
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: oqKmkCCYiMMN55oAQapUjGt3OGC+2UE/N3ivnOtN+1E=
Subject key identifier: 25:6D:D8:82:0A:41:2B:F5:E3:31:78:9E:20:57:AD:B7:8A:62:4C:DC
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: 0172
Signing time: Tue 27 Oct 2026 05:04:57 +0000
Manifest this update: Tue 27 Oct 2026 05:04:57 +0000
Manifest next update: Tue 03 Nov 2026 05:04:57 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: HqkB2MTlYNfKb7of+AeSFQLOfBvTe1H+3Ardp+Ldkgw=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Oct 27 05:04:57 2026 GMT
Not After : Nov 3 05:04:57 2026 GMT
Subject: CN=6ae030f9-283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:e3:03:96:0b:bc:76:38:8c:08:49:7e:e7:
d9:6c:d4:33:81:d8:c9:84:8c:2f:19:4c:3d:8b:60:
bb:2f:ba:8e:32:71:aa:7b:e0:35:fb:54:d9:6c:0c:
44:5a:76:16:57:6f:c8:e1:12:f4:96:b2:7b:1f:37:
6a:92:c4:d3:79:de:f4:b4:a3:78:12:f5:5d:66:5e:
8f:c4:bd:09:d8:fa:92:d7:b5:ee:68:a9:7d:c6:70:
30:04:ab:a0:11:80:58:c3:f8:7f:95:27:92:99:23:
d9:90:e8:0f:45:18:7e:43:47:d2:07:34:18:c6:6a:
22:e1:8a:a5:d8:9c:aa:e9:8d:f5:1a:2d:d4:1c:0c:
c9:0a:e5:a6:5c:13:29:ea:e3:f9:45:ab:6c:9f:3d:
07:14:02:ca:2b:3c:c6:49:97:b2:5c:f6:2f:62:67:
46:9d:85:9d:74:6c:a5:f3:3a:ae:3e:4f:cd:88:78:
8e:83:a7:d6:cb:c5:2b:30:8d:f4:cf:60:97:94:b7:
78:7a:2d:b9:c0:0d:f2:cb:35:b4:6e:6f:e3:d1:49:
82:56:33:2e:26:9a:87:0b:98:93:20:0a:ad:e4:08:
b4:72:03:cd:e5:61:1c:27:1f:e0:a4:13:88:e1:5f:
19:fe:a5:c1:8f:70:59:8e:56:ba:43:64:c1:11:0a:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:D8:82:0A:41:2B:F5:E3:31:78:9E:20:57:AD:B7:8A:62:4C:DC
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:9e:8e:06:f5:1c:7e:04:e1:c0:59:4b:1a:eb:8c:dc:03:
df:4d:ed:51:15:42:3a:b5:a3:a7:0b:8f:2b:11:f8:3e:8a:cf:
05:82:d7:e2:f9:31:f1:06:2c:92:81:99:ee:ea:d1:23:1e:e3:
28:8c:fd:17:3c:70:a2:cf:64:00:24:17:ae:ee:ab:2e:87:4d:
05:2d:80:d2:54:1c:d6:3c:fd:a1:83:f9:9b:4b:b0:2f:18:89:
3d:18:f1:22:0e:31:51:3e:c8:96:ac:b9:33:96:43:3a:da:d4:
80:21:f7:88:4f:f7:f8:e1:42:fe:4d:4f:62:5d:77:46:07:05:
a9:79:91:f3:76:58:e9:5a:8f:98:12:e2:8a:a7:b0:01:44:22:
d6:72:f1:ae:9b:7c:fb:7e:9e:2c:8c:b1:4c:7e:11:2f:2a:60:
13:ef:9f:90:19:f8:e4:d8:45:d2:c1:eb:85:6c:48:3c:57:57:
f0:f0:43:d0:04:3e:a3:31:d6:e6:26:bb:eb:2a:12:80:a7:31:
30:64:34:df:04:ba:d6:06:aa:20:48:85:d7:e5:3b:b6:6e:b3:
03:63:4b:c7:60:16:8c:4c:b1:42:c1:64:9d:5a:34:e9:60:0e:
ab:68:c0:d6:e5:ab:a6:b1:4e:b7:ba:1f:8a:55:b3:51:26:44:
ca:05:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:01 2026 by rpki-client