
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: DXI74KNkx2s5vOMOGCxXmiUaccqZL6uesjsF9zhZj5I=
Subject key identifier: 1D:44:4F:8A:8F:B3:AE:0A:2C:37:37:88:47:31:75:88:C4:9B:A3:0B
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 01BE
Signing time: Sat 13 Jun 2026 03:55:24 +0000
Manifest this update: Sat 13 Jun 2026 03:55:23 +0000
Manifest next update: Sat 20 Jun 2026 03:55:23 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: YuGjw67OBgceYUy0IxYjmw1D+FMxK395KjbY8ArN6jE=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Jun 13 03:55:23 2026 GMT
Not After : Jun 20 03:55:23 2026 GMT
Subject: CN=6a2cd4ac-f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:83:3c:55:a0:8c:23:af:4a:28:a3:c1:46:
cb:01:41:3f:59:c7:14:94:78:9f:68:c3:ca:8d:96:
ef:fb:ad:08:c0:94:ea:a1:a7:4c:48:f7:fc:d5:84:
db:ce:c5:c8:de:3e:74:57:2d:27:76:73:d4:22:d8:
f2:06:63:1f:ea:6e:9e:ba:95:0f:56:4e:4a:ce:ab:
1a:e2:5e:72:83:d5:46:ea:78:01:29:4d:64:b2:85:
aa:b0:c1:97:cb:ce:cf:96:83:d9:8b:ff:bf:0a:93:
6e:74:aa:f5:58:6d:32:9d:23:a6:25:54:b2:8a:05:
54:37:95:33:e6:42:49:19:f9:18:dd:f7:94:8d:73:
96:a3:6d:af:2f:de:05:d1:4f:b4:e4:d1:c8:74:e9:
9a:b2:48:09:17:8f:fd:b3:45:51:24:64:81:9b:b7:
59:71:ee:9c:b3:75:01:65:b4:6a:3c:22:24:b2:32:
06:64:44:0e:a5:fb:9c:cb:b3:28:d4:11:b2:c7:81:
7b:3a:49:11:5b:05:00:07:29:4c:47:ce:c3:3e:49:
dc:41:a5:1f:2d:6b:28:71:30:c1:b3:1a:8d:f7:c5:
df:5e:9b:8c:7f:49:13:94:8c:48:ac:45:7e:7a:68:
66:08:89:04:ee:dc:a5:41:67:5a:e7:04:dc:a7:e0:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:4F:8A:8F:B3:AE:0A:2C:37:37:88:47:31:75:88:C4:9B:A3:0B
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:70:2c:50:be:8e:d8:89:a6:27:46:76:4d:15:80:41:0c:
a0:4d:27:79:25:4e:b1:62:93:9c:9f:87:97:02:1b:11:27:85:
f5:23:e6:a6:01:cf:b0:59:f8:5d:31:b4:e2:b9:18:ba:5f:2d:
7d:69:27:ff:9b:c5:bd:ad:8b:c9:20:7a:88:97:f9:48:d0:32:
2a:5f:83:63:66:0c:ec:a2:46:b6:09:f1:f2:a0:54:5c:c0:5f:
07:e2:40:75:38:a7:38:e7:5d:1c:67:06:47:df:db:a3:a5:0c:
a3:38:01:38:98:cb:4b:e2:e5:07:30:b3:f1:12:0d:9e:3b:98:
7b:9d:3e:fe:dc:2d:61:56:31:e0:58:a0:83:c6:7e:fb:e6:d2:
90:42:b9:80:36:f8:55:16:36:5e:3a:0a:81:35:10:c6:3f:6e:
91:ce:7f:c8:3f:0f:21:9e:55:05:87:ce:ce:81:b0:ca:07:37:
b7:e0:23:20:bb:ee:2d:70:32:94:1a:fb:0c:9b:b1:ac:e5:dd:
a9:d0:11:63:f8:b0:b7:a6:be:32:09:6f:02:5c:2b:4c:a6:d9:
0d:8d:1b:02:32:be:49:03:4f:2e:2e:9a:d3:89:d0:95:6a:2b:
c6:e7:d2:6f:d0:6b:86:37:86:c1:68:a3:1c:d3:3e:b7:35:2c:
e4:b2:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:37 2026 by rpki-client