
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier: YR5ZPTZSZwarJoDQzOJ9z9CubA0Vhjz3j83ZZAc5tDU=
Subject key identifier: 57:AE:87:FA:3D:17:04:83:C2:C8:DE:52:11:82:E3:7F:0B:CB:B6:99
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 0877
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number: 0850
Signing time: Fri 12 Jun 2026 21:02:25 +0000
Manifest this update: Fri 12 Jun 2026 21:02:25 +0000
Manifest next update: Fri 19 Jun 2026 21:02:25 +0000
Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: hfQzskSYn8Qm1+Lkg0mqf0hBTi5ALFuBelWZGxzJKEw=)
2: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
3: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Jun 12 21:02:25 2026 GMT
Not After : Jun 19 21:02:25 2026 GMT
Subject: CN=6a2c73e1-8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:6e:cc:8e:62:87:91:2a:d1:34:79:9b:3e:
e2:cc:17:76:50:b4:da:e5:35:75:b7:fb:9c:24:e1:
43:98:88:25:38:77:f3:60:86:26:8f:ad:f4:62:bc:
9f:47:d4:36:88:f8:50:b0:60:0e:e4:35:84:15:c0:
3c:8f:cf:8a:b0:71:bb:5f:88:07:31:c1:57:e1:e7:
31:69:c0:30:74:55:c1:c0:4b:89:c5:4c:33:fe:dc:
db:d2:ca:2b:ba:da:c6:60:f0:49:6b:e1:5d:56:92:
c7:e6:84:83:41:fe:24:10:2f:f0:72:ab:f3:5f:6b:
b7:fe:5e:9b:d3:41:a9:8b:1f:df:c3:ed:bd:23:9a:
0d:40:fb:fd:a6:dd:c3:9d:9b:50:f8:35:1e:fd:36:
20:c2:fe:c9:6f:39:bd:ed:86:74:cd:6f:90:77:5c:
16:34:96:73:01:91:3a:16:93:40:d5:d2:2d:68:a6:
14:e2:32:8b:08:a9:1a:43:11:9d:61:71:83:45:3d:
09:01:d1:78:1a:e6:ed:c1:68:99:f3:c0:52:07:68:
70:78:5d:99:7d:34:35:77:82:1e:fa:77:75:83:b2:
f2:cf:fb:09:69:d7:56:5c:4a:2f:68:82:5a:bd:df:
17:49:fc:34:19:49:b6:56:95:64:b1:5f:bb:94:eb:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:87:FA:3D:17:04:83:C2:C8:DE:52:11:82:E3:7F:0B:CB:B6:99
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:05:99:25:1f:92:8e:ad:0a:e3:bd:e3:49:8d:5f:10:2f:82:
f0:04:27:93:12:46:f3:e4:64:08:e7:66:1f:2d:98:2e:6d:a8:
fe:f9:a5:cb:88:cc:c6:90:5e:af:4a:70:62:12:a9:e8:e6:5f:
5e:f1:61:45:64:13:5e:58:a9:d5:08:17:6b:31:b1:b4:d6:0b:
db:34:7d:0b:e6:a7:ee:4b:bf:f1:75:e5:a0:68:ea:9c:d2:4a:
e6:f4:ac:c8:bc:a4:83:02:c5:37:32:62:4a:dc:b8:5a:05:5c:
0f:42:77:5c:96:d0:72:77:e2:e4:a7:a1:a1:57:8b:e9:aa:91:
c5:a6:83:f4:62:7e:86:29:46:a0:92:9f:bd:62:0a:91:b2:5f:
e1:d7:00:6f:26:a8:90:14:01:69:4d:d5:46:ee:45:d0:29:aa:
93:93:19:3f:52:1a:57:b6:1f:48:b6:60:23:95:a1:73:d8:49:
76:0d:38:e2:7c:9b:f8:79:40:25:82:7e:a3:81:7b:67:c7:03:
03:38:c6:fb:39:44:9c:23:ec:5f:52:2c:1f:b0:dd:b5:5f:35:
91:ef:09:2c:af:78:8e:b9:16:27:68:a1:7a:bd:b1:d3:aa:13:
34:90:2a:16:3b:c6:cf:0d:71:46:2a:b6:58:6f:23:4e:2e:7c:
18:df:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:50 2026 by rpki-client