
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: pKM0RiiPSG32hoVsI6jQWvcmifgqFtPJGoyIR74Zc30=
Subject key identifier: 0F:66:3A:2B:5D:B5:A6:04:1B:FB:7E:F9:DE:A3:A0:8B:78:84:AF:B2
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1C9E
Signing time: Fri 12 Jun 2026 16:09:50 +0000
Manifest this update: Fri 12 Jun 2026 16:09:50 +0000
Manifest next update: Fri 19 Jun 2026 16:09:50 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 76WgNg0exHMtjUnwDy/pKs/c1nU9dmWXF09kjv+BJt0=)
2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
3: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
4: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
5: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
6: B0069018292511F198604A079E833773.roa (hash: IbOqEF2ekXRQhCHLmGbRBnk7WRVXEKD40vwBE300k9A=)
7: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
8: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7377 (0x1cd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Jun 12 16:09:50 2026 GMT
Not After : Jun 19 16:09:50 2026 GMT
Subject: CN=6a2c2f4e-ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:6e:7c:86:6b:f5:e0:29:63:a2:5f:1c:0a:
fc:5f:03:b5:06:8b:eb:dd:a9:cd:e9:27:b6:33:3f:
85:6e:10:ee:51:db:1e:90:16:de:a9:2c:13:54:a0:
f8:7c:5e:68:5a:06:19:84:18:f5:a9:4a:b0:46:b0:
38:94:1a:5d:c3:48:99:44:16:45:f0:64:70:e5:66:
83:ce:ac:3a:4c:11:3a:c3:0e:8a:8d:2f:7c:1a:e4:
8c:07:ad:77:58:fd:0e:98:4f:e3:5f:19:a2:ca:8c:
00:a4:2a:c8:a6:30:de:80:70:92:92:af:46:9d:bf:
a7:f9:e9:cb:34:57:c8:4d:21:8d:30:12:6b:ea:c3:
72:c5:a2:09:2a:84:95:39:5c:b0:df:00:a3:b1:01:
ec:98:4c:99:bb:48:03:6a:4d:61:82:c1:89:e9:1f:
8a:c8:f6:6c:04:86:af:c4:65:0d:47:ef:18:ee:f1:
e5:07:c2:b4:a4:5b:a9:b2:4e:f3:9e:b9:bf:29:25:
a3:21:c1:ef:f9:37:5e:be:ed:f0:d2:4b:02:97:bf:
a3:be:ad:ef:01:a5:e7:c8:1e:fe:d1:36:da:8a:a4:
c8:0c:bc:61:6e:00:7a:79:78:35:cf:a5:d2:c7:94:
41:84:8f:93:69:c8:72:7c:6a:6e:75:7c:4f:85:ed:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:3A:2B:5D:B5:A6:04:1B:FB:7E:F9:DE:A3:A0:8B:78:84:AF:B2
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:0b:52:8e:4d:82:33:24:60:b2:b2:0c:c5:8e:a1:72:e0:
ad:75:6e:6a:eb:45:18:cc:bf:df:d8:ff:95:8d:58:45:fb:70:
a7:12:f3:73:b8:4f:17:56:d6:28:47:50:2c:e3:85:30:e8:41:
96:fc:97:dc:ce:f9:ba:a6:5a:b1:0a:11:27:54:91:97:18:a8:
5c:33:e8:23:8e:fe:00:4f:12:0e:3f:ad:ee:50:a5:ec:4c:a2:
c7:a9:87:9a:2e:ed:fd:fc:ba:fa:d3:28:18:79:90:cc:4f:ec:
9d:15:79:9b:a1:16:23:cf:ec:1e:e9:51:8b:b7:f0:7e:d6:60:
6b:a2:c3:fd:d0:0f:76:9b:5a:8a:2c:6e:b4:0f:56:78:09:5e:
f6:17:7e:35:f0:9e:02:c8:4a:bb:78:a8:99:e6:59:66:b3:5d:
d0:98:9e:12:62:5b:a8:ed:b1:09:fc:6d:3d:8e:48:d3:04:31:
1f:dc:20:de:a1:4e:59:7a:1c:53:8c:74:4d:09:d4:22:38:eb:
00:d5:7e:cf:82:5f:a2:75:6a:85:e8:e5:a7:7a:45:c6:00:ae:
99:21:f6:93:16:2a:9f:3e:c7:4a:91:b2:44:7f:f2:6b:58:23:
eb:7c:45:ab:10:9f:57:e0:6a:4f:20:f1:4f:26:b2:48:ed:51:
b1:fd:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:09 2026 by rpki-client