
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File: CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier: XTw4J6BNkT7mp+lueLO3B1jDUlX66cFfcaTyPOJtvH8=
Subject key identifier: BC:1E:33:76:37:30:C3:62:9B:5E:A8:1D:7C:84:68:7E:09:E5:8A:00
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number: 01C2
Signing time: Fri 17 Apr 2026 03:35:47 +0000
Manifest this update: Fri 17 Apr 2026 03:35:47 +0000
Manifest next update: Fri 24 Apr 2026 03:35:47 +0000
Files and hashes: 1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: bG0pZLSxzfjVpdunEBqnKqJ3E8MOrdzGzz/EroGwbw4=)
2: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=)
3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=)
4: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Apr 17 03:35:47 2026 GMT
Not After : Apr 24 03:35:47 2026 GMT
Subject: CN=69e1aa93-3ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:89:02:f7:0e:5a:cc:8b:28:71:55:7a:b6:
61:fd:c2:24:28:22:a1:8e:29:37:ba:14:6c:f9:c7:
db:f0:d2:38:96:94:f9:b6:14:47:a7:32:c7:d8:5d:
74:c1:a4:82:3c:30:fe:29:a9:a1:82:af:88:94:77:
62:fe:90:6e:fe:c2:30:28:82:8f:bc:69:11:b6:c8:
4a:09:cc:83:78:cd:66:e3:96:40:b0:92:43:d6:db:
de:7c:41:a4:4f:f7:1f:2c:d2:b4:d5:6d:c8:8c:69:
bc:f0:16:60:33:9d:16:29:80:8f:b7:63:18:62:a6:
0a:30:eb:ae:3b:f1:7a:04:85:1d:63:db:31:fe:b6:
b3:0e:5e:f3:c7:49:25:f7:80:f7:ee:8a:5b:0a:45:
d6:e9:9b:a6:c5:d8:74:c7:64:20:55:fa:30:29:54:
e3:41:c4:1f:8b:1b:4d:e6:b5:3d:43:b0:51:ce:ec:
2d:56:12:39:2d:b6:9c:1e:9a:90:bc:de:1f:3e:f3:
3c:b1:bf:02:a1:4d:24:da:4b:ef:47:e2:e1:0c:bd:
92:9f:63:f9:2c:fb:d9:c8:a7:d4:fb:0d:1d:9c:86:
d5:93:19:a0:74:25:93:55:28:87:46:b0:75:16:71:
0e:83:88:c3:fc:91:9c:79:55:e4:41:63:0d:27:58:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:33:76:37:30:C3:62:9B:5E:A8:1D:7C:84:68:7E:09:E5:8A:00
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:89:3b:85:1b:66:63:61:ba:53:a9:92:20:2b:4a:92:0a:
67:fe:61:26:93:d9:55:3b:2a:c8:20:e2:c2:29:32:ba:0d:db:
0b:2b:00:e9:04:8d:17:6e:23:3b:82:5e:80:fd:b1:80:09:19:
14:5f:13:ab:50:d5:cf:9d:a7:d0:a2:f7:a2:6a:ca:8e:00:6d:
58:10:05:15:c9:20:3a:a0:83:a1:74:09:5e:2b:0c:0b:4d:9d:
2e:72:fb:bc:2b:dc:03:89:1d:b2:c5:c8:a9:c6:b2:2b:96:b8:
70:8b:5c:1b:45:12:92:f4:13:be:87:99:c7:42:3d:15:a1:33:
7d:1e:a3:ce:94:c4:02:85:f4:a0:ff:7c:52:be:1f:38:b9:92:
79:5a:a6:5b:fb:c5:76:3c:69:8d:fe:9c:35:77:98:a9:fb:f1:
e8:a5:22:19:6a:af:f9:fd:9c:dd:d3:18:0a:bf:b5:c3:1f:e3:
0b:51:1c:82:16:2f:d3:32:d7:24:ff:0b:eb:e0:05:f5:d7:54:
5f:5b:bc:c1:2a:0f:48:76:80:3f:40:0b:36:e6:2b:f5:2a:6c:
47:cc:d3:b3:bb:84:a0:ac:06:d0:f2:d6:3e:9b:b1:3e:28:d4:
d0:a4:ea:70:7d:c2:f2:4a:6b:9e:fa:bc:91:df:7d:5b:31:2b:
fc:12:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:22 2026 by rpki-client