
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json)
Hash identifier: 8YbaoDXHfe2K5K12SGLXJCewSP+SAKnghZQdMnxSkX4=
Subject key identifier: 28:71:BB:09:E2:D3:AE:C3:00:A7:58:C5:96:F0:A9:AF:69:0D:84:CC
Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
Manifest number: 02A1
Signing time: Sat 13 Jun 2026 01:36:50 +0000
Manifest this update: Sat 13 Jun 2026 01:36:49 +0000
Manifest next update: Sat 20 Jun 2026 01:36:49 +0000
Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: YtxU7GPr2K/CuE9xJP1+FoI806cNDIYvC+kKUrBuQPA=)
2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: B6zuGQHiLLMcpOAalP92RoQpZ8Tfo5uy0bH1HnD3XPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Validity
Not Before: Jun 13 01:36:49 2026 GMT
Not After : Jun 20 01:36:49 2026 GMT
Subject: CN=6a2cb432-bbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:ce:8f:b0:50:42:95:b5:aa:af:80:4a:d8:
4b:b2:f0:f7:82:1d:91:5a:9c:39:eb:e2:4d:cc:df:
23:56:34:1a:c7:b8:17:6a:e2:13:91:4c:9d:54:30:
0e:1f:da:dd:a8:81:9f:79:66:30:f8:77:ad:8a:1c:
30:84:a6:25:c5:f9:f0:60:53:7f:4f:e2:f1:56:02:
6e:90:d1:e7:02:c5:de:d8:8e:33:0c:41:dc:8a:1f:
6c:d7:6b:14:93:79:f8:34:3b:26:1b:47:f7:58:db:
39:9c:6a:77:54:b8:39:cd:cb:22:e1:87:09:c9:9c:
3f:67:85:a5:33:29:7c:94:49:22:d3:bf:22:59:47:
c6:61:54:98:e5:68:36:74:39:c5:95:52:48:13:e0:
a3:0f:20:67:0e:2a:e2:06:2c:96:55:37:d3:b5:33:
5d:73:5f:9e:62:7b:6a:77:34:3c:05:89:e7:64:42:
94:90:1f:2b:c3:9d:07:44:6b:f6:27:04:b9:5f:da:
6b:9d:0f:3d:ae:1f:d3:cc:04:07:c9:16:e3:16:da:
ce:52:dd:17:d0:44:5c:6a:7e:a3:44:60:27:81:56:
3b:ed:9e:a6:91:ae:3d:93:6c:42:f4:e9:8c:ce:17:
02:9d:24:b2:1d:ad:7f:4e:9d:d2:95:39:af:60:94:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:BB:09:E2:D3:AE:C3:00:A7:58:C5:96:F0:A9:AF:69:0D:84:CC
X509v3 Authority Key Identifier:
keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:d3:ba:c5:76:ec:19:f7:77:a4:91:3f:32:50:ab:e2:39:
d1:0c:2f:53:90:54:35:95:d2:7b:49:d8:ed:c8:fe:01:c7:68:
ef:64:89:dc:60:f5:28:c5:ed:b0:c2:09:d0:f8:ce:4b:50:e0:
fc:7b:05:c3:2d:3e:ec:53:ec:b7:99:7e:2c:61:60:6c:39:5b:
68:82:55:b7:7b:09:9f:bf:7d:93:27:f8:23:63:78:db:b3:ec:
29:69:b9:cb:9b:74:89:62:14:5b:12:40:64:50:0d:f1:68:3f:
a8:89:a6:60:d9:21:cf:c6:17:80:0b:7e:e7:ea:be:d0:ab:22:
96:fa:bd:fd:33:0a:a2:5a:eb:6a:bf:d1:a6:aa:ef:ee:33:5c:
82:25:cb:46:3d:e9:6d:4b:7e:05:8a:69:78:f6:13:67:01:1e:
86:a1:a0:cb:64:6a:c5:93:f7:90:7d:98:52:fe:88:67:2f:03:
08:05:79:76:6a:5f:be:4a:c2:3a:61:ee:91:6b:8d:2e:d2:21:
eb:10:92:b2:f8:6d:28:86:bb:77:ce:8d:ad:da:cd:cc:ec:e4:
a4:7c:a7:83:57:4e:22:ab:c1:34:86:3b:97:e4:2c:37:09:cf:
c5:6a:e6:9c:21:8c:d6:0a:c1:53:ca:a5:94:b8:ee:a7:50:84:
ce:eb:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:59 2026 by rpki-client