
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File: CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier: egOH0bZ1ts+suDGqHd/WvIypr4d1T2UOh/MRkFQ9e38=
Subject key identifier: 10:46:9E:35:3E:41:2C:03:99:45:13:1E:83:CC:CB:91:D5:01:56:54
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number: 0223
Signing time: Tue 27 Oct 2026 03:04:13 +0000
Manifest this update: Tue 27 Oct 2026 03:04:13 +0000
Manifest next update: Tue 03 Nov 2026 03:04:13 +0000
Files and hashes: 1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: wfub1tMJ+sasm3bRDfbxmoKQ0z8qK63IaXByjsS2zzc=)
2: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=)
3: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=)
4: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 03:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Oct 27 03:04:13 2026 GMT
Not After : Nov 3 03:04:13 2026 GMT
Subject: CN=6ae014ad-e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:51:3b:88:76:60:61:0e:e0:c8:f1:a5:36:
2a:b7:8e:dc:da:2b:2a:22:e9:41:29:c0:02:95:3a:
a5:13:24:0b:aa:ca:f5:1a:2c:33:85:9c:72:36:87:
e4:44:02:50:8f:88:62:a2:8e:b6:be:ed:87:90:49:
2f:db:0e:83:5a:0b:b3:dd:9b:ea:da:ce:28:43:2b:
bd:94:26:5c:06:9d:35:27:b9:18:98:77:32:ac:2b:
0c:85:cf:08:a5:54:d4:ca:26:db:57:65:c2:25:f3:
5d:d3:64:ab:5b:73:08:cf:27:b2:ab:72:55:51:75:
96:b9:ac:d4:af:de:23:8c:37:d4:23:5c:9b:49:48:
ba:64:44:40:04:bd:80:2f:74:33:38:8b:ef:e3:92:
55:a5:a8:8f:77:df:aa:92:37:b9:86:34:08:b6:fc:
0c:f5:7d:ac:59:61:0a:c9:b0:82:09:1b:8a:bb:52:
d5:76:17:88:ca:ed:34:3c:ee:42:19:b6:b7:2f:c0:
be:51:cb:01:2b:01:4f:e0:f7:6f:96:b9:d8:78:51:
1d:82:14:1c:68:6d:b2:b5:26:29:fd:0a:22:7e:4f:
4b:fa:a3:83:0a:f5:73:64:46:ef:ab:48:46:65:bf:
75:1c:8f:12:a2:d4:82:6c:c2:04:d7:22:56:35:62:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:9E:35:3E:41:2C:03:99:45:13:1E:83:CC:CB:91:D5:01:56:54
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:32:6d:61:eb:26:0f:a2:9f:0c:cf:47:67:df:63:26:f1:
f6:92:6f:52:94:00:c6:94:b4:fc:83:5f:ab:5c:6a:df:96:e2:
f4:56:7a:bb:50:76:77:fc:64:5f:4c:ad:94:1d:e0:54:d6:96:
ee:18:2b:08:07:e1:56:08:80:e0:1e:13:66:e2:ce:5d:75:71:
3b:9d:26:85:ee:21:f1:2c:65:b7:8e:fe:c3:1e:62:89:67:74:
ad:9d:98:5e:03:62:99:e1:8c:a8:a3:1e:7b:87:8a:04:8b:9a:
d9:87:45:f0:c2:45:55:b0:84:a4:c0:03:7b:93:e3:46:0f:ac:
3b:3a:da:42:c1:43:a6:d4:31:1b:63:2c:09:d2:57:20:cf:70:
f2:e1:c9:5e:ca:c1:22:54:e7:0f:eb:f2:2e:df:99:b1:4f:fd:
d8:b3:dd:21:41:cc:e5:b1:c6:5d:bc:37:79:46:9c:fe:13:65:
cd:3e:e0:9b:fd:41:1d:2d:ca:1d:ac:b3:40:0d:86:e9:b4:3b:
52:b9:22:f4:b6:6c:31:f8:ca:e6:3c:b1:20:9a:07:1f:70:52:
72:42:a7:dd:aa:7a:bf:13:f9:17:21:26:ae:ee:36:66:b6:51:
1c:b2:49:9d:9c:23:b5:39:0a:9d:a7:93:16:10:22:e2:70:ef:
29:cf:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:54 2026 by rpki-client