
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json)
Hash identifier: ExibpNXaR2KdSxP2rzWkygLnIdt3Ui3IUK0ZzkgaoWU=
Subject key identifier: 1C:67:A1:CA:EB:F7:2F:68:EB:82:A7:F0:B1:96:D9:1C:DE:00:D6:57
Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
Certificate serial: 16D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
Manifest number: 2739
Signing time: Thu 16 Apr 2026 16:35:19 +0000
Manifest this update: Thu 16 Apr 2026 16:35:19 +0000
Manifest next update: Thu 23 Apr 2026 16:35:19 +0000
Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 7nlW2oVCpJ/4QUkzl9Zfsk3AffStUbG1dwXDkkcH1LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5849 (0x16d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
Validity
Not Before: Apr 16 16:35:19 2026 GMT
Not After : Apr 23 16:35:19 2026 GMT
Subject: CN=69e10fc7-f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:91:42:a8:71:89:64:4e:80:1f:69:64:c5:
c1:52:c8:d4:38:4b:de:c2:6f:13:d8:c5:77:90:04:
33:33:f7:6e:80:28:10:d6:9d:8a:ea:4d:36:56:01:
0f:be:89:6e:46:45:92:62:18:fc:d5:76:71:b3:bf:
54:e2:c1:b7:c8:ca:b3:f3:6e:17:39:f8:8a:68:15:
64:02:0c:2e:de:6f:33:6b:53:86:e2:73:ae:1c:b5:
46:fd:67:df:90:83:58:b4:2d:63:ee:40:0f:5e:3c:
45:4e:10:66:2e:97:8c:34:2a:d4:e9:6a:2e:43:38:
9e:c2:05:6a:76:04:c4:4e:88:5a:91:af:73:ba:0f:
99:02:16:5c:8a:3c:d0:48:30:51:82:61:a6:7a:3c:
6b:de:c3:89:df:08:dd:97:b0:38:a5:6e:22:d3:94:
c2:8d:82:5c:4b:f4:d5:3e:26:e9:a6:9e:80:35:5e:
bf:30:12:4d:09:69:99:d8:82:f9:b6:84:85:7d:1f:
65:56:2a:ef:ab:01:58:22:2c:b8:32:18:65:dc:f5:
92:52:d9:94:ff:fd:c8:34:6c:dd:67:a4:72:b5:4a:
e1:a5:18:15:2f:b6:b2:cf:2a:0c:f8:38:a8:f1:5d:
0d:bc:c9:0d:84:d6:e5:2b:6b:d6:39:3f:8c:bf:24:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:A1:CA:EB:F7:2F:68:EB:82:A7:F0:B1:96:D9:1C:DE:00:D6:57
X509v3 Authority Key Identifier:
keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:4d:1a:c7:c0:db:69:ff:f5:6a:9d:e5:2e:80:30:63:23:
ed:20:11:20:17:6d:6e:3c:e4:11:c5:05:f2:4a:71:41:f1:8f:
8a:1a:df:8e:bd:41:1b:2a:97:d7:d3:d2:c8:85:1e:3e:62:7f:
ab:a9:21:d4:45:21:da:78:fd:dc:ea:ca:e8:b3:10:ea:5a:a5:
3b:a3:ec:32:88:45:55:c0:29:c7:40:05:d4:e4:53:c7:21:de:
d2:a9:52:49:d2:8f:27:2b:d0:f9:6e:59:c9:dd:82:fa:55:e8:
fb:7d:c9:fd:9b:3f:f8:37:7c:51:37:ff:b1:4d:02:5a:f0:69:
f2:ea:62:93:5b:4d:1a:f6:bb:58:de:65:65:c1:90:51:45:c7:
09:a3:12:c1:3e:7c:32:b9:cd:b9:19:83:32:15:4f:8f:27:60:
fa:61:39:f0:64:73:69:55:92:d3:50:df:9c:5b:db:aa:a6:d7:
23:c7:e6:74:a5:44:c8:bd:56:58:48:79:7d:cb:ad:80:c3:4a:
69:52:2d:65:44:64:9a:cd:0d:8d:cf:d5:b8:e1:22:1a:f9:61:
b9:44:27:8f:c7:5d:96:73:57:8d:12:0d:d8:de:0b:0a:be:8c:
fb:75:c3:32:8f:fd:92:c5:9d:6d:20:59:2d:e9:b5:01:a7:b9:
f4:1b:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:27 2026 by rpki-client