
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier: CRLweIWXQgB+/jj4YLHr+3Nt52PUBCplgNQ2M1KWjoU=
Subject key identifier: 08:42:80:44:9C:60:14:74:C6:40:80:39:63:2B:E5:2E:44:1C:43:B3
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number: 0142
Signing time: Mon 27 Jul 2026 07:16:10 +0000
Manifest this update: Mon 27 Jul 2026 07:16:10 +0000
Manifest next update: Mon 03 Aug 2026 07:16:10 +0000
Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: 601y8KpyK1ym5ioYj9oRFcdzX3nSX7ae568Fepjo+4U=)
2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Validity
Not Before: Jul 27 07:16:10 2026 GMT
Not After : Aug 3 07:16:10 2026 GMT
Subject: CN=6a6705ba-9987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:86:dd:ed:02:2e:e0:49:2f:b5:b3:3a:de:
eb:4b:8f:af:93:b6:02:a0:4c:2a:70:4a:e2:8e:3a:
54:52:6b:d0:1d:b7:b6:1f:c3:1b:63:1d:bb:53:48:
79:86:44:34:67:f1:41:4b:64:31:db:f7:07:7d:ce:
05:f0:84:f6:de:e9:5a:3b:73:9c:6a:e0:85:16:b4:
d5:f8:02:b7:c1:cf:c2:31:81:f1:37:75:3f:d5:74:
f3:cf:a2:a2:3b:e2:87:2d:f4:f2:08:48:d4:58:10:
05:d5:c8:80:43:1f:62:0e:c1:44:4d:65:18:d7:a9:
aa:9c:b8:e8:21:01:71:f0:24:3e:72:9c:fd:12:ca:
70:2b:89:35:dc:79:dc:d5:04:b3:1d:bc:77:79:c5:
aa:5f:2a:f7:3f:92:13:dc:2c:72:5b:fd:40:6e:44:
6a:45:e0:58:8e:49:26:36:17:d9:fd:8a:c2:ef:42:
40:2d:61:23:a9:7d:9c:f2:df:9d:33:54:1c:40:8d:
05:7a:72:50:bd:0b:07:a1:9c:48:90:41:c6:65:06:
99:30:b1:c7:70:d8:d6:17:35:5b:30:b4:bd:eb:c7:
58:b7:02:e9:a7:a8:59:75:96:d3:10:27:0e:89:36:
8a:4d:6a:31:50:72:98:ca:81:53:65:80:40:e1:c6:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:80:44:9C:60:14:74:C6:40:80:39:63:2B:E5:2E:44:1C:43:B3
X509v3 Authority Key Identifier:
keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:93:ec:a1:6e:bb:c0:c8:46:b9:b0:3a:79:38:82:cf:95:5e:
13:67:10:f3:bd:ba:40:9b:97:b7:ed:5b:8b:e7:22:f7:8a:28:
3a:8d:33:8a:64:21:de:25:ba:60:f1:68:2f:8e:24:a1:27:2e:
cb:dd:33:c3:29:7c:d6:d8:fe:6d:81:fa:6c:37:1f:7a:62:0a:
24:c2:b0:40:22:7c:54:a1:c2:23:55:67:3a:bb:9a:57:a4:d1:
b2:1f:09:c6:fd:ed:84:26:ad:70:62:1f:17:36:69:98:ed:2d:
40:b6:64:54:5c:6a:51:71:80:d2:05:62:8a:88:09:52:b2:96:
1b:d1:8d:00:6e:f9:25:f0:db:21:3b:07:4d:2e:00:61:60:2c:
bf:a9:2a:9b:ff:b4:93:20:24:e5:8e:8a:d4:c9:6d:54:92:05:
83:b8:a8:b9:10:3b:47:c2:f4:32:56:3e:67:89:55:b6:eb:c4:
c4:f8:94:6c:c2:2a:34:81:bc:bf:ca:76:9b:b2:88:41:b9:c0:
a3:2f:9a:91:78:e0:81:83:4d:a8:43:99:c9:dd:76:32:34:c4:
90:25:b0:c7:a9:97:13:a0:86:e9:b5:f6:0f:3e:bb:66:77:39:
b2:61:ac:c8:be:72:69:8e:1c:fe:8e:cd:51:b6:63:2f:d2:98:
5f:2c:de:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:59 2026 by rpki-client