
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: nteU20V1NuGkYWTO8gbfubSOnqSfqNAWSC/e2reHkJQ=
Subject key identifier: 6E:58:3C:AF:7D:3E:41:72:60:FB:70:5B:47:BD:0F:99:2D:D7:96:2A
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 0182
Signing time: Mon 02 Mar 2026 00:59:31 +0000
Manifest this update: Mon 02 Mar 2026 00:59:29 +0000
Manifest next update: Mon 09 Mar 2026 00:59:29 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: n162nFCgBRx4PZO8OrqNCnqvHttkzzbqvpOOxTNuT+A=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Mar 2 00:59:29 2026 GMT
Not After : Mar 9 00:59:29 2026 GMT
Subject: CN=69a4e0f3-1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:2d:95:47:d4:81:1c:24:fc:2d:be:06:c3:
6c:66:da:d0:68:aa:7c:67:21:e2:85:82:dc:2d:d6:
f9:f1:97:dc:ba:20:17:e1:7a:d4:d2:75:d8:56:08:
38:dd:23:ea:49:47:d8:8a:96:27:6a:6f:02:7a:07:
95:5e:c6:23:ed:d0:c7:93:ca:c8:43:e4:c3:3a:c5:
3b:54:94:b8:2c:02:5b:c6:9d:d9:09:80:7c:01:27:
ac:1b:34:62:89:04:cf:fe:16:42:41:e9:c2:ee:98:
c7:81:aa:f6:49:5b:85:30:53:0b:ef:80:17:bf:1c:
28:1d:da:e9:11:72:df:19:2e:4c:f0:4e:9b:5a:ec:
1b:90:09:8b:12:b0:81:15:7b:84:83:c2:3a:1c:22:
6e:b4:9b:fc:28:67:9a:91:7c:6d:22:6f:b1:eb:09:
eb:4e:18:cc:4f:66:41:18:52:f5:2b:03:9d:7a:6f:
08:8b:6b:68:1f:f0:2a:f8:8f:b0:00:74:4f:9c:16:
6b:d8:10:24:47:62:75:dc:95:6d:2c:00:2c:6d:80:
01:1a:ca:f0:25:e9:90:4a:0b:ae:db:64:22:2d:7e:
d2:51:ef:1c:67:aa:02:ac:f0:6d:df:a5:c1:c1:07:
e0:d8:6f:15:ea:8f:63:85:a0:18:2c:20:1b:10:f0:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:3C:AF:7D:3E:41:72:60:FB:70:5B:47:BD:0F:99:2D:D7:96:2A
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:c5:8f:6a:88:5c:06:ea:91:2c:12:4c:86:44:c4:bc:0f:
30:e4:91:e5:be:81:3d:22:47:60:2a:3c:2b:19:07:2b:70:9a:
98:5d:2a:d9:52:6f:db:fc:c1:c7:b2:55:22:2f:e2:25:49:ba:
d2:f3:46:36:be:e3:21:01:5b:31:f7:5e:96:7c:79:d2:d3:de:
86:5e:b6:2f:16:e8:4e:4c:ca:a8:c5:32:3e:9d:21:38:19:6e:
c7:f7:f4:f2:ea:d6:ac:9b:f6:5c:c1:e9:d7:4a:a9:d9:c2:65:
61:ee:2d:f4:66:a1:9e:75:f3:86:b7:55:31:02:24:ca:ea:c9:
74:77:85:15:14:5e:5b:8f:2c:13:a9:78:62:4a:fe:c8:54:61:
ee:0b:62:c3:ab:63:89:14:6a:ed:63:31:92:67:c9:f4:5a:6b:
d1:3f:b3:0c:4a:25:88:b8:f8:d5:4b:94:66:6e:b1:03:7a:4a:
ba:89:ab:78:bd:f6:f5:e0:22:4b:e8:93:67:6a:68:57:3b:a2:
93:fb:4e:87:94:b9:9f:5b:87:22:ac:4a:ed:5e:a2:23:1e:06:
e5:7f:4b:1a:2a:fe:b9:d9:34:fe:fb:60:0d:52:10:d5:9c:e2:
cd:bd:5d:d9:8d:9e:40:d3:1d:e5:d8:74:f4:0a:7b:47:cb:52:
ca:87:20:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE
MjRCQ0JBMTQwHhcNMjYwMzAyMDA1OTI5WhcNMjYwMzA5MDA1OTI5WjAYMRYwFAYD
VQQDEw02OWE0ZTBmMy0xNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAte8tlUfUgRwk/C2+BsNsZtrQaKp8ZyHihYLcLdb58ZfcuiAX4XrU0nXYVgg4
3SPqSUfYipYnam8CegeVXsYj7dDHk8rIQ+TDOsU7VJS4LAJbxp3ZCYB8ASesGzRi
iQTP/hZCQenC7pjHgar2SVuFMFML74AXvxwoHdrpEXLfGS5M8E6bWuwbkAmLErCB
FXuEg8I6HCJutJv8KGeakXxtIm+x6wnrThjMT2ZBGFL1KwOdem8Ii2toH/Aq+I+w
AHRPnBZr2BAkR2J13JVtLAAsbYABGsrwJemQSguu22QiLX7SUe8cZ6oCrPBt36XB
wQfg2G8V6o9jhaAYLCAbEPD89QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5YPK99
PkFyYPtwW0e9D5kt15YqMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1
RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N
NEU3VXhiajBpcHpTUzh1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUNrFj2qIXAbqkSwSTIZExLwPMOSR5b6BPSJHYCo8KxkHK3CamF0q2VJv2/zB
x7JVIi/iJUm60vNGNr7jIQFbMfdelnx50tPehl62LxboTkzKqMUyPp0hOBlux/f0
8urWrJv2XMHp10qp2cJlYe4t9GahnnXzhrdVMQIkyurJdHeFFRReW48sE6l4Ykr+
yFRh7gtiw6tjiRRq7WMxkmfJ9Fpr0T+zDEoliLj41UuUZm6xA3pKuomreL329eAi
S+iTZ2poVzuik/tOh5S5n1uHIqxK7V6iIx4G5X9LGir+udk0/vtgDVIQ1Zzizb1d
2Y2eQNMd5dh09Ap7R8tSyocg7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:06 2026 by rpki-client