
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json)
Hash identifier: +thWFtGJpx4jiQTn9aGZpKdJCnh93XbIuMolGhq7Gkw=
Subject key identifier: C4:B9:9F:39:C4:DD:AD:BD:08:ED:79:68:16:3A:0C:6E:9E:BF:88:0F
Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
Manifest number: 0889
Signing time: Wed 20 May 2026 20:38:30 +0000
Manifest this update: Wed 20 May 2026 20:38:29 +0000
Manifest next update: Wed 27 May 2026 20:38:29 +0000
Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: q2hIwiF3JvXhPmR0pkL/WraaSmjKKFrhhEboDlBZoSY=)
2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: Wg9RfGn7DWEr8GbZKeTSiadhyGcaa2JL5/PabgAQIOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Validity
Not Before: May 20 20:38:29 2026 GMT
Not After : May 27 20:38:29 2026 GMT
Subject: CN=6a0e1bc6-feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:9c:13:1e:e9:24:da:43:ef:94:a5:6d:1a:
b9:9a:81:63:79:b7:67:6b:e1:cb:ea:68:7e:b0:30:
3a:c9:8a:e1:b7:b6:d7:c1:f0:77:66:39:58:3e:99:
1b:d8:e0:0c:bd:0f:dc:3f:d9:13:c0:f1:8a:03:2e:
63:bd:48:e2:38:0a:00:f9:12:f1:44:79:59:15:69:
4d:5a:86:e6:25:65:69:da:c4:99:c2:4c:ae:c2:0f:
05:bd:66:aa:5a:ed:e6:99:8d:96:38:3f:c0:4d:ec:
68:32:c6:06:aa:0f:0e:c0:c7:00:51:09:8e:2c:82:
5c:b4:bd:15:7f:0d:f6:a9:87:ab:16:e5:c8:5c:f7:
b6:96:cd:57:02:91:69:70:41:52:67:e8:10:5d:5f:
81:3c:b2:55:aa:b6:6c:f6:7e:7b:5f:e2:7f:64:07:
bb:0b:2b:6c:ab:4e:3f:42:14:0b:19:84:20:cc:92:
51:a7:c8:17:a6:80:64:fb:4b:c0:31:6f:2d:59:c0:
07:77:5c:b5:e8:2e:37:fb:ca:29:ac:31:4d:ba:02:
01:40:d5:10:f6:06:e9:15:c3:b2:0f:16:2a:e8:58:
37:ba:b4:e3:7b:d7:0a:51:26:ea:fd:e8:a1:fd:27:
59:87:75:4f:ec:db:13:43:68:54:45:ed:d2:38:a8:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:9F:39:C4:DD:AD:BD:08:ED:79:68:16:3A:0C:6E:9E:BF:88:0F
X509v3 Authority Key Identifier:
keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:d5:3c:3f:ed:03:04:97:ea:70:c2:c3:9c:76:05:ae:60:
d7:db:25:d3:e4:e9:55:2b:09:80:bc:11:d6:22:6f:28:b2:c0:
71:2b:3c:13:10:69:c3:2e:46:60:5a:d8:e5:d8:21:88:8c:b4:
1a:6d:01:6d:9f:9f:10:3c:45:cd:78:82:34:b3:74:e0:6c:bd:
66:ca:6f:3a:ba:21:09:70:d9:66:e3:af:86:ab:6d:ec:e1:d4:
6f:85:a3:cf:d0:54:dc:d6:23:ec:cd:82:8f:f0:b4:e6:88:19:
61:1c:b9:9b:ad:a6:0b:90:85:e0:3e:a8:fc:6a:7f:ed:a0:cf:
be:6d:e7:0f:cc:ef:72:3d:cd:44:75:fb:36:c7:aa:b3:e2:70:
70:4d:3d:ce:c4:a9:a9:fb:7a:05:83:c2:ad:13:d2:8f:cc:60:
a8:15:9d:40:00:84:22:56:73:91:92:39:d5:ed:98:d8:97:06:
0a:dd:71:bb:78:a2:8c:6c:73:3f:14:e8:db:69:83:52:78:b6:
70:54:86:95:b8:f4:62:fd:f6:66:79:37:b6:c6:dd:97:c5:2e:
81:fe:92:7b:da:90:d4:2d:46:f7:1f:8e:9c:95:21:1f:27:78:
7e:e8:b2:fe:41:8c:29:2d:a0:e8:e1:56:bd:5d:cd:b1:bd:07:
bc:78:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:07 2026 by rpki-client