
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json)
Hash identifier: W5gh0OnnvjuNSvX61Hagl9/1JDyWn/n/znRC4aF7LHU=
Subject key identifier: 04:D3:4E:2E:20:C9:7E:FA:A5:C4:02:B9:E6:58:DE:07:B0:DB:DB:D6
Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01
Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
Manifest number: 36
Signing time: Sat 13 Jun 2026 08:39:26 +0000
Manifest this update: Sat 13 Jun 2026 08:39:26 +0000
Manifest next update: Sat 20 Jun 2026 08:39:26 +0000
Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: 6uv3Aj6wwU4MVk9imp9eyynYbQwyqCrE2kDzp7sGfns=)
2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl
rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
Validity
Not Before: Jun 13 08:39:26 2026 GMT
Not After : Jun 20 08:39:26 2026 GMT
Subject: CN=6a2d173e-a155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:60:71:55:90:ce:0f:15:9c:8c:75:1b:6e:
24:6c:83:4f:96:1d:7f:c6:62:6c:0c:71:3c:ac:6f:
b5:6a:73:39:76:6d:46:8b:21:0e:ac:e0:3c:fb:b4:
42:bb:12:d3:6b:ee:1b:34:4b:46:f2:bd:0e:72:19:
64:fd:56:09:e5:40:be:b2:80:c3:83:59:2f:90:ef:
e5:d0:fb:a2:89:27:fe:fb:d2:27:58:be:8b:fd:c8:
2a:00:d0:4b:ed:a3:78:5d:32:2a:03:18:30:d3:66:
3e:85:67:73:64:14:d6:d4:33:22:51:cf:9a:f3:7c:
4a:65:50:eb:a8:aa:ea:18:61:c3:f8:9a:03:a1:bc:
70:92:b5:c9:97:07:a5:eb:a8:66:ef:9c:59:2a:f2:
3f:e3:70:6a:c0:e5:95:c1:c0:ca:21:ed:57:9b:86:
2d:3b:d6:a3:35:fe:05:a3:44:43:b8:98:7d:d8:86:
b7:d8:5e:bd:13:c4:98:c2:7b:df:7c:a6:53:d0:89:
fa:af:3e:5a:fa:ba:a7:46:c5:81:86:a5:de:7e:ad:
81:d7:8b:b8:4f:57:f8:8e:13:42:61:c9:1f:43:48:
d8:c8:0c:13:61:32:51:9c:71:a5:1a:23:b4:05:bf:
a9:b0:d8:1a:a5:e7:12:13:35:38:2a:f6:07:a5:a9:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:4E:2E:20:C9:7E:FA:A5:C4:02:B9:E6:58:DE:07:B0:DB:DB:D6
X509v3 Authority Key Identifier:
keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:44:3e:4d:60:f2:a0:ca:19:06:06:c9:16:aa:33:d5:57:
7e:c7:3a:ba:8c:60:bb:06:5d:ae:95:c2:bb:c9:17:52:ba:36:
ff:7e:ab:00:3d:02:d0:fe:1d:e2:37:77:1e:13:f5:30:c2:c0:
25:cd:ac:76:a9:f6:18:e2:07:4f:c5:0f:ea:f6:2f:82:b4:df:
8d:78:0d:04:2d:21:37:1a:cf:a3:a2:4b:05:8a:40:cc:f8:a1:
ef:b2:4d:c7:57:1e:0e:9d:6e:89:51:a5:3f:bd:c3:95:67:47:
bd:a7:5b:ce:f6:b8:b3:ed:69:40:06:04:44:fa:d3:c4:68:9a:
b0:4a:18:86:e0:a9:eb:cf:74:8e:83:9f:b1:0d:c8:9a:70:ff:
31:ef:99:4a:8f:45:fe:33:8f:d9:b4:4f:20:7e:0a:8b:8b:bd:
f4:df:47:13:19:c0:84:d0:55:ab:97:80:7b:b1:ac:42:87:ab:
25:a8:b3:f7:22:8e:17:2d:ca:2a:77:4a:e0:9b:51:76:90:5f:
cc:78:1d:09:4c:4c:6b:9f:6c:8b:72:a5:b9:a1:a6:17:ca:58:
32:14:c2:8d:fd:a7:ad:85:6b:c7:ca:a6:3b:15:f8:fc:17:c9:
90:4c:a3:cf:e8:d4:ed:4a:f4:22:b3:72:4d:cb:56:7d:86:cc:
2d:59:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:26 2026 by rpki-client