
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: 4FufjzpNVhlRQjEqeXxnO7ffUfWEY7Nn2R/+E0i25Jk=
Subject key identifier: 08:20:07:67:FF:4E:B4:66:5E:14:DB:20:08:E6:0F:0D:64:7E:C6:DE
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 01EC
Signing time: Wed 23 Sep 2026 01:45:44 +0000
Manifest this update: Wed 23 Sep 2026 01:45:44 +0000
Manifest next update: Wed 30 Sep 2026 01:45:44 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: TCVH5MVpK4RiKkehiyqgfnufoV0kmaeFgPldtYvHvH8=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: U/DEuDwRwhqtKgxxnucO+fNicfaNI7xpxs1zj8ALIgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Sep 23 01:45:44 2026 GMT
Not After : Sep 30 01:45:44 2026 GMT
Subject: CN=6ab32f48-5d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:ed:29:78:2e:5c:21:1d:fd:dc:1e:69:65:
89:3d:5d:67:20:9a:98:20:c9:8a:0f:0b:f1:34:fc:
c3:fb:ea:de:4b:00:f8:3b:20:d9:ab:e6:15:5a:95:
cc:99:22:13:55:cb:bb:59:59:55:a2:fc:b5:33:75:
1b:ee:c1:68:a9:c9:8e:3a:17:22:5e:c9:09:79:f7:
80:8b:b6:15:42:b6:10:f8:93:ab:48:3c:6d:a7:b3:
ab:39:ab:fd:31:18:57:be:e5:9f:15:52:6b:b7:4c:
90:0c:71:91:2f:6e:24:95:f7:28:e5:41:1e:4e:18:
d1:8b:5c:c7:63:92:0f:bc:10:a7:ef:79:f3:9a:de:
33:d6:a7:8a:99:17:79:37:59:bf:d0:b1:89:e2:fc:
87:30:8c:ac:c9:5b:c9:bf:fd:0a:52:de:3f:93:da:
25:70:b7:37:f6:6b:c1:ce:07:e2:f0:a5:0f:b3:fb:
df:b8:13:ac:0e:80:34:0f:ed:bb:75:6b:1c:21:71:
e8:49:bf:3d:9c:cf:1a:dc:e9:95:c1:5f:3e:21:b0:
66:a0:ff:9d:57:2d:66:b6:62:46:56:ab:da:47:7f:
f0:16:8e:6d:e1:06:3f:f0:7b:8b:99:fa:d0:98:ab:
25:92:83:7c:2c:93:fb:25:79:65:39:1b:7c:1b:d6:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:07:67:FF:4E:B4:66:5E:14:DB:20:08:E6:0F:0D:64:7E:C6:DE
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:76:72:fb:d5:e8:66:0b:9e:d8:77:f8:d6:a3:f2:ae:7b:
47:96:61:61:0c:81:28:4a:56:36:60:01:e9:e9:eb:89:8e:16:
cb:97:e2:d4:5c:c5:92:61:98:9f:55:25:5a:f4:4d:6d:3b:9f:
a3:d6:65:41:53:2a:f1:91:8c:cb:aa:d8:34:9b:e1:40:3d:dc:
cc:7c:39:a6:32:b6:c9:98:37:b0:7a:0b:50:84:c1:23:76:70:
f9:b9:79:4c:2d:2c:a5:cd:f5:fb:96:84:20:4f:58:4f:c2:94:
ec:6b:8b:aa:20:5e:a7:42:f9:e3:c0:c3:a6:d4:ae:bf:93:7c:
38:92:80:4a:58:cc:68:2d:53:d9:16:2a:af:b4:21:ca:8e:6f:
04:b8:94:0d:a1:ae:d4:6a:7d:41:fa:29:6a:3f:54:ba:12:48:
67:37:d2:98:fa:40:46:09:df:d9:2a:52:0b:21:da:73:97:54:
82:a5:bc:ff:de:6a:c2:ce:72:01:29:42:41:8b:9b:b4:54:c0:
f9:a9:33:75:b9:c1:d8:33:97:ed:3c:7d:48:76:83:04:7b:69:
ae:4a:81:13:0a:08:e6:86:26:3b:f7:4b:ff:83:65:42:51:c5:
c6:f2:1a:09:fa:ea:65:01:2f:ea:41:48:9a:ce:67:f9:79:56:
2a:f5:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:03:49 2026 by rpki-client