
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: RLordny2i+AH19Xl3VjkJ3z5YbhX1y5T/r5SCavEcUs=
Subject key identifier: 3E:1A:6A:FD:2B:45:5F:12:14:53:D7:C5:5E:C5:30:FF:E6:35:9D:99
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: 72
Signing time: Mon 01 Jun 2026 08:35:53 +0000
Manifest this update: Mon 01 Jun 2026 08:35:53 +0000
Manifest next update: Mon 08 Jun 2026 08:35:53 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: LoOUF6sNR4l0r8FoNOIdM7FpRupwmM06IS/vUvoRzGU=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Jun 1 08:35:53 2026 GMT
Not After : Jun 8 08:35:53 2026 GMT
Subject: CN=6a1d4469-0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:81:dd:cd:f9:35:89:ce:01:6a:8f:d7:c0:
e2:5f:c1:c7:a5:7d:46:34:f7:91:d0:b4:0f:60:9d:
8a:53:18:c4:2c:28:28:8c:1f:65:70:72:7e:d7:53:
d0:a3:1e:b3:ad:33:67:99:ab:b4:b1:12:2b:0d:4c:
7e:e0:c1:3b:f6:a3:2f:7e:fa:58:3f:16:78:17:cc:
3e:70:a5:83:b1:b0:a1:a4:8c:11:1c:75:3e:83:b6:
ae:8c:81:53:1c:b6:b8:da:f7:78:de:a6:09:fa:ab:
1d:cf:ea:20:da:f7:50:f2:3d:58:31:2e:80:23:37:
db:f4:84:eb:c7:99:fd:98:84:81:a5:0c:61:da:77:
2a:3b:4b:67:a9:b1:b9:bf:83:f0:1f:cb:df:7b:ff:
14:f6:3f:15:4a:b0:c5:2f:3c:c7:99:db:d3:76:39:
b4:a5:7f:53:ce:75:88:dc:92:5f:0c:6a:67:f6:b4:
c1:e9:de:88:1f:1a:92:26:df:69:20:48:7d:b4:1b:
2c:92:26:50:0c:f8:7c:dc:28:95:ba:7d:d9:71:45:
d6:e1:07:9d:e0:78:c6:3f:fa:43:4e:d7:a9:ea:3c:
5f:97:1a:c1:b5:3b:2c:83:30:1a:d3:13:c3:92:ab:
cb:75:47:ca:7a:38:06:91:6d:b8:ee:a5:ed:1d:30:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:6A:FD:2B:45:5F:12:14:53:D7:C5:5E:C5:30:FF:E6:35:9D:99
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:75:76:55:ee:99:4e:1c:49:89:6a:e0:16:24:75:72:66:
06:22:7c:7e:ac:c9:31:30:9a:69:aa:e4:0b:be:84:52:22:34:
b1:24:e5:6a:8f:21:7b:b5:59:49:bf:b3:dc:98:42:f2:f1:6e:
29:5d:dd:8d:b1:63:4f:7e:22:1a:51:13:0a:cd:20:b6:4f:76:
ea:52:03:21:9e:b6:61:c2:69:86:1c:ec:c0:36:13:3e:76:5f:
82:62:48:d8:40:38:7d:ec:55:82:a2:ca:d7:8c:82:b7:84:0c:
4c:97:5d:98:b1:7a:42:8e:23:b8:b3:a3:7d:30:8e:0d:53:05:
68:12:54:27:46:9e:47:4e:de:a9:f9:da:f5:35:f4:a3:e5:1a:
9a:45:52:de:3c:d8:aa:a1:24:22:10:b5:1e:e0:3b:db:f4:c4:
c6:d0:8b:68:f6:e6:f8:69:6d:96:b5:85:a1:e7:e1:4a:07:2d:
af:bb:18:eb:5e:ad:78:fb:08:63:d4:bd:bf:18:b9:a1:dd:27:
5e:8c:aa:bf:cb:c6:82:16:91:ab:7c:31:54:30:eb:0c:ff:11:
41:91:ef:78:22:f6:85:58:af:c6:a7:fe:97:62:e8:96:ae:33:
e2:4e:22:57:ad:e7:f0:c9:0d:dc:fb:f1:d5:a1:46:68:14:9a:
2a:c7:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client