
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier: XHEqUL/y72OLqMbxQt5g4Re9xOuKf0b90HWifWdLydk=
Subject key identifier: 2E:8F:8D:0A:1E:2C:EA:EA:FD:BB:11:37:E3:B0:AC:99:04:77:D0:42
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number: 6186
Signing time: Fri 12 Jun 2026 14:15:21 +0000
Manifest this update: Fri 12 Jun 2026 14:15:21 +0000
Manifest next update: Fri 19 Jun 2026 14:15:21 +0000
Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: uUXIPfy0KpClGTN7hQd3qXIojnfEd9MB9cvDj/uVNmo=)
2: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=)
3: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=)
4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Jun 12 14:15:21 2026 GMT
Not After : Jun 19 14:15:21 2026 GMT
Subject: CN=6a2c1479-ed8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:0a:3e:de:3e:92:92:dd:d6:1c:cb:d5:15:
05:2d:a6:22:e3:cf:4d:08:03:1c:95:70:09:87:59:
0e:ed:35:25:a2:6b:46:39:12:9c:3d:25:40:41:3b:
53:5f:a0:32:bc:1c:94:dc:72:05:5f:4a:ff:58:4b:
7c:58:9d:66:22:d6:43:1e:33:fa:5a:85:f5:5b:95:
06:e4:a9:e5:fd:eb:cb:e4:97:58:24:17:c8:af:87:
e3:d7:4f:df:54:56:12:f5:5e:da:72:67:42:04:e7:
8f:ac:17:25:21:39:de:11:0f:66:36:db:50:4e:40:
c6:2b:e4:8b:d5:42:70:90:ac:1c:f7:2d:0b:d9:c0:
8b:2a:d5:2b:6a:25:89:b6:b0:cb:63:5d:f7:66:4f:
a6:e0:02:fa:97:86:4a:a9:29:14:63:8b:94:92:b6:
e8:e3:59:c9:49:a7:e2:dc:7f:79:5a:0e:f2:dd:4d:
2b:07:b2:8e:4b:ad:9b:90:79:4b:60:6f:c7:30:5a:
a7:d6:60:b7:ed:44:b6:38:68:3d:e2:64:9b:a1:78:
6a:d6:c1:1a:ad:d0:67:f9:8a:8f:67:ae:f7:e0:7d:
d8:26:db:56:da:7d:f6:e8:98:61:09:c8:59:22:ae:
48:77:60:be:7d:1d:fe:30:20:bc:bb:2c:f7:ba:c4:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8F:8D:0A:1E:2C:EA:EA:FD:BB:11:37:E3:B0:AC:99:04:77:D0:42
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:40:a3:b7:db:38:13:91:20:cd:d7:24:46:47:a3:bd:ba:
64:ac:f1:f3:0d:f5:1a:11:9d:be:a8:6c:65:4a:9d:b3:bd:35:
59:8f:25:18:99:56:da:14:b4:f9:55:22:c5:5b:9f:b1:db:08:
28:7c:52:c3:21:50:78:7a:f4:ee:17:d8:d5:32:92:3f:29:bb:
ce:6c:5c:89:94:3e:8a:be:ad:1d:8e:ea:25:08:20:a3:ee:3f:
ca:9c:96:c1:0e:37:9f:ee:22:dc:e5:7b:91:21:20:9c:4e:14:
2c:0c:32:ba:a7:fe:d3:c2:a0:04:7b:0b:39:70:27:a7:4a:41:
d6:9c:b0:a6:83:a4:d9:b0:af:a5:6d:02:f5:79:18:a0:df:20:
b7:b7:75:73:f1:5f:01:b1:ae:1f:44:80:ef:a2:61:82:6c:cd:
ef:64:8d:7e:1e:45:e4:f8:77:93:ae:77:ea:c0:b5:b3:92:a8:
14:5c:ae:ef:a3:0e:cd:5b:0a:a2:09:23:15:f6:da:68:00:77:
fa:f6:d8:bb:af:73:0e:93:05:36:70:2b:41:45:53:1a:fc:3c:
0c:f2:f6:e8:c5:3d:e9:88:79:b3:d9:06:47:2a:40:05:84:75:
7a:d0:39:ae:4d:0f:a9:81:a3:fe:98:0f:05:3a:ae:a3:80:7b:
a0:df:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:22:00 2026 by rpki-client