
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json)
Hash identifier: SS4q89x33/MgMTJQW7Ou2sR1It3neOpsNiiIOUBH280=
Subject key identifier: 8A:FA:80:DE:7D:61:2C:62:AC:9D:4A:2F:2F:91:40:C0:01:29:A5:B8
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
Manifest number: 0244
Signing time: Sat 13 Jun 2026 02:30:23 +0000
Manifest this update: Sat 13 Jun 2026 02:30:23 +0000
Manifest next update: Sat 20 Jun 2026 02:30:23 +0000
Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: ktRbB3CuKopFb23RIgw4iMATuHwKswoidFOuU6/4cKo=)
2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: gwP3PNE674NeJVzpcX/6dV+VmggMeTrL/+BFEHoqdPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Validity
Not Before: Jun 13 02:30:23 2026 GMT
Not After : Jun 20 02:30:23 2026 GMT
Subject: CN=6a2cc0bf-161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:28:25:df:08:f5:78:1b:24:00:c8:56:a5:
fa:92:40:82:7b:d7:a7:0c:4d:97:ec:a1:58:e0:5c:
62:00:2e:15:e3:43:38:0b:e0:4a:74:8d:5a:e8:51:
c0:aa:8e:6a:a0:0c:ca:08:bb:1f:6a:b5:e6:32:17:
a2:3a:6e:81:73:2a:5f:78:9f:a1:c8:73:8e:33:eb:
b0:a2:92:b9:96:6a:fe:7d:dd:fb:20:80:7a:99:fe:
6b:e1:d7:85:50:4e:8d:f1:7e:6d:50:1f:87:5e:1b:
00:7a:90:0e:ee:31:88:b8:b7:8d:69:78:f1:a6:1a:
b5:e9:0b:d6:a4:93:5f:25:cf:8a:d7:0e:75:18:f1:
1c:2d:ee:76:24:af:3c:57:bc:64:08:a6:0a:7c:63:
e2:10:63:e6:e6:04:c8:a2:01:e1:4f:96:7d:b4:6e:
46:1f:6d:7f:eb:76:f0:e6:ad:4e:72:93:f5:29:d5:
92:dd:bf:c6:ba:33:4b:57:de:f3:b8:cb:42:39:6c:
d0:dc:c9:53:54:e9:cb:69:b8:af:14:b6:7d:cf:fb:
92:bb:5b:76:74:a9:ef:9c:92:e0:67:21:db:04:46:
b3:d3:6d:98:d1:99:a6:98:30:ed:fe:68:40:fe:15:
ed:e4:54:db:f8:fa:48:e6:3a:85:66:51:ad:a5:f9:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:80:DE:7D:61:2C:62:AC:9D:4A:2F:2F:91:40:C0:01:29:A5:B8
X509v3 Authority Key Identifier:
keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:39:68:66:78:70:75:a6:d5:f8:a1:71:1c:19:10:9d:4f:
fb:cf:66:04:8f:49:8d:25:a6:bf:8a:05:35:45:73:cf:4f:9e:
cb:e7:0c:ba:62:09:fa:ad:33:f6:94:60:9b:03:0f:2a:6b:60:
24:3b:03:02:bc:ae:86:8b:ce:c4:f1:bd:e9:f4:aa:eb:16:ba:
f6:1f:19:19:1f:db:fc:82:db:ab:5d:df:a0:2c:17:bc:9d:4a:
7f:67:c9:30:1a:21:b4:7e:7e:96:bb:4a:d1:65:30:d9:70:89:
c4:41:c4:4f:36:7b:99:1d:c8:81:8f:e1:40:be:05:c4:99:07:
1d:17:ae:51:b4:2c:a0:62:af:96:fd:6c:af:93:05:5a:81:d7:
d9:b9:0e:c1:e3:45:4f:07:2b:02:49:e4:86:d4:c0:48:ce:b5:
2d:1c:46:db:78:39:68:92:a6:ee:b9:d0:92:ce:e8:4c:ce:db:
b1:b1:21:3e:75:f0:28:e2:ee:04:5f:3c:d9:b4:31:75:ce:70:
07:c7:8d:3a:23:70:a9:a6:3f:13:d6:c6:34:9f:c5:89:3d:da:
4a:7a:18:f0:b5:7a:09:06:91:dc:1e:8b:dc:f7:c6:d1:df:2b:
e9:3a:0e:2c:a3:77:f8:30:40:df:af:0d:8e:ad:20:34:e6:1c:
91:0d:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:47 2026 by rpki-client