
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier: 8mIp/x7UP5nl7bPSg1zeErl1hwE4CCS4YCjgw3No52A=
Subject key identifier: D7:D1:9E:A0:84:D4:F9:A1:19:3C:95:9E:01:F6:1C:0E:64:70:D9:89
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial: 0806
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number: 0800
Signing time: Sat 04 Apr 2026 20:56:44 +0000
Manifest this update: Sat 04 Apr 2026 20:56:43 +0000
Manifest next update: Sat 11 Apr 2026 20:56:43 +0000
Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: 9R7hHklcaPfPr6AjjQgxKzAtLVOdGSG2fU2wgQpafII=)
2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: dWIZyaUXtS3+l+2OTps4tqiCz5E9mMM/Wq+9JsY8Y08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Validity
Not Before: Apr 4 20:56:43 2026 GMT
Not After : Apr 11 20:56:43 2026 GMT
Subject: CN=69d17b0c-dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:13:4f:b7:59:ca:5e:49:be:66:3e:b5:70:
9f:f7:ff:86:b0:d3:94:df:48:25:89:7a:c5:fd:13:
07:7a:6f:26:ad:73:fe:8f:41:ae:c9:b5:09:e3:64:
a1:af:7b:53:16:10:a3:e4:1d:a8:10:a9:60:49:dc:
55:c1:74:b0:3d:0e:2a:fb:e4:29:a6:d4:da:26:f2:
05:b9:fa:bd:23:d8:c5:af:1b:fa:85:0c:6f:53:21:
bf:d8:5f:10:2d:74:bd:82:36:bf:88:f8:ff:a8:1f:
93:2b:f7:46:a0:1d:36:87:fe:1b:bd:fa:5e:ba:c5:
6e:aa:c5:8c:b0:cc:46:4c:ff:29:c3:4b:1f:68:ce:
a8:64:26:82:cb:55:2a:66:9b:fb:b2:c5:71:aa:54:
84:c4:53:a2:1a:8c:ca:8d:bc:80:c4:d7:81:75:21:
2f:91:7b:96:9a:2c:33:dd:f8:4c:c8:70:c3:97:3e:
d5:dc:98:3a:f2:8d:1a:07:17:3d:69:97:5e:14:53:
4d:53:94:a7:3a:ac:15:cf:e3:aa:d5:e9:60:e5:58:
b7:ec:d9:b2:3f:72:97:fe:8b:56:98:1f:17:94:4d:
83:ae:9d:c7:b2:d0:81:dd:9b:07:6d:5e:ef:40:aa:
db:f6:56:e3:fe:22:cf:10:24:3f:b7:49:49:3b:7f:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:9E:A0:84:D4:F9:A1:19:3C:95:9E:01:F6:1C:0E:64:70:D9:89
X509v3 Authority Key Identifier:
keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:52:61:c5:23:f5:94:f3:7f:e4:17:a6:87:e2:1c:72:ed:27:
14:36:b6:1a:74:a8:0f:25:78:ef:ea:2c:20:a8:92:2a:ad:66:
c6:bd:06:c3:b6:ad:37:8b:8e:9c:5d:62:b0:7a:31:83:b2:8e:
73:c8:ba:3c:32:59:24:03:f5:2b:20:21:72:4b:87:a0:a9:be:
00:76:e1:ca:b1:66:9a:4b:c7:5e:66:e4:5c:af:8c:94:ee:18:
26:78:14:6a:86:fb:54:48:6f:d0:e7:cb:ed:86:57:0c:07:a9:
bd:25:2c:87:29:04:21:05:66:56:0a:6e:4d:83:30:dc:e8:19:
3c:93:98:33:a8:df:fb:06:b7:f7:b0:73:9c:65:c0:95:21:62:
37:cc:f0:d3:82:19:10:d4:a9:ac:46:30:64:95:d3:dc:7f:bc:
be:c3:3a:7b:a3:4b:b1:6b:46:b3:91:42:3f:9e:f5:21:7c:ac:
3f:32:4f:36:25:93:85:8e:c7:31:e3:6d:87:a4:d4:7a:01:63:
59:04:1d:3c:2f:24:da:10:cb:75:30:e8:21:f9:f5:77:c4:71:
c9:9f:fc:ac:2d:5b:2c:83:dc:53:75:e8:8c:5d:44:ca:31:fb:
85:75:e2:9b:28:f7:b7:3f:a5:87:ef:6c:6a:8f:06:4c:44:a8:
cf:ab:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:56 2026 by rpki-client