
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File: CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier: JJDtZXpn5ag6yPFLQkmHLdZ62y9A/UCpxHfDD2zrMIc=
Subject key identifier: E6:39:B3:7B:5D:44:30:AB:28:97:D1:A2:DF:80:22:7E:23:64:1D:BE
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number: 01A8
Signing time: Sun 01 Mar 2026 04:56:00 +0000
Manifest this update: Sun 01 Mar 2026 04:56:00 +0000
Manifest next update: Sun 08 Mar 2026 04:56:00 +0000
Files and hashes: 1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: FIrHaeCSr9Zem7sBNJJXR6M4njEabfwG1quktvge6OI=)
2: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: pajqta98t9DCg8v1Lg8FRYz8ldZyRmQcQ0BlpMD5CFw=)
3: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: cB5etP4JR+kF3B188jMI61DPnALKk1aed2yLX5rJnXQ=)
4: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: xcqfwDXsyJ627moTrRcBvX0KULbwueHcuuhlJKxtnlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Mar 1 04:56:00 2026 GMT
Not After : Mar 8 04:56:00 2026 GMT
Subject: CN=69a3c6e0-819b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:65:10:2a:62:a8:20:84:4c:b9:46:49:b3:49:
5a:99:8b:25:83:f0:ca:58:e7:45:c5:07:72:d4:ba:
37:f6:1d:40:d6:31:19:cc:3b:9f:a1:f1:af:9e:dc:
f4:99:c9:e1:07:05:75:ef:a6:2b:83:f3:80:03:30:
98:74:d4:95:33:59:54:5e:42:8b:1e:22:32:59:e7:
fa:40:0e:53:30:75:2a:1d:83:07:91:d9:82:34:08:
29:92:f2:d8:15:7e:48:7e:ee:2d:ec:37:d5:99:dd:
27:07:11:3b:07:1f:ad:22:ed:d8:9a:15:93:ab:07:
5d:be:dc:2d:df:8e:32:fa:09:db:43:a9:d8:30:77:
75:60:23:3e:4a:cb:00:71:de:dd:4a:84:28:19:c9:
03:84:69:f6:33:b2:f5:2e:87:c4:4c:c2:b1:da:12:
1a:7b:7e:70:e6:24:43:a7:7d:1b:32:55:74:4e:5e:
17:02:f0:e0:eb:65:4c:d4:23:c1:ff:27:37:4e:bc:
be:1a:70:92:37:8f:80:10:1e:18:30:11:89:82:7a:
26:12:e5:2a:fd:93:2e:93:27:63:71:1a:0e:ca:6e:
0d:8d:e6:f7:a7:f3:a6:04:13:ad:49:38:7e:64:18:
00:1b:24:6e:c8:19:86:a5:69:aa:73:da:35:e3:73:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:B3:7B:5D:44:30:AB:28:97:D1:A2:DF:80:22:7E:23:64:1D:BE
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1b:69:b3:53:fe:03:53:82:ad:6f:e9:f7:f6:8e:d7:26:05:
6b:0e:67:1b:02:ef:d7:0a:7f:a0:d5:f8:a0:fd:8a:ad:b0:61:
69:0b:87:c7:53:9a:53:54:86:b9:ba:28:2e:55:4c:2d:12:28:
b4:f9:e8:5a:17:fd:d9:58:73:04:ef:fa:20:61:d0:16:8a:76:
dc:56:e9:6b:c9:f7:29:78:7b:8e:5a:2d:5a:b5:7a:56:b6:d7:
82:1b:6c:93:18:75:fe:3b:4c:38:34:68:ee:f5:2a:08:78:c6:
92:53:db:d1:79:e3:a2:d6:83:36:8c:ab:fc:1f:6b:a1:35:d8:
8d:4e:d9:1e:6e:8e:3a:ef:c0:0d:97:29:e4:be:27:06:d8:f6:
1a:57:09:54:19:f2:e4:dc:19:0f:df:56:78:0a:80:78:a4:7b:
a2:d0:25:8a:b9:6b:6d:6b:dc:1a:82:56:26:99:77:9b:b6:c4:
08:2b:32:8f:43:a0:4e:47:12:35:f3:5f:86:d0:a1:20:aa:39:
06:bc:15:4a:dc:08:4e:26:f7:cf:b5:3f:31:0d:8c:1f:51:fc:
7e:12:87:7f:f5:ff:4a:1f:a1:79:ca:e0:0c:4c:04:20:f8:30:
3b:ae:4f:aa:eb:61:0f:61:27:9c:74:d3:f5:d0:14:42:32:b5:
ba:33:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:46 2026 by rpki-client