
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier: q0grivav6WwVos+IWwi3C1Gk/6WCumK/CbezDVmKO7k=
Subject key identifier: EC:96:D6:1D:A1:B1:7B:43:DC:0E:E5:38:7D:22:90:A5:47:9D:F2:61
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number: 035A
Signing time: Mon 27 Jul 2026 02:03:01 +0000
Manifest this update: Mon 27 Jul 2026 02:03:00 +0000
Manifest next update: Mon 03 Aug 2026 02:03:00 +0000
Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: fVjfogYO4kc0qmtghFmzb/bia7H3ZKVdD0vrcT6oYho=)
2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Validity
Not Before: Jul 27 02:03:00 2026 GMT
Not After : Aug 3 02:03:00 2026 GMT
Subject: CN=6a66bc54-479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:62:5d:60:65:6e:44:a1:73:da:9d:63:0b:
eb:cb:34:62:96:a5:6a:6d:2c:11:f8:9a:97:4a:4a:
6d:70:04:10:42:a4:0e:05:51:f6:c9:e2:48:00:7e:
2f:58:74:14:48:63:f3:37:c2:c5:62:23:7a:36:33:
ff:46:36:2f:dc:14:fd:d5:d1:de:e2:79:c5:72:70:
7a:2a:a6:d7:69:3b:2b:3a:05:af:e2:7e:c2:81:6a:
46:ec:7c:8e:49:65:f6:2e:e1:01:dd:6c:bb:ea:38:
06:4c:87:d1:04:c8:cc:f7:86:db:e0:86:77:82:be:
bf:10:fa:e2:2a:ce:37:53:43:75:e0:2d:09:9c:1c:
f1:ea:b2:7a:24:73:b5:cf:35:85:65:cf:d3:cd:92:
8a:38:72:49:ae:77:b0:e8:73:7c:74:b6:9d:e7:a0:
f3:f7:cd:00:e2:6f:8c:a7:b1:ea:1b:70:d6:d2:94:
83:4b:bf:fa:37:a4:0f:42:11:df:95:f4:c3:2d:5d:
19:68:0f:ec:ec:8b:05:dc:be:f6:e7:91:ea:f2:55:
4a:b9:23:a3:29:96:ba:39:17:08:aa:aa:be:ff:78:
64:e9:4d:14:9d:78:c8:a3:3d:8f:15:a5:92:74:c6:
a3:d3:7b:c8:e9:c9:9b:ad:b4:40:76:50:e8:61:b9:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:D6:1D:A1:B1:7B:43:DC:0E:E5:38:7D:22:90:A5:47:9D:F2:61
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:30:38:cf:17:98:ea:25:26:6a:5d:9f:07:c6:bf:a8:32:
63:9b:b3:e7:1c:8e:32:65:17:0f:50:3d:b2:08:4f:50:7d:ef:
76:79:2e:bd:28:d5:cb:bf:09:f8:48:14:b3:57:61:d9:ae:2b:
d7:39:8d:da:60:d7:97:ce:99:08:57:fe:b9:f3:67:84:5f:cb:
ec:e1:50:e5:72:3b:a1:25:f5:a0:b2:85:07:93:4e:c9:f1:e1:
4e:1b:a0:08:7d:61:ba:44:03:66:30:69:6a:28:e0:96:9c:af:
87:e8:bd:a9:50:dc:73:cb:ad:2d:c0:3b:94:22:42:b8:55:20:
30:9a:19:16:3d:77:56:69:a0:cc:77:7f:18:dd:2b:1d:27:98:
5a:18:2c:1a:45:c2:3c:79:01:1a:50:c0:da:dc:06:00:43:da:
c5:d0:d6:6d:4e:cb:a3:bc:ee:be:4d:18:a3:e6:8c:45:75:7b:
01:43:fd:f7:24:fc:52:a9:fe:a0:3d:6e:e4:57:71:8d:e7:e9:
5f:d2:e6:28:58:ea:d6:37:1a:96:df:66:cb:bf:15:b3:60:d1:
29:c5:8a:1a:b2:16:49:c3:be:ba:f8:da:2d:ea:2e:f9:3a:01:
ff:6d:63:df:9b:1d:f7:82:50:d5:64:14:67:ea:90:6f:2a:a7:
50:81:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:40 2026 by rpki-client