
$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier: +jpPZsVBzzGfM8UJse7HeVHxrCCuhUUOWmo8nfvayLA=
Subject key identifier: 52:57:7B:6D:16:11:0B:14:D4:6E:7F:63:61:C8:09:EB:60:FB:39:22
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial: 06C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number: 06C0
Signing time: Sun 01 Mar 2026 22:51:35 +0000
Manifest this update: Sun 01 Mar 2026 22:51:35 +0000
Manifest next update: Sun 08 Mar 2026 22:51:35 +0000
Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: crnmEFW1EBk3Uk8oeKNZVarb+HrdmA903WItkufxu3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Validity
Not Before: Mar 1 22:51:35 2026 GMT
Not After : Mar 8 22:51:35 2026 GMT
Subject: CN=69a4c2f7-6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:21:e8:f7:5e:ad:c2:07:2b:6b:46:6f:9d:
ad:08:fd:7d:50:2c:fb:90:75:f2:29:4a:a4:2e:f2:
42:cd:b7:76:46:be:63:3f:05:78:b0:14:78:b4:0d:
0c:23:d1:f2:6e:85:8a:6c:f4:0b:b6:02:57:8e:1d:
6d:50:e4:98:bb:fd:c9:7b:7b:15:c0:46:72:66:6a:
f7:04:31:a1:7c:7d:3a:1f:bb:e1:16:58:75:bd:33:
dc:46:5d:9d:b4:63:a2:4e:e3:87:78:90:29:89:9b:
67:73:7e:d0:4e:a3:87:c9:0c:a7:5b:61:7d:37:e2:
f4:32:a9:17:12:bf:f1:fb:bf:04:bc:7b:93:02:f7:
14:3a:a2:b4:85:ab:db:2a:08:45:cb:3f:ac:09:24:
1b:78:c4:4e:7c:9e:3e:84:7e:44:7d:8f:27:59:64:
bf:79:2e:5a:94:ae:d8:e1:ed:85:22:ad:65:71:ef:
0d:85:84:cb:6d:cc:f8:c1:e0:a0:96:89:ab:cf:69:
40:21:0f:a9:63:65:cd:40:98:3f:4a:f3:c6:80:f7:
04:a5:18:56:aa:d6:21:c7:35:e3:1a:8e:52:68:22:
0c:7a:50:a3:6a:20:c3:11:4c:1c:4c:fd:7c:ad:dc:
72:8c:93:47:fa:1a:4a:45:2e:3e:bb:14:d0:c2:87:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:7B:6D:16:11:0B:14:D4:6E:7F:63:61:C8:09:EB:60:FB:39:22
X509v3 Authority Key Identifier:
keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:f9:ea:df:a7:6a:c2:85:aa:c8:ce:43:e3:dd:66:2d:96:
c0:9d:a9:37:76:ce:7a:a8:fb:21:0e:a8:12:05:87:0c:39:2b:
49:23:c5:29:62:42:c6:a7:5e:54:b5:5b:81:15:a4:66:b5:70:
d9:a7:63:24:5e:70:49:dd:c8:7f:b5:7d:dd:3f:86:1b:60:86:
eb:34:6d:af:c3:bb:30:a5:73:7e:7a:bc:89:69:41:80:8f:bd:
ed:15:b3:2b:10:1b:9a:b0:fa:e6:8b:4f:d7:f1:a9:89:bd:40:
52:52:ce:8e:1d:e7:50:49:13:69:78:97:5a:74:91:22:8f:f5:
98:d6:c7:ae:44:3f:87:23:94:b4:dc:1c:6d:2c:85:60:54:36:
b6:b3:1e:e6:ab:23:9d:de:9e:7f:2a:fe:3d:e2:dd:b0:d3:be:
24:bd:d2:8b:ae:53:05:61:4e:bb:a0:6c:33:1c:d7:1a:45:43:
d2:64:06:fd:9b:61:c7:b9:ff:ae:4a:50:d4:cd:06:d7:10:47:
0b:77:ab:65:27:aa:62:55:61:69:65:68:c5:83:3e:60:ec:26:
e7:18:3e:9e:9f:40:85:43:39:8a:d9:00:b2:c3:86:eb:f3:88:
c7:eb:8d:84:c6:9b:82:6c:16:75:1d:02:30:33:09:b2:25:a0:
39:90:8e:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy
MDkwMjZEQUEwHhcNMjYwMzAxMjI1MTM1WhcNMjYwMzA4MjI1MTM1WjAYMRYwFAYD
VQQDEw02OWE0YzJmNy02YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCMh6PdercIHK2tGb52tCP19UCz7kHXyKUqkLvJCzbd2Rr5jPwV4sBR4tA0M
I9HyboWKbPQLtgJXjh1tUOSYu/3Je3sVwEZyZmr3BDGhfH06H7vhFlh1vTPcRl2d
tGOiTuOHeJApiZtnc37QTqOHyQynW2F9N+L0MqkXEr/x+78EvHuTAvcUOqK0havb
KghFyz+sCSQbeMROfJ4+hH5EfY8nWWS/eS5alK7Y4e2FIq1lce8NhYTLbcz4weCg
lomrz2lAIQ+pY2XNQJg/SvPGgPcEpRhWqtYhxzXjGo5SaCIMelCjaiDDEUwcTP18
rdxyjJNH+hpKRS4+uxTQwodwxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJXe20W
EQsU1G5/Y2HICetg+zkiMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz
NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz
X09vaWc2OFBGcllna0NiYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjSz56t+nasKFqsjOQ+PdZi2WwJ2pN3bOeqj7IQ6oEgWHDDkrSSPFKWJCxqde
VLVbgRWkZrVw2adjJF5wSd3If7V93T+GG2CG6zRtr8O7MKVzfnq8iWlBgI+97RWz
KxAbmrD65otP1/Gpib1AUlLOjh3nUEkTaXiXWnSRIo/1mNbHrkQ/hyOUtNwcbSyF
YFQ2trMe5qsjnd6efyr+PeLdsNO+JL3Si65TBWFOu6BsMxzXGkVD0mQG/Zthx7n/
rkpQ1M0G1xBHC3erZSeqYlVhaWVoxYM+YOwm5xg+np9AhUM5itkAssOG6/OIx+uN
hMabgmwWdR0CMDMJsiWgOZCOxQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:38 2026 by rpki-client