
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier: y9I+XmtPWelnz9zF5ZRar4OC6T7UpeYSGekrRBWoYc4=
Subject key identifier: E0:D8:C5:04:95:1B:48:9A:C5:37:4C:82:6E:07:84:D2:5F:79:CE:26
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number: 0358
Signing time: Thu 23 Jul 2026 01:51:01 +0000
Manifest this update: Thu 23 Jul 2026 01:51:01 +0000
Manifest next update: Thu 30 Jul 2026 01:51:01 +0000
Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: BYCj2G+0ME2t8e7PNciZb3B+mU8BOl0qihq3HGdcyM8=)
2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Validity
Not Before: Jul 23 01:51:01 2026 GMT
Not After : Jul 30 01:51:01 2026 GMT
Subject: CN=6a617385-a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:e4:d1:90:07:16:1b:ab:9f:06:80:8f:05:
cc:0d:07:94:ab:7a:cd:da:a0:94:d8:44:12:0e:7a:
65:b2:62:2e:50:29:90:5a:f2:e1:34:6f:3a:3d:cf:
a4:3d:35:df:1b:a9:0b:e6:1b:2e:e2:48:c2:b8:c5:
3c:e0:5d:da:55:e1:ee:41:21:23:5c:94:33:71:12:
8a:b4:43:6a:e5:47:f8:b4:fe:db:56:ed:ad:76:12:
3b:6e:01:12:97:2b:54:45:23:17:45:15:ee:3b:97:
06:a4:4c:73:14:0a:64:41:18:74:10:d5:55:01:66:
44:36:4d:39:3a:83:e1:b7:21:a3:4b:c1:b3:ab:b6:
ba:f9:36:cd:1d:ec:5d:b9:cc:2a:2c:fa:92:c4:d6:
d3:d5:99:2a:af:e4:d9:dc:97:0b:8c:4a:1d:6e:ce:
50:a9:c4:98:27:1e:ac:fc:fd:0c:5b:83:9b:98:b4:
a4:5a:f2:34:e4:c8:5c:ec:af:10:eb:82:d4:c3:8e:
6f:7d:45:3c:01:f4:e3:24:7b:49:19:fe:26:e0:17:
d2:62:4b:25:8a:18:ef:cb:9b:be:cf:c2:63:4b:fc:
67:4f:7c:1a:62:12:45:33:21:78:6c:ca:5b:e6:78:
50:89:c8:46:55:a4:83:e3:0f:41:6e:00:69:96:e0:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:C5:04:95:1B:48:9A:C5:37:4C:82:6E:07:84:D2:5F:79:CE:26
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5f:e7:c9:b1:6c:08:24:c6:6c:cf:d1:88:6a:5a:b6:27:a5:
84:8e:07:79:fa:e1:7c:7e:a5:e2:1a:dc:f3:00:37:5f:b3:72:
fb:14:b4:ca:d8:4a:3f:9f:e7:3b:2d:9d:36:9f:5e:f7:d4:50:
43:ad:15:5d:fa:fa:52:35:e3:f1:28:78:a8:96:d5:47:12:9f:
52:b0:69:79:21:ce:4f:c7:44:5d:bf:a4:82:8b:ff:ec:2b:fe:
aa:78:50:72:32:b3:4e:fb:a5:41:2b:31:0a:a8:69:f4:68:19:
38:a3:b3:50:40:c6:26:0f:fe:82:01:e8:f3:af:4b:97:41:e6:
ff:98:5c:b6:73:ba:eb:a6:92:03:e6:01:6a:e2:0b:3d:5f:c1:
1a:66:a3:f0:ae:8b:95:f9:bf:30:b9:3f:e4:b5:d1:30:d5:1b:
43:f3:e0:d4:39:f1:0e:66:80:bb:77:ae:2c:a2:6e:00:11:b8:
55:c1:7b:47:9a:98:6f:a4:c3:ea:20:d6:6e:79:2f:7d:be:bf:
14:20:b2:40:f9:12:40:bf:6e:d5:62:e4:cb:5e:4a:03:22:8c:
20:93:cf:9c:4c:02:c6:6e:f5:17:23:49:41:84:c6:72:28:be:
de:ca:91:f0:88:ef:1f:e6:2b:5c:69:a9:9c:36:2a:34:b5:bf:
91:fb:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:02 2026 by rpki-client