
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: JVAcrzAlvWCI6Bh0ywnmac70EqW0ccBC/W4aFd+B558=
Subject key identifier: 20:47:96:ED:5D:41:94:EC:A7:13:3F:E9:74:BF:9C:FB:61:7A:C9:4B
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 019B
Signing time: Sun 19 Apr 2026 02:23:20 +0000
Manifest this update: Sun 19 Apr 2026 02:23:20 +0000
Manifest next update: Sun 26 Apr 2026 02:23:20 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: LBBy7LeXQQJBxsrON8YZmHFc+/iPdIQ7XGqMiRuGdoA=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Apr 19 02:23:20 2026 GMT
Not After : Apr 26 02:23:20 2026 GMT
Subject: CN=69e43c98-c3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:80:d9:df:15:4c:8f:9e:54:1c:7b:60:d9:
1a:84:73:eb:0d:af:49:64:ae:8d:3f:cc:c9:23:f9:
00:8e:65:78:2a:ad:fb:c7:2b:a9:f7:52:04:07:a0:
ee:d1:f5:6f:f5:60:18:9a:9c:e0:20:d5:27:84:bb:
1c:43:b7:4e:7c:65:4e:ae:99:4d:9d:af:59:55:4b:
cc:50:04:83:45:28:02:e3:15:0b:52:ec:50:7d:28:
80:9d:a8:83:1f:61:11:23:fa:bc:ad:c8:82:ce:12:
20:0c:8e:22:2c:8b:70:a5:55:60:ae:21:1b:c4:c8:
47:3a:6c:ce:6c:67:59:a1:db:4a:4f:0a:c0:7e:c1:
ba:a9:b2:06:81:3b:c3:e5:b4:46:50:c0:08:4a:d9:
20:bc:b2:cf:97:30:51:f2:2d:d8:90:88:17:f6:30:
11:f3:46:68:9f:81:6d:49:d7:40:f0:73:ef:4f:43:
f7:2d:27:d4:65:52:10:11:43:e7:ae:ab:b0:0b:c4:
9c:a6:ea:bf:c5:e5:aa:b1:2b:9f:ff:5b:02:90:4b:
78:39:3e:73:d4:f0:11:6d:ac:9b:aa:46:d2:0c:8b:
aa:53:91:53:ac:62:6d:52:b0:e7:ce:c2:ae:9f:1f:
64:3d:89:98:8f:2a:0e:aa:21:0e:de:45:9c:11:96:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:96:ED:5D:41:94:EC:A7:13:3F:E9:74:BF:9C:FB:61:7A:C9:4B
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:5f:9a:8d:79:79:eb:d1:65:73:60:3f:8a:d0:f2:0f:f3:
e4:dc:18:b0:0f:63:4d:28:2a:93:88:e4:29:bf:4b:5e:5a:f1:
83:10:9a:cd:29:03:eb:75:93:98:7c:49:cc:a7:06:85:03:54:
96:50:75:27:e1:ae:3e:79:34:e0:e4:86:3c:74:cd:11:81:be:
2b:db:b6:8b:ad:7f:99:03:bd:52:11:67:00:f6:29:3e:21:5d:
99:36:72:aa:13:97:84:50:ca:60:5c:a4:b4:f7:8c:70:e6:fa:
09:e2:e7:31:2d:fe:2e:3c:a4:82:ff:c6:e3:08:90:4e:3c:ee:
87:40:44:3b:9a:f7:28:bc:58:4c:af:19:ca:cd:33:ab:fe:6a:
7f:1e:41:99:89:4e:61:d3:fc:1d:ee:e1:63:da:1c:0b:8d:d4:
55:78:b2:f6:71:5a:14:fc:65:3a:3d:38:e0:9f:4a:7a:9f:97:
2f:b5:6b:34:46:68:61:3e:be:61:fd:85:91:92:2d:33:79:64:
bf:8f:f0:61:58:c7:30:6d:c1:4e:7a:6c:58:30:b3:2b:40:87:
fd:1a:36:c3:b3:6f:4a:1b:68:20:e6:9f:ec:ab:64:6c:72:19:
b0:47:32:78:36:50:19:b9:56:4c:76:d8:d0:d8:fb:34:f4:83:
19:ff:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:20 2026 by rpki-client