
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier: SlzXghjBirCe4DljUEF15WfkuMCVI5eGz2OG+YBXIXE=
Subject key identifier: EA:CB:C5:1A:8E:0C:77:00:AB:9C:97:64:A0:AC:5E:D4:F2:14:91:30
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial: 095B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number: 0953
Signing time: Fri 02 Oct 2026 20:23:57 +0000
Manifest this update: Fri 02 Oct 2026 20:23:57 +0000
Manifest next update: Fri 09 Oct 2026 20:23:57 +0000
Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: 6p4/SymVF1JEwWbBUpzQCaaB2etdh0PNCAgUhgvHqvk=)
2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: tRNk4V13JhJnv+wiA4xs7OZ5tmznHVD5RCNUH4G3E/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Validity
Not Before: Oct 2 20:23:57 2026 GMT
Not After : Oct 9 20:23:57 2026 GMT
Subject: CN=6ac012dd-b1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:db:e3:5a:e2:06:7a:f0:6f:14:03:56:c5:
b7:f2:35:58:b7:f1:34:75:d0:dc:bf:35:4a:03:1d:
2b:44:ec:fa:c2:73:9f:49:25:0b:42:3e:30:1a:a9:
65:c6:3e:48:b9:25:a7:41:da:74:af:fc:ee:49:71:
0f:7a:f7:88:1f:58:da:2f:32:56:d5:e6:d3:06:15:
7b:ea:90:a8:15:58:d4:0c:4b:01:34:ff:d2:3f:c4:
52:d3:dd:da:58:39:dc:21:2e:48:a9:b7:32:d5:f1:
91:f6:49:ab:c9:7c:6b:91:27:67:86:d8:a6:5c:89:
01:a9:79:13:f0:fd:8f:43:42:3b:09:c3:37:0e:ba:
a3:ae:8c:97:5e:af:4c:99:49:b2:0d:aa:5d:42:55:
68:36:ca:9c:18:b9:f0:91:97:a5:6d:e2:a1:87:0d:
81:44:4b:49:56:46:7d:3c:e6:be:e2:0d:62:57:36:
be:54:a4:86:70:2a:da:4b:07:c4:c7:1c:8e:6a:51:
fd:82:54:27:68:cf:7d:e0:ab:35:6d:a3:d3:85:af:
0f:85:98:91:6a:7f:4d:59:e4:08:4b:67:5a:87:b5:
0a:22:3d:fb:c4:87:96:5c:2e:3a:33:2e:39:f5:1e:
a4:b9:08:55:17:eb:0f:f6:d5:d8:f2:5b:2d:04:3d:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:C5:1A:8E:0C:77:00:AB:9C:97:64:A0:AC:5E:D4:F2:14:91:30
X509v3 Authority Key Identifier:
keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:91:e7:54:cd:fe:5b:71:fc:ca:92:be:5c:08:54:23:90:58:
b0:09:d2:a0:58:81:4c:ff:d8:0a:f6:a0:5d:b9:4d:90:c1:39:
12:ba:49:d9:78:fc:09:44:3e:41:3f:ac:e0:04:eb:d6:f2:58:
b1:c1:6c:c0:1a:e8:be:ff:f8:fc:56:5e:19:53:ff:1b:78:aa:
3b:26:4b:20:02:47:bf:43:f8:f5:cb:22:b6:cb:8a:2d:db:08:
39:8e:6a:df:08:b1:c9:68:28:e4:a6:45:04:2a:e1:ae:46:ca:
e9:5d:c6:0d:20:b7:55:e2:5e:5b:f6:8f:a2:e0:52:8d:75:b9:
0e:68:d3:ec:75:6b:51:e0:ad:74:29:e1:d1:eb:81:74:07:9f:
55:ca:9c:4f:95:b2:fd:fe:8f:f8:93:9e:54:6c:24:74:fc:f8:
a6:67:e2:d3:1b:57:b0:3a:be:f5:40:8d:ab:14:82:2f:6b:c5:
6b:77:96:91:46:99:e0:df:79:39:d3:b9:b1:9e:58:1e:8e:2a:
ea:7f:54:24:f8:3f:4d:ed:e1:ae:d1:34:70:7c:23:ab:77:34:
ce:df:ed:52:d1:88:12:8d:1c:97:a1:a6:f4:df:7a:49:2b:b4:
18:e2:5d:a6:79:c8:55:e5:e5:4f:d1:80:c8:59:1a:34:3b:43:
cf:06:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:35:28 2026 by rpki-client