
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: SpdBYfRwy32Pl2gg6BTVgYSaVhoC2TRyZ258qtLhY5s=
Subject key identifier: 0C:BF:EB:AC:04:F8:84:5E:BA:88:D9:80:D8:5F:39:23:C1:91:23:94
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 01F5
Signing time: Sun 11 Oct 2026 02:15:44 +0000
Manifest this update: Sun 11 Oct 2026 02:15:43 +0000
Manifest next update: Sun 18 Oct 2026 02:15:43 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: /TNeoJdm6noGDdOHRHjSZ8hqFmYlVbKQtchFeeZvnF0=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: U/DEuDwRwhqtKgxxnucO+fNicfaNI7xpxs1zj8ALIgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Oct 11 02:15:43 2026 GMT
Not After : Oct 18 02:15:43 2026 GMT
Subject: CN=6acaf150-857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:e1:65:0b:a0:c9:d9:97:68:29:d3:15:e1:
fb:c4:91:79:f7:9c:cf:17:38:8a:ed:d9:fe:64:22:
01:4b:36:47:92:7e:73:ae:de:fa:ed:58:61:53:f4:
22:11:69:de:3e:b5:37:b6:7c:2d:be:af:53:90:05:
77:ae:f8:31:92:d5:96:7f:e2:7b:3f:de:a3:02:6c:
b8:44:79:23:5a:d5:f8:f9:82:57:bc:d8:01:61:34:
0e:0e:ba:0a:1d:6c:18:6e:8b:13:e7:cb:31:8d:d4:
1a:95:48:43:a2:f7:d4:52:a0:ca:98:7b:02:4f:ec:
d5:ad:b8:39:85:bd:5d:83:c8:60:76:95:db:c9:ab:
5c:26:db:38:18:fd:68:25:22:71:ed:88:b3:21:0a:
12:9b:26:3c:91:5f:81:21:fc:bd:b0:2c:d9:78:df:
88:cf:8a:d5:3b:01:b0:01:24:22:c9:12:34:ba:64:
e6:6b:3d:5c:54:78:99:13:28:09:da:59:84:2c:67:
47:5a:46:11:47:ac:8d:40:29:ff:4b:ae:66:62:cf:
61:05:6b:37:63:b1:9f:ed:98:c6:11:93:02:c5:d0:
d8:44:a2:78:19:ce:c2:9b:d9:20:1c:76:c9:1e:ac:
2c:ea:26:af:66:5f:d0:3e:ef:7a:1e:fc:42:4e:61:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:EB:AC:04:F8:84:5E:BA:88:D9:80:D8:5F:39:23:C1:91:23:94
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:5a:cf:ab:13:e8:15:e1:b6:9c:7a:d0:52:d5:ec:f0:d2:
1f:8b:b4:a9:2e:77:52:4a:10:ba:8f:f5:ce:99:54:50:a3:07:
43:11:ef:ca:50:e1:c5:67:b5:ae:d3:3d:9e:e2:b5:f3:ff:f4:
1a:47:cd:f3:66:17:db:e5:21:e8:4e:fd:61:42:42:0b:27:2e:
65:01:c7:d1:b2:60:62:e0:90:03:69:ce:09:25:43:3a:aa:7c:
46:53:fd:f4:23:1f:66:e2:44:70:32:ac:68:42:cf:c6:dd:ce:
e9:8b:28:ac:9d:44:a4:88:52:c2:2c:6a:d5:fd:20:2c:8f:08:
67:93:f4:cc:03:4d:f6:bd:83:8c:ea:8d:5b:c8:de:35:dc:9c:
5e:9c:b2:93:24:e4:5f:0d:6a:55:83:18:74:ea:5e:c0:95:ad:
2e:be:e8:d4:19:3e:cc:b1:14:57:fb:a6:14:4c:3b:40:85:a1:
d1:de:9e:4c:54:e5:ad:f3:3e:ea:15:d7:ee:3f:18:f6:80:c3:
12:8a:0c:d1:26:27:8a:e3:35:17:35:16:cf:a2:4a:a4:c9:43:
44:96:57:09:9f:65:cb:38:fb:bb:cb:26:92:b6:e4:dd:cc:b2:
f0:fd:d6:56:b3:d4:1c:52:7a:92:99:6b:0f:45:86:ae:1e:7e:
95:da:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:23 2026 by rpki-client