c0:2d:86:34:49:
cf:cc:77:83:e0:39:7d:27:35:08:fa:70:fe:bd:12:04:d6:51:
d9:d5:cc:4e:6b:93:d1:b1:b7:52:39:c0:c8:36:d8:8a:ca:50:
fc:b9:e2:37:6c:4c:45:3a:e6:a7:4e:30:5b:96:98:7f:60:a9:
74:88:fc:ee:b8:31:2f:ea:72:81:99:0b:10:67:bf:63:81:6f:
70:2b:3e:2c:b0:d5:25:16:24:22:b1:92:8b:2c:29:89:79:aa:
10:ee:a0:0b:b4:fc:ff:25:89:51:c3:3c:0d:d6:3d:a6:30:83:
77:f6:5e:98:ec:ad:b8:a4:44:1e:5a:9d:d7:d7:2a:a5:fd:dc:
b5:8f:fe:e6:41:29:00:c7:a4:c8:f4:d6:55:12:0f:bf:fc:2b:
e5:1d:0c:24:88:8c:fd:73:5e:91:07:58:93:71:19:54:63:9d:
48:cb:e0:84:8c:ac:a3:0a:ba:f0:41:65:a8:7b:85:4a:44:f9:
31:79:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:22 2026 by rpki-client