
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: M4T41+Ho4Nwxf5wck/YkIp//pGK6wlGtnyoK3gocL4Q=
Subject key identifier: 67:6D:0E:01:A2:49:0B:C9:04:9B:B3:31:D0:DB:A8:95:54:5A:92:CB
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 0183
Signing time: Tue 03 Mar 2026 02:36:31 +0000
Manifest this update: Tue 03 Mar 2026 02:36:31 +0000
Manifest next update: Tue 10 Mar 2026 02:36:31 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 28VIi+X3+0DhBnTiDXWAUwzFK6zn2bXox7X7QcCjA+I=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Mar 3 02:36:31 2026 GMT
Not After : Mar 10 02:36:31 2026 GMT
Subject: CN=69a6492f-013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:38:9d:28:c6:6c:f5:45:bf:cb:7d:a5:fe:
ea:a3:42:70:3c:9f:f1:80:75:9a:ac:57:54:22:17:
e0:3f:75:0c:56:86:b7:39:2f:b9:1a:bc:cf:84:b1:
2a:7f:51:50:33:7f:3d:c3:79:32:0e:f4:a8:94:d8:
26:fc:8e:ee:99:43:dd:85:a5:d2:62:e6:41:67:c3:
39:01:37:36:1a:83:8c:ec:a8:c0:b6:35:08:31:09:
e4:de:73:fd:a9:04:9f:9e:d3:ee:7f:ec:7b:59:40:
ad:3a:e0:91:38:20:5b:e8:cb:3e:f8:cb:37:01:29:
be:be:de:62:57:8b:78:c8:c9:aa:90:41:9e:70:a7:
02:46:62:a5:cc:76:05:8e:3b:ad:29:c9:a6:37:46:
28:e3:18:ce:0f:26:82:ec:96:6b:06:20:26:87:f7:
62:3f:7d:35:91:f6:58:85:d0:71:75:f6:b2:fa:3e:
c5:09:03:6d:43:73:c3:fa:23:0d:94:0c:5b:8d:b3:
5c:96:76:da:ff:b9:f7:7b:b8:b2:d6:9e:6c:7d:0d:
9f:d6:7f:67:0b:0c:a1:92:44:62:37:63:cf:8f:45:
07:31:4f:0d:de:16:65:e0:6c:66:35:60:6b:cd:93:
b7:00:f2:90:fb:fb:80:f0:f1:be:59:fa:ab:c5:fd:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:0E:01:A2:49:0B:C9:04:9B:B3:31:D0:DB:A8:95:54:5A:92:CB
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:38:fc:fd:b9:1d:a1:4b:5b:a7:72:a7:6f:95:b0:b6:21:
61:38:6e:84:0e:1d:20:0b:c6:de:8d:fb:6b:a6:1d:94:1f:4f:
50:30:9f:bf:a4:a1:3b:6a:47:70:28:5c:cd:c7:fe:d0:37:43:
18:90:fc:55:9f:35:32:fd:0d:a8:e2:50:99:8a:70:6a:06:63:
67:ad:27:e9:25:9b:49:5b:11:61:ca:85:00:cc:00:3f:8c:06:
ec:ba:5b:e3:b3:c0:37:bb:e8:79:9b:95:ee:ba:61:b8:e8:8c:
95:25:04:29:b4:e8:de:bf:f9:c9:34:05:75:c6:4a:aa:90:a1:
2f:e2:96:9f:27:42:1b:af:73:53:e8:08:52:32:0b:80:3d:5f:
6c:56:02:f9:2d:0f:5a:d0:be:c6:05:bc:9b:12:b5:83:91:73:
75:14:6c:28:f8:46:1f:18:f7:53:7b:66:25:c9:1c:aa:d9:cf:
4d:19:3c:5d:f5:f3:4e:8b:e9:73:ee:f4:6a:f2:35:c0:bc:bd:
a7:c9:a3:d5:83:cf:ce:bf:66:62:39:d9:50:f8:02:a8:ed:1b:
c4:4e:5c:e0:be:e8:c2:6a:8d:cc:ea:ab:f2:2d:fa:3e:e7:98:
2d:ae:a9:ab:57:3a:2f:b4:59:89:d7:b5:d0:97:41:af:a8:43:
a6:7d:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:44 2026 by rpki-client