
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier: IvLEozQRRTCa7nCqpcvbcQAXt1Cup2+E+hHGGM9imsE=
Subject key identifier: C2:EB:A4:98:EF:4B:8B:A2:29:99:73:44:67:7D:FD:F4:58:B5:B3:2E
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number: 0726
Signing time: Tue 18 Aug 2026 22:22:32 +0000
Manifest this update: Tue 18 Aug 2026 22:22:31 +0000
Manifest next update: Tue 25 Aug 2026 22:22:31 +0000
Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: cbKn8oIKld4wMnIkurmTLb3dCSZi4cht4VIe9i25qLg=)
2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
Validity
Not Before: Aug 18 22:22:31 2026 GMT
Not After : Aug 25 22:22:31 2026 GMT
Subject: CN=6a84db28-8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:f2:53:e4:78:13:9e:05:7a:cb:62:ed:ca:
a8:0e:c2:cd:98:e5:3f:b0:0d:d2:79:03:9b:c9:c8:
e1:ad:92:70:f8:c8:27:ae:c8:e8:e4:10:64:6c:7d:
4d:18:b3:93:70:ad:25:5f:95:a8:67:56:03:ab:da:
f3:47:f1:45:6c:f7:3c:dc:62:50:df:6f:fd:50:81:
fb:7e:5d:62:9a:50:27:f4:f0:9b:53:04:41:86:59:
3e:51:7a:6a:09:c5:c6:00:54:ab:ce:43:22:5c:f3:
ac:39:70:37:69:c8:23:5a:fe:f4:70:69:73:0c:e0:
41:33:4a:35:03:c4:ad:2a:0f:75:cd:dd:95:1b:99:
d7:f7:fb:4d:0a:6b:ea:21:9b:01:8f:9f:2a:9f:e5:
49:e6:f3:2b:83:97:4d:00:f2:5f:28:37:40:da:71:
39:73:8e:0c:b5:fa:0e:22:58:f3:1c:e6:f7:c4:78:
c7:ca:38:c2:a9:99:b8:81:48:00:62:01:25:38:64:
50:e6:1b:dd:ba:a2:3a:9d:18:48:5b:c3:7f:e9:92:
29:9c:c2:9e:c7:29:4a:89:6b:71:c0:88:03:a9:7c:
39:6c:15:9f:b1:05:6d:26:74:e3:6c:a5:1b:ef:bb:
5a:21:98:3f:e4:f1:e5:76:92:69:65:fc:7b:e2:02:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:A4:98:EF:4B:8B:A2:29:99:73:44:67:7D:FD:F4:58:B5:B3:2E
X509v3 Authority Key Identifier:
keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:4d:41:e4:eb:a7:64:27:5b:c8:c7:9a:f7:32:82:07:10:
fc:0d:15:d5:11:c4:cd:0c:40:07:00:1a:76:22:59:3c:40:9e:
90:1e:5a:a9:94:95:01:e2:11:2e:a8:4b:2a:f9:29:de:00:b6:
7a:4f:14:24:da:b4:6f:4b:e2:d0:88:a5:68:eb:91:58:9b:e4:
f1:0b:69:7f:c3:8e:ad:e5:83:c4:af:01:71:e3:7a:b9:5b:aa:
7b:60:42:85:f7:a7:d2:67:bf:35:98:71:39:62:45:bd:46:d2:
8f:f8:3a:f8:c9:74:3c:5d:f9:96:02:f5:8d:e5:44:1b:5b:30:
19:03:99:25:5f:8a:e3:30:97:9d:81:e5:b2:47:4a:7b:5d:e3:
b9:69:ed:dd:55:47:75:79:04:95:c0:36:53:38:64:da:e0:c1:
fe:b6:b7:da:47:6f:b8:7c:3d:06:58:8e:7d:76:ee:42:50:03:
a6:1d:f1:8a:86:f3:b3:41:bf:58:6a:8c:7f:0f:31:0c:0a:07:
95:b9:cd:21:eb:9f:86:bc:52:70:61:58:24:35:a7:b0:ec:fb:
c9:64:73:88:1b:a9:c3:b9:f8:d3:1f:62:df:97:cc:b4:26:67:
d2:ea:49:5b:46:7f:21:e8:20:f4:d5:7e:5b:3c:2d:41:22:53:
15:49:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:14 2026 by rpki-client