
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: 7XLZarAzG8MzJtjTqEQtUoJZ7OIvrSzWApmWnTMuHJg=
Subject key identifier: EE:BB:8B:4C:6F:34:02:73:C2:2E:7E:09:A7:BD:D0:55:88:EE:15:89
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: 0111
Signing time: Fri 17 Apr 2026 05:39:30 +0000
Manifest this update: Fri 17 Apr 2026 05:39:29 +0000
Manifest next update: Fri 24 Apr 2026 05:39:29 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: e35lXc0uNJVBsd1N9UtUUsc/P0pIKeRUFQtiNDmgf9g=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Apr 17 05:39:29 2026 GMT
Not After : Apr 24 05:39:29 2026 GMT
Subject: CN=69e1c792-7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:4b:59:27:8e:3f:0d:c5:b6:18:0c:ff:c2:
1f:bd:af:99:30:d0:e2:d2:69:0d:24:01:42:4e:bf:
13:6e:17:60:d5:91:99:80:0f:12:25:59:b3:06:6e:
0e:6c:1f:1c:26:f5:d0:9b:35:09:c0:6f:0c:42:b8:
d1:63:90:b5:c9:08:f5:45:e1:2b:8f:5c:83:fc:20:
b4:3d:c0:eb:7f:6a:0d:a7:59:c1:cf:f4:01:e3:50:
92:af:34:58:ab:d3:ea:5e:a2:e5:84:ef:3e:5b:41:
6a:4a:45:df:90:49:b0:0b:b9:11:c0:a6:43:01:c0:
4d:20:9b:3d:c7:9c:ad:00:f2:10:4f:54:57:b3:25:
91:30:1d:ce:ed:1c:45:97:e1:0e:12:0c:42:9e:e4:
28:e5:ec:42:9d:7b:2d:43:4b:41:5e:12:04:7e:e2:
ae:73:a8:1a:26:ca:7d:02:d2:f4:6f:ea:8b:1f:5f:
7f:5e:4a:18:a5:68:38:3c:69:37:11:55:ab:5a:22:
eb:4e:9c:9c:12:e3:41:8a:59:37:a7:8d:05:2e:e0:
f6:e6:bf:ce:92:52:f6:23:4c:83:9a:18:f8:9a:49:
21:05:ab:5f:66:21:ae:94:17:34:1d:5e:38:8d:fd:
42:dd:99:50:74:10:73:27:f9:a3:3e:1d:ff:05:f2:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:8B:4C:6F:34:02:73:C2:2E:7E:09:A7:BD:D0:55:88:EE:15:89
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ae:b8:99:33:54:49:61:02:ce:1c:42:db:dd:2c:fe:d2:e8:
d7:51:e2:b0:a6:39:c1:08:3f:e3:52:cb:dd:6e:69:73:05:2e:
ad:83:88:43:5f:f3:03:f2:9a:3f:40:c5:d8:ae:86:4d:4d:65:
2f:3f:65:08:df:1c:0d:94:0a:c4:57:0a:49:0f:8c:6a:ee:c6:
72:66:d9:20:15:0e:04:0b:a7:08:f7:63:cb:6f:cc:31:33:f0:
d7:ec:e4:aa:a5:b6:4a:df:23:2a:4f:41:d5:f2:24:e6:f9:5c:
8d:2c:29:ae:7c:e4:9f:ad:43:c4:92:28:01:ce:5a:2d:30:3d:
8e:92:2f:2a:cd:60:42:9d:55:bf:d5:2d:2f:3f:e2:e0:9c:0d:
52:e6:36:4d:17:45:25:21:03:c9:da:5a:d3:ac:79:04:c2:13:
25:b1:3f:31:52:04:4b:98:0e:fc:aa:05:76:dd:f5:0c:06:a8:
ac:93:06:aa:eb:e7:7a:2b:15:36:b5:ea:8f:71:c1:a9:7d:e0:
76:0f:83:ad:ae:46:cc:3a:94:b2:7f:81:8b:6c:c2:ea:67:f9:
4e:3d:de:72:0f:dc:08:8f:0a:ed:61:96:74:03:55:9b:00:d7:
0d:5c:f8:53:21:ca:dd:eb:5a:3c:dc:27:8b:16:fc:da:4e:25:
b9:dc:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:56 2026 by rpki-client