
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: k8M0q3D+uH8pp80QSF8coD863DtTfq/tO+y0S/l0lbE=
Subject key identifier: A8:7F:CC:50:4F:48:E9:55:24:5F:D0:10:0C:39:7B:36:C2:BA:9C:42
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 01D4
Signing time: Mon 27 Jul 2026 05:21:08 +0000
Manifest this update: Mon 27 Jul 2026 05:21:07 +0000
Manifest next update: Mon 03 Aug 2026 05:21:07 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: 6dwtB5LVSwkSMJG9bjN9XNE9aImhwle62Ge3JJnE2SI=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Jul 27 05:21:07 2026 GMT
Not After : Aug 3 05:21:07 2026 GMT
Subject: CN=6a66eac4-ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:6d:b8:89:84:2e:ae:f2:e0:5f:66:62:9c:
7e:c7:3d:be:20:d4:18:6d:c5:be:74:12:d5:e1:51:
69:ec:c8:dd:7c:f0:d3:11:85:f8:b7:1a:08:4f:69:
b9:30:2a:87:7c:b4:60:92:2e:77:05:51:ec:dd:9a:
7f:e9:61:dc:43:d3:a8:ac:35:ff:56:41:83:d0:43:
3a:74:29:cc:06:2c:6f:05:6c:96:f9:57:2b:d6:a2:
d0:55:98:cd:69:b3:2d:56:7c:6c:01:52:05:96:9c:
8f:6b:f9:0a:aa:e7:cb:d6:e0:ed:1b:73:e7:f1:d7:
5d:88:71:cf:5b:b0:66:be:0c:9f:e8:3c:3e:77:09:
9c:af:81:de:43:4c:1b:c7:ce:53:49:8f:ce:90:dc:
c7:94:60:e0:4f:73:77:26:c7:eb:94:60:9d:d4:bb:
84:6d:f0:60:ac:ba:26:50:b9:38:25:be:53:07:0e:
98:58:9a:63:a6:e7:2b:58:51:9e:23:6c:45:9e:ac:
ef:ac:0d:da:78:16:56:24:13:78:00:06:9b:a3:e1:
9d:3e:93:46:e6:60:86:46:03:d4:d1:3e:a1:5e:e7:
03:f2:8f:3c:39:5e:56:33:0e:7d:e0:ca:60:e7:c2:
b6:cd:fa:7f:f7:41:9e:e4:f9:fc:4a:cf:00:d1:2d:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:CC:50:4F:48:E9:55:24:5F:D0:10:0C:39:7B:36:C2:BA:9C:42
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:63:03:d5:61:d0:59:b0:75:7a:bc:58:c8:20:ba:c9:56:39:
a5:47:a1:26:1e:94:02:35:0a:83:e2:9f:b7:20:20:e6:87:0e:
04:5d:ba:13:16:8b:ee:98:70:d0:38:00:4b:82:5a:65:eb:42:
9e:73:7c:18:7d:8d:d6:0b:c3:56:70:06:fc:bc:ed:d2:0b:25:
2a:9e:95:ea:ab:6b:90:7f:af:2a:fc:eb:bf:ac:9e:3c:3d:6f:
5c:ce:b1:0d:5f:84:b6:6d:3c:f5:d3:98:f7:1c:de:29:4c:33:
d7:d7:7b:90:17:e4:dd:0a:69:67:18:63:cf:ec:5e:b7:25:e0:
4c:e5:ec:a7:0f:ae:16:4d:08:a6:f7:96:57:b8:38:3e:49:9e:
1f:95:06:c9:e2:e0:0c:56:09:a6:a5:82:5c:00:b4:f7:6e:cd:
c9:a7:13:e9:b9:55:34:7a:68:8c:cd:d8:a6:bc:05:de:66:b6:
19:7d:3b:18:00:46:fc:2f:fd:9b:a0:8a:a3:e4:b8:31:c8:93:
82:47:00:3c:31:63:c2:60:dd:dc:6d:1b:cd:54:1b:be:cf:02:
16:ce:e8:01:6e:f5:b2:fd:f7:b7:46:eb:d0:ad:f2:9f:2d:7f:
18:f3:e2:c5:12:55:cf:ad:71:0c:2f:84:f3:ba:1f:62:22:4a:
47:e0:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:39 2026 by rpki-client