
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: FAXcKJoNgQ4TW5evBdeVYY9gC7KreFAhvZsv9CZ/A4g=
Subject key identifier: 62:05:93:F7:B1:EA:B2:45:66:DC:3F:65:34:EC:3B:A9:1A:FA:2F:94
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1CB6
Signing time: Tue 28 Jul 2026 16:16:52 +0000
Manifest this update: Tue 28 Jul 2026 16:16:51 +0000
Manifest next update: Tue 04 Aug 2026 16:16:51 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: utuc7THfnbeBwzK4E7HvpOe2EMSdzQazkg6gUNd0O6o=)
2: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
3: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
4: B0069018292511F198604A079E833773.roa (hash: kawalWq5XI6cfeCxsnT2HyX5rJIkbilhJhx9UIeYzQs=)
5: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
6: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
7: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
8: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7402 (0x1cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Jul 28 16:16:51 2026 GMT
Not After : Aug 4 16:16:51 2026 GMT
Subject: CN=6a68d5f4-c6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:ad:4b:f4:f7:a0:1d:67:d4:a9:ac:bb:4c:
94:a1:1d:8e:aa:77:2f:56:40:02:15:d7:0c:79:f6:
9a:54:ec:9d:dd:95:c5:25:c1:30:62:7c:49:9c:2c:
db:10:bd:53:59:18:f3:e8:b8:30:97:f7:81:6a:95:
78:e1:39:92:de:54:0c:c8:07:e1:ce:0b:16:39:29:
a1:68:e9:8c:1a:ca:22:3e:d2:0b:1c:33:7c:fb:16:
41:ee:64:63:28:42:c1:c3:1b:8d:cf:b5:39:6a:33:
a6:c2:19:98:9f:73:d0:88:13:f0:7e:8a:6c:ca:c7:
4c:46:c5:a4:c6:a9:5a:da:b6:d2:0b:c9:6f:44:23:
cf:49:31:57:be:5e:ee:b8:fb:0e:e6:9f:0a:b2:ea:
fd:2c:83:7b:5d:9c:e9:d6:c5:27:01:ca:ab:4c:27:
23:e5:3e:64:bd:1b:2a:34:a3:c6:f2:f2:c1:6a:db:
20:36:d6:94:e3:72:ca:fe:3a:aa:37:05:79:4c:21:
a2:8b:ca:41:53:c3:9d:0d:cb:65:ac:da:ed:a6:87:
9f:43:f1:3d:71:9d:05:22:ca:fa:5a:20:8f:1e:2a:
0e:34:c9:5f:e4:3c:7f:d9:94:71:61:5f:a0:21:95:
21:5b:03:c3:15:75:40:f1:0e:23:99:19:e1:72:82:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:93:F7:B1:EA:B2:45:66:DC:3F:65:34:EC:3B:A9:1A:FA:2F:94
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:8a:4c:81:01:51:0f:d5:ee:37:fe:75:7b:fd:7b:7b:cc:
76:6a:f7:04:5b:3b:3b:bc:e3:89:c1:4a:83:91:d4:70:cc:6d:
b8:ae:1d:7f:9f:7b:97:55:33:b0:2d:d2:78:29:e2:a3:d6:60:
77:08:16:7a:40:fc:02:47:2f:d9:af:61:2a:ee:fe:e5:39:c4:
89:40:14:67:61:23:e9:35:7f:34:b5:b9:da:19:89:7f:0c:49:
05:64:c4:f1:4d:0f:9c:b7:f2:bc:e5:7f:88:cd:7a:c4:14:64:
61:c4:6a:64:70:66:7c:3e:d7:51:37:58:79:26:ac:8a:b0:3f:
2f:ae:ed:b0:bb:b1:55:46:65:cb:d4:a9:3f:5e:d9:b9:fb:08:
c8:a0:20:74:a7:de:4b:a8:95:34:48:d4:45:36:45:e9:55:4f:
1e:1e:b3:77:b1:dd:83:f0:cf:76:9e:d3:e0:0b:6c:3c:71:ef:
3d:46:c1:35:3c:a7:ef:b1:3f:74:b4:80:f1:97:dc:47:0f:02:
c1:4f:f3:92:e2:7c:04:1c:a2:3e:25:79:da:ad:83:3d:0e:cf:
82:80:fa:3d:18:db:1b:ef:48:ae:e4:f0:e0:d4:6f:a5:f5:e8:
93:aa:65:af:dd:57:a7:5c:54:77:85:49:97:53:ce:87:ec:d1:
0d:61:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:31 2026 by rpki-client