
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: bTL/JsuCD/jQOtG1dO8I30U3Xd0CqJZXeB47lGUnOCg=
Subject key identifier: 16:2B:7A:D8:B9:DF:FF:DE:D2:AB:FA:F1:51:D8:3A:8C:18:B6:8C:8A
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 01F2
Signing time: Wed 23 Sep 2026 03:13:25 +0000
Manifest this update: Wed 23 Sep 2026 03:13:25 +0000
Manifest next update: Wed 30 Sep 2026 03:13:25 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: 1P1h1EekLmqG32A+D8E5Z89ZS4rjTM0ZTAcWKr0DdaA=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Sep 23 03:13:25 2026 GMT
Not After : Sep 30 03:13:25 2026 GMT
Subject: CN=6ab343d5-ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:d6:85:81:1e:92:ee:40:d5:ec:01:43:82:
8a:64:fc:c0:47:a6:3e:27:76:af:d5:24:68:19:ec:
9b:38:91:fd:cb:45:55:bf:dc:0c:b3:f1:af:ae:89:
49:16:97:c7:92:18:f1:d2:de:9d:1d:43:ed:df:84:
b2:d0:91:9f:5b:10:ca:d1:ed:7e:fa:b9:a3:a0:df:
3a:6a:4d:07:cf:69:61:40:3f:43:92:f2:e1:97:49:
71:ee:47:00:53:93:1f:a2:bc:98:7e:44:af:e1:d6:
1c:ab:a1:7d:f8:c2:8a:4a:86:08:1f:f8:02:9c:25:
38:1a:8f:63:6d:70:3a:a9:0a:17:b1:82:41:96:9d:
d7:ab:0c:04:dc:ec:0b:18:0a:5e:85:b2:d1:29:35:
b0:41:ae:32:d8:93:48:b2:f0:31:cd:ba:4c:e9:3a:
b8:c1:bb:72:e9:da:85:46:a3:7b:0a:1b:3d:ed:8a:
7a:ce:71:34:4b:6d:b6:a3:ca:40:5a:7b:9c:6a:41:
3d:a9:36:f4:0d:c3:a4:21:c1:c6:82:0b:39:27:4d:
41:ff:56:91:e8:44:25:63:b3:6f:ba:a7:e9:68:1b:
4f:1b:9a:bb:82:8b:44:aa:f3:c9:35:9c:9e:9f:70:
dd:0d:41:11:49:66:9e:9f:f8:21:df:9c:a5:2a:66:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:7A:D8:B9:DF:FF:DE:D2:AB:FA:F1:51:D8:3A:8C:18:B6:8C:8A
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:ff:f0:54:23:79:61:ff:46:25:98:f7:0f:21:b5:7c:75:
a8:f8:b4:0d:d0:9a:67:d7:12:79:c4:86:4d:d1:9f:a1:2d:2c:
b8:ec:d6:45:8f:fd:6c:6b:fa:7a:9e:3c:bf:7e:a9:5e:5a:17:
1d:ad:6a:cb:0c:4d:2f:3c:7c:ce:a8:23:7d:b2:df:57:26:3d:
be:26:b5:ac:58:11:a5:8f:26:b9:73:1d:96:a2:cb:4b:85:05:
ba:2a:a5:d2:35:a5:eb:8f:c7:12:1a:ac:e4:35:f0:0b:63:1c:
7d:cd:ef:8f:0c:07:d4:96:ab:eb:b2:69:ac:6b:ac:c4:6c:19:
8b:d6:23:d6:67:0b:d7:c7:c2:10:0c:65:74:09:68:a9:a6:dd:
e9:19:41:73:5f:f8:8f:00:72:67:8d:80:13:64:d6:e0:e2:b7:
8c:19:b7:22:79:a2:88:88:ea:81:26:ca:1a:79:14:83:fb:23:
73:88:c4:0a:49:05:df:a1:b3:ad:25:5b:ca:8d:69:f3:64:cc:
8a:7b:63:42:28:41:b9:21:ba:15:1c:8e:07:21:15:83:59:f2:
da:00:fa:62:bb:bc:69:65:bf:f2:1c:f6:fb:ef:b9:a5:9d:4b:
13:3e:76:fa:96:1f:92:0d:56:02:70:3c:44:86:6b:85:f1:18:
7b:fd:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:21:35 2026 by rpki-client