
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier: dMfgKMtC+HQuKI0rHVkFyIcsLfXGbxoYpXPWwVpcpfY=
Subject key identifier: 6E:DB:05:8D:50:D5:D7:46:4B:C3:08:FB:6D:EB:BA:BD:D6:E1:8B:71
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 034F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number: 0349
Signing time: Tue 23 Jun 2026 01:03:53 +0000
Manifest this update: Tue 23 Jun 2026 01:03:52 +0000
Manifest next update: Tue 30 Jun 2026 01:03:52 +0000
Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: ZXI9EMq/M1AIn+pHtOPuDPVoSyoQDVSf3bUxQKRtBzU=)
2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Validity
Not Before: Jun 23 01:03:52 2026 GMT
Not After : Jun 30 01:03:52 2026 GMT
Subject: CN=6a39db79-6813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:f6:53:70:29:fe:08:9a:b9:c3:e0:66:c2:
1f:38:60:4f:7a:2e:bd:cd:d7:0d:d2:54:be:26:d4:
8c:25:b1:54:b8:55:9d:6e:15:71:28:19:b0:73:e1:
12:ab:ce:d7:e7:98:88:10:90:16:11:3c:71:e6:92:
a2:0e:11:6d:85:ff:2a:8f:71:f1:56:1d:61:c8:66:
b5:d6:fd:c4:2c:70:67:82:43:29:2f:85:69:2c:ec:
46:40:cb:70:19:81:84:d0:5b:16:fd:ef:3c:e3:df:
ab:94:4c:f1:ac:cc:b1:8e:7d:ec:0c:d0:4e:f1:3d:
3b:7a:a0:45:d7:11:e9:56:d2:52:7d:7f:35:04:1e:
49:38:24:ba:b7:cb:8e:e4:89:e9:a6:cc:3a:6d:84:
90:76:75:d2:3e:b5:6d:a5:85:52:e9:b9:20:54:47:
fd:ea:63:24:af:a9:b9:e2:1b:23:01:09:99:7b:b1:
84:62:d6:42:58:cb:51:01:e0:f2:38:93:d0:ea:2e:
55:ee:53:c2:37:aa:43:df:9a:8a:06:1e:61:f9:f2:
43:19:d1:f0:cb:40:cf:b8:37:3d:2a:6f:da:66:98:
20:a6:0c:90:f1:8a:91:1d:bc:e6:66:d5:a7:07:0b:
cd:38:88:19:1e:e2:dd:60:80:51:8f:fd:67:27:28:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:05:8D:50:D5:D7:46:4B:C3:08:FB:6D:EB:BA:BD:D6:E1:8B:71
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:97:01:bf:d3:ac:3d:86:4a:72:28:bf:ce:5a:1d:0c:c9:
65:f6:f1:40:57:30:1c:09:7b:e5:a2:f8:b3:7d:75:eb:e7:2e:
88:09:22:1a:1b:db:79:34:48:7f:bb:46:e2:ff:55:cb:ff:71:
c2:06:dd:43:ca:b5:a5:08:da:be:e0:23:6b:c4:12:a0:ed:d4:
0a:4d:bc:9c:18:fe:b0:4b:f5:40:3f:9b:15:71:93:9b:02:1a:
c5:6b:99:b2:53:8e:a5:c9:ff:95:8e:82:6f:60:80:1a:94:4b:
cf:f5:05:ab:ca:13:82:98:cd:23:68:63:73:07:31:e6:b5:6c:
0c:d6:a0:ed:7c:42:61:e8:e5:90:5b:ed:aa:f4:cd:77:92:2c:
a3:53:e5:71:bf:40:aa:a8:91:f7:55:27:f2:c7:1f:72:81:dd:
03:1c:87:88:66:fc:ed:58:f7:0e:df:cd:94:3b:8d:3a:61:21:
c5:58:3a:03:86:91:8b:88:af:13:ad:90:d3:cd:e4:2a:a9:b5:
4b:c2:a4:ee:3a:3f:cd:e3:65:b7:7b:42:7c:89:49:25:d5:1d:
bb:b7:44:b8:8c:a2:1b:eb:8d:08:7f:6c:d3:09:c4:e4:66:1b:
91:4f:25:c8:2c:04:b0:d4:d0:79:05:be:29:22:c2:9c:73:c7:
0e:a8:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:55 2026 by rpki-client