
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier: OLjCTmYNfZPyW30/8RIC6mJ3ELxVShqtXzcN9o5oEAI=
Subject key identifier: B0:09:3A:A6:E3:DD:5E:01:27:9A:46:A2:F1:DE:F7:77:D5:78:E2:12
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial: 0459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number: 042A
Signing time: Fri 17 Apr 2026 00:19:02 +0000
Manifest this update: Fri 17 Apr 2026 00:19:02 +0000
Manifest next update: Fri 24 Apr 2026 00:19:02 +0000
Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: JkmGDh9gdQ4pNvF89valeHZXeZTSzTPDsyyxHQMAceg=)
2: E4EB20D84C0C11F08C577458C4F9AE02.roa (hash: cFFlJNrhpUbvuMCGNdE9O4VBJt7bZuHhzuPDD0tE+So=)
3: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: PEFUWPuuL2vMfvcqlcYxIw9blVOMpnd6Xf7lxivGVE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Validity
Not Before: Apr 17 00:19:02 2026 GMT
Not After : Apr 24 00:19:02 2026 GMT
Subject: CN=69e17c76-5cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:e4:0e:b7:71:11:30:7e:cf:50:04:31:11:
22:c6:7a:ad:80:c3:2e:fe:85:a6:2d:e8:85:90:2c:
a6:46:85:46:a5:53:b1:29:6f:bc:25:de:5e:fc:fe:
d7:02:29:50:c1:9e:23:17:fc:83:7d:de:86:44:8c:
da:3d:a1:e8:50:0c:39:9d:8e:84:6c:45:42:f1:b1:
fb:d4:66:31:06:f1:4d:51:d5:11:b1:87:7f:78:8d:
0f:7c:f1:e4:7a:e7:84:cf:0b:69:46:4d:77:0a:98:
b6:a3:e2:2d:6c:bb:02:cb:0e:c0:40:90:7c:b4:71:
ff:54:9d:5b:71:e2:63:59:4f:0e:5a:1f:30:88:c7:
58:2c:0d:e5:57:53:b8:5f:ed:b0:f8:0b:1c:07:6d:
c8:c7:64:e7:77:d7:be:c7:22:77:8e:24:72:d6:2a:
e4:c4:ce:c6:ad:2b:30:bb:a0:41:ac:8b:8e:5c:f3:
61:28:65:00:92:82:87:e5:46:af:1a:e4:a8:1b:e8:
22:db:f8:a6:07:0f:84:9b:fd:25:00:54:a3:85:68:
c3:3b:33:9f:bc:63:4f:27:62:75:47:9f:5a:1a:84:
ac:59:5e:22:23:bb:7b:0c:ab:0a:2c:7b:0e:25:3c:
2c:38:6f:c2:c2:7d:1c:d9:f0:4c:69:a0:6a:e5:95:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:3A:A6:E3:DD:5E:01:27:9A:46:A2:F1:DE:F7:77:D5:78:E2:12
X509v3 Authority Key Identifier:
keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:e6:82:52:f6:d6:68:f0:18:46:e1:77:be:62:6e:3a:45:
94:d6:43:f3:a4:d7:af:f6:94:b7:48:27:d7:25:e6:3d:69:46:
5a:fc:3c:20:cd:4f:31:12:31:c8:3c:99:cb:b8:9a:d6:1d:23:
a1:5a:f6:9d:c7:5f:4f:d6:e2:da:ef:12:3f:31:f0:e7:2d:cb:
ab:15:40:b6:85:8a:9e:0c:a4:18:d0:04:19:74:92:c4:a3:c7:
77:51:06:21:a8:28:db:07:f2:ce:b5:1d:4f:85:a6:27:8f:12:
68:b8:0a:ba:5a:8d:f3:08:06:e1:10:12:5a:82:e1:23:02:77:
9f:bf:6b:1c:a8:3f:7f:d0:6c:46:0d:5f:77:b2:18:b6:70:84:
52:6f:3f:45:01:f2:8f:30:fa:f3:bd:23:8c:a3:e8:8f:e4:1e:
d0:51:d7:86:2e:fd:b3:fc:79:c3:28:6e:f2:1e:a1:98:37:6b:
69:24:d0:e5:f9:63:f1:bd:32:8d:5c:d0:0b:a8:94:69:93:5e:
87:08:82:18:3b:b0:c4:e2:58:bb:e8:9b:78:2c:de:fe:79:37:
0a:a0:ed:93:ac:f4:64:c7:e3:9b:76:82:83:d0:0e:71:10:78:
29:2f:df:0e:6d:2d:ac:18:1a:d9:d2:d2:4d:85:39:3a:e2:5e:
d4:9b:4a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:10 2026 by rpki-client