
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier: 34oi5jkWC14h205AFHIWeqC+3qWy3PkvYDLjFGfmHNs=
Subject key identifier: ED:E0:7D:1B:0D:5F:A6:45:53:57:2E:22:49:B9:90:4A:1D:6B:38:5F
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number: 073E
Signing time: Sun 04 Oct 2026 22:00:38 +0000
Manifest this update: Sun 04 Oct 2026 22:00:38 +0000
Manifest next update: Sun 11 Oct 2026 22:00:38 +0000
Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: rSuHYsnWjtKsPL3Ru1FGgfYDSlCE8BhoRvRgQ6noNh4=)
2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
Validity
Not Before: Oct 4 22:00:38 2026 GMT
Not After : Oct 11 22:00:38 2026 GMT
Subject: CN=6ac2cc86-54ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:2f:11:7e:a4:ec:8f:f1:b3:17:c7:69:81:
61:e4:92:44:12:92:2c:09:b7:5e:09:29:62:81:78:
fc:8b:10:a2:2d:a2:f6:d6:ed:dd:3e:12:12:36:22:
37:ba:8a:f8:b9:fc:95:8c:60:b6:79:fb:e1:9a:5c:
5d:60:e2:9d:a5:80:23:42:a7:7c:c5:78:57:e2:b9:
8e:dc:69:ee:66:ca:01:ad:46:56:27:86:e9:67:95:
9a:a9:c8:1a:3c:10:78:30:86:77:11:c9:47:b7:10:
65:74:57:7d:d8:3e:b3:e1:63:56:62:93:12:69:ae:
dd:6e:e7:0b:09:2e:90:9c:ea:9d:62:3e:92:03:0a:
9f:55:a8:2f:cc:7c:ea:3b:d0:f9:7c:fa:59:8c:18:
0d:cc:02:ba:8d:42:39:41:ac:71:eb:28:ea:2d:57:
d8:e3:67:fd:b7:64:c7:85:f3:c2:82:d0:de:41:fd:
11:00:b3:ca:bd:8e:f8:20:79:40:ee:6f:c5:f1:75:
00:38:c6:36:6c:f9:80:73:39:78:14:a9:7c:3b:03:
bf:d8:ff:50:13:1c:aa:93:b0:77:82:26:2b:12:23:
25:a9:88:e6:d0:93:0f:af:54:91:96:f0:a4:c6:ea:
66:ee:5d:29:00:96:4b:99:0a:0c:55:f5:17:55:04:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E0:7D:1B:0D:5F:A6:45:53:57:2E:22:49:B9:90:4A:1D:6B:38:5F
X509v3 Authority Key Identifier:
keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:ce:5c:eb:37:d3:76:3b:97:df:d6:8d:8b:bc:13:9b:a9:06:
a5:46:0c:e0:97:82:cc:73:3b:cb:4b:2c:05:e4:3a:fd:9f:20:
96:9d:be:08:e2:db:74:50:d5:cb:ff:d9:ed:97:c1:a0:ba:76:
8d:dc:80:1c:0d:04:bf:58:6f:c2:9e:9b:35:1b:40:f4:06:de:
77:07:10:1c:89:78:df:61:00:6d:be:c8:f1:09:8f:ee:b0:6f:
c7:7d:aa:34:f1:c1:12:c3:95:dc:ab:0d:19:a4:d1:5e:3f:c4:
56:fa:e2:5a:8c:cc:53:f9:40:51:49:ea:ef:17:de:9e:8e:3a:
46:06:eb:d3:ee:3f:31:de:5a:a8:bf:12:fa:a5:c1:8c:92:ff:
06:77:18:b4:9c:f2:3e:cb:87:7d:69:a6:ac:ba:6e:bc:8b:02:
af:cd:55:24:2d:31:5e:dc:44:73:a9:81:1c:b7:59:f4:a4:3d:
cb:4d:ad:3d:ba:99:a8:7b:02:a6:8b:4c:9d:7c:6e:67:3c:75:
63:b2:db:2f:e1:c5:6e:58:47:96:d3:0e:f3:2e:c0:20:cc:0d:
ad:99:8e:4e:b6:59:c5:ec:06:01:62:77:11:17:77:0f:c6:04:
08:e7:c5:25:b4:42:8d:b5:ac:ca:e8:ba:2b:02:95:cd:ba:bf:
94:4e:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:32 2026 by rpki-client