
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json)
Hash identifier: AO8BC8J4OGyOdC7vz2vkNQlq0Q82inIk0hicwN6kAjQ=
Subject key identifier: 98:FB:25:1B:AA:C0:FC:D9:24:19:42:55:63:59:32:8B:CE:4F:BE:A4
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial: 0C65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
Manifest number: 0C60
Signing time: Wed 20 May 2026 18:42:59 +0000
Manifest this update: Wed 20 May 2026 18:42:59 +0000
Manifest next update: Wed 27 May 2026 18:42:59 +0000
Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: TigRT+Zg/6VgMa6RzraBpDhJ38DngN8aXdBEqOn//4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Validity
Not Before: May 20 18:42:59 2026 GMT
Not After : May 27 18:42:59 2026 GMT
Subject: CN=6a0e00b3-15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:e7:7c:35:83:27:ec:58:34:05:f6:f8:a9:
17:5b:e7:eb:0a:89:c3:d8:4d:80:59:5f:b8:19:88:
3a:2f:9c:84:72:f4:12:a3:a9:e7:fe:ad:5a:23:c5:
11:81:b9:e2:2e:ce:de:e7:e4:ac:a3:a3:e0:ff:ef:
20:7c:e5:a8:64:c9:94:a2:92:bb:07:e8:a2:73:4a:
82:be:ec:e2:c4:dc:04:dd:ee:8a:fd:1d:12:de:7f:
ac:a4:21:06:a6:c9:5f:4f:bf:b0:d5:14:ec:e1:06:
1b:97:a9:41:fb:ec:7b:4e:38:d7:bf:35:33:51:67:
81:e3:ca:92:39:87:7e:81:74:66:1e:f2:f6:d2:fd:
06:3c:83:4d:79:a4:40:5d:59:bc:88:d6:8e:fe:ca:
5a:bc:28:d3:67:66:7b:91:c2:04:61:9a:7e:b8:61:
7b:ac:50:b4:4c:6d:7d:5f:9a:28:cd:81:95:87:fd:
3c:bb:53:f7:68:fc:b0:6f:ad:ad:07:60:9f:5b:8f:
1f:16:95:14:d0:53:60:aa:be:5d:72:69:51:ea:b9:
a8:a3:5f:c2:c1:a7:dc:e9:eb:59:cf:f4:77:d8:c7:
e3:c7:2d:30:fd:52:aa:c6:10:28:5f:75:8f:cb:7f:
b9:92:f2:12:d9:24:37:aa:d6:5e:dd:f2:4c:d2:c7:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:25:1B:AA:C0:FC:D9:24:19:42:55:63:59:32:8B:CE:4F:BE:A4
X509v3 Authority Key Identifier:
keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:72:42:17:96:ff:5a:4f:13:0b:0a:98:1d:35:c4:07:19:
36:1d:c3:03:7f:02:8f:ab:ca:c4:a9:4e:e2:2e:05:73:e0:91:
c9:2d:44:ab:6d:a5:7e:43:8a:13:09:42:ca:19:e5:d0:40:ab:
15:43:11:8a:29:5e:44:41:00:4e:d8:38:77:a5:7d:0f:f1:a9:
15:61:38:3c:49:66:56:a3:22:60:dd:9f:70:0c:38:74:30:64:
e8:87:fa:bd:78:77:9b:69:3d:08:fa:99:01:f0:74:92:40:04:
a0:63:b2:81:fa:35:62:50:d9:54:8e:99:81:0e:fa:53:93:74:
a7:cf:4e:cb:20:d5:56:0a:70:da:4c:af:80:6b:92:a0:0c:7b:
94:1a:72:79:8d:9e:f2:c6:f7:a1:bf:d1:df:8f:86:f3:cd:59:
6d:93:0d:d9:07:8d:47:71:4a:ac:f5:3d:3e:b5:b7:ee:0c:ad:
c9:b0:5b:11:17:ed:97:7b:86:ff:50:a1:2a:9a:ca:78:8b:48:
d6:f5:8a:6b:95:da:a0:f0:13:3f:f4:2e:1f:05:60:4c:f1:3f:
72:02:6b:b2:f4:9c:78:7d:4f:b0:ae:59:1a:f4:ee:37:b1:45:
91:46:cf:72:2c:8e:0e:71:ab:5c:db:97:23:53:91:22:40:8a:
ee:b5:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:26 2026 by rpki-client