
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json)
Hash identifier: knCTNJff55ZuEOal4T6vMwNEazAyWKxv56zbCCVhXK8=
Subject key identifier: 94:8B:97:4A:E1:B3:AD:BB:B7:84:04:04:AA:E5:66:76:C1:67:54:B2
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
Manifest number: C9
Signing time: Sat 13 Jun 2026 06:58:53 +0000
Manifest this update: Sat 13 Jun 2026 06:58:53 +0000
Manifest next update: Sat 20 Jun 2026 06:58:53 +0000
Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: PWSpPcel4Vpbctyhqg3DesgzEZ629LnUBqDmDKcvnU0=)
2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: 8cuDD60OBi1vO/7c9lhKgZt7KgJpxsLM7iezV0RYbzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Validity
Not Before: Jun 13 06:58:53 2026 GMT
Not After : Jun 20 06:58:53 2026 GMT
Subject: CN=6a2cffad-dfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:57:4b:cd:15:32:54:d4:ed:f9:d9:13:3a:
a0:b8:d4:30:f6:ba:57:3a:7a:c7:0f:1c:06:a1:15:
f4:02:1b:db:2c:b4:93:c8:92:45:b3:75:ee:25:62:
5a:04:60:52:88:eb:90:56:23:7e:32:03:3f:89:e2:
f9:06:d7:73:19:69:ac:07:80:83:d4:a0:27:ce:f0:
f5:30:4e:99:c4:d4:2d:cf:0c:5d:67:e0:25:0f:5f:
82:db:22:80:2a:3e:f8:ff:6d:a2:9f:bb:6c:cf:fa:
a2:ad:e3:bc:1b:fd:83:18:78:e8:e8:31:32:42:81:
66:8a:8d:b3:b0:d0:cd:3c:5a:44:d7:4e:3c:5e:58:
1e:c8:e3:35:3c:1d:9f:7c:0c:13:d4:bc:90:ff:06:
6f:bc:88:12:c8:a7:65:1e:55:72:34:a3:da:11:43:
be:e4:06:b4:15:a5:eb:5c:38:be:cd:78:4d:20:21:
8e:52:5c:ee:fc:55:86:16:a2:7f:e4:e4:3b:38:0d:
3b:7e:15:0f:29:b0:6e:7d:5e:84:00:d7:fa:05:d3:
59:26:b7:9a:8d:4f:e0:83:99:2a:43:cc:69:0b:fc:
88:d1:a1:76:ff:6a:61:bd:0b:af:a9:50:35:a5:84:
05:be:a8:88:71:a6:64:2b:b4:f6:fd:12:0c:cb:be:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:97:4A:E1:B3:AD:BB:B7:84:04:04:AA:E5:66:76:C1:67:54:B2
X509v3 Authority Key Identifier:
keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:91:6d:bc:9a:ee:4c:07:93:72:3a:92:1c:86:b7:7a:2f:98:
8b:fd:89:ac:a4:92:a8:4b:8d:d1:28:23:01:ab:e5:26:91:52:
2c:7a:2e:80:56:08:60:64:64:ab:f0:11:13:be:f4:aa:20:43:
d2:1a:62:63:db:22:46:b5:b5:54:a9:79:c4:b8:67:ab:f3:a1:
00:60:5f:24:4b:5f:1e:92:1b:f1:c6:12:ce:cb:6a:12:0a:16:
44:50:e8:c9:4d:a7:d4:66:27:7d:a4:d7:b7:6b:0c:11:70:81:
62:25:71:9c:14:05:63:35:1d:96:66:21:f2:d4:90:cc:9f:17:
5a:23:25:85:1d:8b:a2:75:7a:6e:99:b0:3b:8e:7e:f8:72:54:
2e:fe:1f:bb:7c:d8:d9:69:60:5f:fc:6c:ef:b1:37:12:b7:6f:
4a:59:f4:1a:02:97:6f:32:82:4e:5e:40:8d:27:3c:3b:5c:3e:
cf:40:cf:98:7c:88:12:e4:22:9f:43:e8:59:6e:ab:e8:e2:5c:
c3:b2:96:85:32:45:79:1a:5b:d5:38:99:46:c3:fc:13:6b:0b:
18:8c:2a:ed:1c:a6:12:0e:d8:67:4d:5d:eb:35:0b:26:e8:a8:
99:68:25:46:ed:45:1d:1b:48:c1:61:03:84:b4:08:2c:2c:e7:
57:66:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:16 2026 by rpki-client