
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json)
Hash identifier: JsEi/AscWHkusXCepkF/q9m/b8edGl83ndAdN/FfLPQ=
Subject key identifier: 2E:C6:0C:CA:D9:9B:F0:19:FE:46:A1:C2:5C:D3:3F:F2:E6:4D:0C:F8
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
Manifest number: 011A
Signing time: Sun 05 Apr 2026 05:18:42 +0000
Manifest this update: Sun 05 Apr 2026 05:18:41 +0000
Manifest next update: Sun 12 Apr 2026 05:18:41 +0000
Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: N1iAHIacqjaldzhS83hHyQ7oHzz9VNEGSvyMdiGfOko=)
2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=)
3: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Validity
Not Before: Apr 5 05:18:41 2026 GMT
Not After : Apr 12 05:18:41 2026 GMT
Subject: CN=69d1f0b2-7d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:e6:d2:89:09:6e:77:28:c9:3b:58:2c:74:
3e:6b:36:2b:cc:9c:4f:93:d8:81:c6:66:76:76:82:
ca:ea:40:d8:69:48:ea:13:d2:30:0a:06:6c:c0:19:
ec:46:74:73:99:54:7e:97:61:78:95:c2:2b:d8:61:
e3:df:72:b7:37:9a:5d:e1:9b:1f:ff:84:18:4e:3e:
b6:24:e1:e9:e3:e2:ba:ee:40:28:10:51:f1:07:d1:
e2:eb:1a:2a:d2:2f:e8:75:eb:db:cb:38:eb:80:8e:
2e:9f:d2:45:4c:b6:23:84:13:92:f4:ae:de:ec:11:
7e:d9:65:35:ab:59:4d:08:64:a6:5e:b5:31:36:29:
95:70:a4:32:0a:34:05:6b:5c:d2:be:d5:e4:98:f9:
dc:72:bd:4e:c6:f2:42:19:5a:13:e3:e0:24:49:d0:
1e:b0:48:d8:06:28:aa:ae:6e:6e:3a:96:4f:e2:b1:
f9:6d:f7:a6:3d:7c:36:73:be:7f:69:70:47:aa:c3:
ae:82:0f:40:34:b2:1d:26:ad:f7:30:64:7d:0d:80:
ec:09:fa:bd:e6:60:45:a0:03:46:f0:e0:56:7d:0c:
5e:04:ad:ea:7a:75:b7:8a:24:8f:a8:c1:e6:0f:2b:
29:8d:d3:23:6b:e5:5b:d5:7e:20:a1:54:28:5f:fb:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:0C:CA:D9:9B:F0:19:FE:46:A1:C2:5C:D3:3F:F2:E6:4D:0C:F8
X509v3 Authority Key Identifier:
keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:63:2f:83:88:8d:7d:86:db:a2:cb:f8:7c:11:40:b7:4c:4a:
cf:4a:ab:a9:df:bc:5d:78:09:d9:e5:8c:18:ed:90:80:6d:55:
13:73:dd:0b:5e:b9:05:9d:c6:b7:4d:8f:8b:b7:dd:a7:d3:7f:
21:84:40:95:f0:75:b9:57:81:88:d7:4d:0a:62:4a:bd:28:67:
40:97:7a:e2:37:a4:ae:58:5c:c7:c1:d3:1f:2e:bb:f1:ef:d1:
69:dc:7d:cb:d8:d8:79:5b:3a:44:5a:ff:18:0c:88:2d:d5:ed:
d4:95:50:0a:9b:56:8b:6b:de:b8:39:70:57:ab:32:8e:fb:bc:
0d:2d:48:88:6d:8a:b7:6d:68:fd:d6:44:89:7b:13:54:d6:c3:
c6:ba:32:be:64:6a:25:49:29:3b:11:bf:20:9a:7d:51:f1:7f:
b6:f4:71:aa:9d:af:da:3d:8a:60:96:8b:81:42:19:c8:43:b7:
a7:a3:ab:9b:50:b5:d3:ea:bb:f9:a8:4c:c5:2f:35:6e:7b:42:
03:15:07:b0:9b:bc:be:2f:44:8f:59:aa:ab:d8:76:6b:3b:c4:
d4:14:ba:2d:e8:3c:f8:1a:da:fe:73:17:b5:18:d8:d6:ed:a3:
76:c5:57:b5:9e:73:a5:24:7c:e5:ae:db:f3:b0:57:3b:71:6f:
c4:c7:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:38:14 2026 by rpki-client