
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: syqEzC6Q6TckROxkZx0QlRMO56Xu4529nIVqdAqUFYU=
Subject key identifier: F8:D6:CD:37:2E:5E:72:48:85:69:B1:6D:20:B1:93:7A:D7:0C:C8:F7
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1C98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1C68
Signing time: Mon 02 Mar 2026 03:09:22 +0000
Manifest this update: Mon 02 Mar 2026 03:09:20 +0000
Manifest next update: Mon 09 Mar 2026 03:09:20 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 0BEYFhIm+EzUb1u75F9lTCDtB54F725sgDvMcf3vJuw=)
2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
3: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
4: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
5: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7320 (0x1c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Mar 2 03:09:20 2026 GMT
Not After : Mar 9 03:09:20 2026 GMT
Subject: CN=69a4ff62-07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:9d:1a:6e:c2:e2:c1:6a:a5:bc:e9:75:b4:
2c:29:d7:73:fb:a1:81:7e:55:f6:4e:c8:d7:9e:a6:
87:1e:90:c8:b0:3f:62:01:f0:de:89:93:8e:f6:21:
b3:c5:74:89:a1:fa:b9:1a:56:cb:6c:e3:4f:0a:77:
93:6f:57:3d:24:6b:9e:18:48:19:2e:70:29:e2:f2:
1e:16:71:1f:22:43:84:e0:d2:76:70:45:56:eb:a4:
4f:08:a3:ff:f9:fc:9f:50:4e:c1:43:56:3f:0e:97:
72:b8:a2:90:ec:7a:85:1b:01:0f:24:1c:fc:f0:e8:
27:e9:6e:7c:3e:9f:63:76:77:16:a4:3a:0b:b9:2c:
1f:13:64:5b:f7:cc:b4:19:e5:b1:1e:e7:7e:ea:9b:
4f:1b:9f:9e:aa:1f:86:c1:1f:98:f1:b3:9d:1b:48:
81:28:22:3c:4e:91:f7:ae:7f:e8:f4:e8:43:6b:68:
8f:15:9d:bc:11:73:7a:7b:c2:33:1d:46:16:a6:90:
de:bc:e8:f4:8f:11:48:c7:5e:2c:6c:74:22:dc:57:
03:8d:cb:cc:fe:af:43:ee:f9:c9:39:2a:56:a1:4e:
d0:f1:4a:6c:da:98:cb:b0:a9:40:1d:f3:65:8c:f3:
c7:79:b0:b8:90:1f:11:ff:b6:68:4a:01:3d:3e:ee:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:CD:37:2E:5E:72:48:85:69:B1:6D:20:B1:93:7A:D7:0C:C8:F7
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:15:c6:5e:a4:ec:d4:10:24:8c:06:01:82:e7:e6:cb:75:36:
d4:b9:69:20:0f:a8:d4:bf:35:b2:e2:5f:1e:12:d3:eb:a6:be:
30:33:3e:68:d3:29:b6:27:0a:be:f4:8b:44:04:62:9a:6e:c5:
62:08:8b:1f:44:b2:74:25:67:4a:6b:90:fe:fa:12:2b:bd:90:
47:cf:23:bc:4d:fa:08:b6:72:ad:d7:41:50:e5:ff:01:6e:fe:
79:39:5d:6e:08:05:4f:3d:bf:b3:20:e2:34:70:87:ca:81:da:
b6:45:c1:77:08:80:d2:f4:2c:b1:35:56:ba:77:14:93:02:d8:
f6:2d:93:04:66:93:6b:c2:5a:45:b2:d2:d5:75:8d:be:d4:be:
bb:30:12:0b:b5:80:02:64:63:90:2f:93:1d:7d:b7:59:ad:5e:
62:e7:de:63:2a:8e:21:48:23:66:db:79:a0:04:72:0b:17:80:
66:9b:75:a8:89:82:73:44:f3:a3:f9:df:60:b3:b9:2d:d3:05:
18:7d:4a:77:e9:1e:c8:48:c0:13:3a:46:8f:9b:1c:11:0d:c5:
9d:41:df:b7:f1:21:fa:ec:27:a5:5f:3f:73:d8:a7:92:f8:74:
8d:83:15:fc:0f:63:0c:28:fd:7a:03:28:a1:8c:7b:ec:09:2c:
c5:cc:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:09 2026 by rpki-client