
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json)
Hash identifier: zOqlF5GI8A66Bl3uHcmIQwSiYmljATanM3z3Ezwz9uE=
Subject key identifier: 1A:53:0C:B1:B0:97:3C:43:68:92:04:99:44:24:AC:1D:30:AE:74:EA
Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77
Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
Manifest number: 63
Signing time: Mon 05 Oct 2026 08:31:58 +0000
Manifest this update: Mon 05 Oct 2026 08:31:57 +0000
Manifest next update: Mon 12 Oct 2026 08:31:57 +0000
Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: 6ncUqMrO6N+AZzBCHiaYbZ0J5RvnBG5t5L1LHXOLDeE=)
2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=)
3: SCWBN6UwwHz6NKWyP3ppNLS_om0.asa (hash: djjwETj363SKlFMqOwsffjeds1LKzaImsUEhC6ULzLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl
rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
Validity
Not Before: Oct 5 08:31:57 2026 GMT
Not After : Oct 12 08:31:57 2026 GMT
Subject: CN=6ac3607e-ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:1d:96:ad:d3:fd:19:30:3d:95:3f:b9:69:
05:64:6a:4b:32:a6:68:01:d0:69:69:3c:38:a5:94:
cc:22:09:a6:d1:2b:d2:48:50:06:5e:12:27:20:33:
45:7e:da:17:c8:92:94:76:c6:22:ce:1b:96:e8:dc:
c0:ea:5d:52:89:ba:47:97:b9:e9:68:f3:f1:9a:3a:
0e:e0:31:cc:fc:24:b1:e1:0e:fd:71:58:d2:56:33:
b1:13:d8:c9:48:d5:e8:95:94:fb:e6:fa:f5:c9:60:
c1:08:70:5d:b1:5c:82:1a:8a:73:47:0b:d4:2c:bf:
2d:79:6a:76:d6:9c:3c:e3:7c:22:c9:20:60:31:58:
f1:70:83:19:f9:cc:83:07:e9:95:fc:61:c0:84:28:
03:6b:8a:b3:29:6c:9c:ad:5e:84:61:6f:ad:aa:9b:
b5:58:5b:ca:4c:e9:0a:ff:d0:d0:30:8a:ec:73:63:
9b:c5:75:9d:fe:da:59:57:9a:b8:5a:a4:fb:5e:bf:
4a:52:2c:bd:a7:0f:07:d5:43:74:69:5f:d1:ca:8c:
a5:36:1d:87:7f:93:7c:b1:7a:11:59:50:99:88:1d:
71:8e:8b:04:d7:a7:d9:fc:bc:09:e7:7c:bf:4c:80:
e4:8f:2e:fb:d3:b0:e7:d3:45:6d:fc:28:9d:95:67:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:0C:B1:B0:97:3C:43:68:92:04:99:44:24:AC:1D:30:AE:74:EA
X509v3 Authority Key Identifier:
keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:f4:2f:08:a1:c5:8f:9f:18:ec:28:e4:3b:1e:f4:a9:33:
72:31:0c:9e:70:a3:68:f3:af:c7:00:8b:bb:32:6e:20:7e:9c:
35:cd:b2:02:94:cf:41:dd:75:38:3a:2a:30:b7:6e:9c:9b:d9:
42:c2:c9:10:ac:1b:48:3f:d5:27:c0:92:71:00:32:3f:88:8b:
1f:7f:86:fe:72:c8:95:e3:26:d8:b7:52:47:8a:42:9e:a6:7d:
e7:0f:d7:34:6e:36:0c:24:28:6b:62:96:58:8c:db:81:31:08:
97:f9:ba:4b:12:d7:7a:73:8d:00:d4:63:78:75:c8:73:1a:51:
31:64:ef:91:cd:60:47:16:bc:66:ae:7c:fa:61:3a:2e:45:ea:
ba:a5:35:89:41:e1:30:a4:ee:16:bf:7b:d9:1c:bb:26:ec:9d:
da:ea:6e:52:ed:91:85:90:1c:d2:e0:07:5c:68:63:60:73:0c:
f7:e8:f4:e3:c2:0b:90:9b:2f:d8:e6:bc:f4:7d:f2:66:c5:fb:
b2:6f:50:87:4a:22:ff:69:4b:7c:64:46:0b:90:c2:b1:23:68:
ca:46:11:2f:29:ab:af:33:a9:8e:aa:03:be:26:2f:b3:54:e0:
4e:02:11:0d:2c:cd:1d:fd:89:bd:3d:4f:0e:31:10:00:69:a2:
96:e7:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:23:10 2026 by rpki-client