
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File: CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier: Mek6DXXhBNRg2OT8MR2SHjdOEpNxELEF99WEkwBn/ZY=
Subject key identifier: FA:28:11:75:C7:4F:47:2A:4E:0E:DA:D2:47:2A:BE:08:D3:5F:29:B2
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number: 0209
Signing time: Sat 05 Sep 2026 02:56:24 +0000
Manifest this update: Sat 05 Sep 2026 02:56:24 +0000
Manifest next update: Sat 12 Sep 2026 02:56:24 +0000
Files and hashes: 1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: QIPHaaaFzsLjrxr946ha3ILZSQPFB6lyCzegHXlNxCY=)
2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=)
3: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=)
4: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Sep 5 02:56:24 2026 GMT
Not After : Sep 12 02:56:24 2026 GMT
Subject: CN=6a9b84d8-0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:8e:90:14:32:74:d8:87:10:05:d9:1d:d5:
65:36:be:bc:65:1c:40:ce:88:6f:80:1e:03:33:34:
62:2d:fd:da:39:5a:c2:1e:2f:58:72:7e:31:c8:5e:
02:6f:02:48:06:4a:92:4f:06:7a:b5:b4:2c:3b:f8:
f9:44:cb:23:58:b0:e7:19:a0:f8:9b:6e:4d:4c:d7:
a2:2e:64:5d:8d:72:5c:12:b0:e2:e1:b7:8c:0f:26:
54:09:53:74:7a:62:82:ec:62:36:e3:3c:16:fe:b8:
11:f3:77:21:8c:c0:66:6c:25:5c:e0:db:c3:6d:82:
fd:64:13:dc:5e:b9:cc:97:ea:30:21:19:0a:56:36:
c5:ab:50:e9:ac:97:ce:66:e9:fe:80:c2:85:e9:20:
47:f5:88:c3:17:49:b2:e8:2c:a7:1f:4a:f0:b5:dd:
55:ea:8e:37:67:48:ae:82:cb:68:09:77:10:21:e6:
ce:d3:a6:3f:ff:18:0e:c2:26:86:1f:60:ba:d0:b9:
f0:98:45:49:18:97:0c:38:b0:89:71:42:29:39:06:
ee:97:f2:b6:0d:99:d1:f8:da:17:a5:48:4c:d2:74:
eb:6a:08:45:df:64:2a:da:93:4d:e9:c8:93:3f:b6:
30:71:e2:99:e0:d6:b5:a4:de:39:03:d8:6c:35:21:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:11:75:C7:4F:47:2A:4E:0E:DA:D2:47:2A:BE:08:D3:5F:29:B2
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ec:ce:01:35:f6:2f:fb:02:ee:a4:9c:d1:e5:b5:05:c8:5c:
a3:28:cf:0b:0a:60:fc:cf:93:a8:59:3f:54:f3:59:17:da:c3:
93:f2:2c:e9:23:ff:77:7f:b8:68:6e:65:a5:dd:f0:ad:00:29:
ba:22:be:33:db:63:2a:55:b0:22:20:82:39:a6:4b:bc:e1:21:
1c:4e:68:4b:47:9a:c2:c4:42:c8:3d:ed:dd:37:42:13:a4:c9:
96:5b:96:61:11:8b:17:6d:40:a7:c6:69:15:16:f1:03:60:90:
64:4d:c9:71:9b:0c:fe:cf:82:c0:88:06:5a:cb:81:59:b0:7d:
a6:59:39:8a:90:d4:20:83:d3:23:e3:7e:cb:12:c8:0b:67:f7:
c7:d8:a0:73:2f:ee:01:ac:6c:23:4a:04:63:5e:fe:c0:94:4a:
9b:02:81:3b:06:98:da:93:3b:45:7f:08:c2:8d:3f:ad:ce:4a:
e1:66:66:05:fc:ad:bb:a2:38:6b:65:a3:8e:c3:81:b9:75:2b:
ce:7b:89:c5:1e:db:d6:09:51:14:3e:10:d8:56:a4:69:21:b8:
1b:8d:5c:76:bd:fb:23:07:1a:b2:0e:46:7f:2e:23:00:a2:6d:
75:2e:79:46:18:84:4d:d5:a7:c0:e4:b8:45:74:da:ef:b5:c4:
0b:c1:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:13:18 2026 by rpki-client