
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json)
Hash identifier: l/NMrkYF40lflO1UOpzFC3syItd6/fFVDCImxb0B0R8=
Subject key identifier: F9:E7:3A:D4:F3:C5:D3:F3:25:C7:F0:B0:B8:A7:C2:B7:0E:40:4B:BB
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
Manifest number: 06CB
Signing time: Wed 22 Jul 2026 22:59:26 +0000
Manifest this update: Wed 22 Jul 2026 22:59:25 +0000
Manifest next update: Wed 29 Jul 2026 22:59:25 +0000
Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: KeBg8cjZilCz7i0T+8ciKZAt1NNXy8nRBhJOjXIu0HQ=)
2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Validity
Not Before: Jul 22 22:59:25 2026 GMT
Not After : Jul 29 22:59:25 2026 GMT
Subject: CN=6a614b4d-b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:3e:d3:e1:78:0a:ac:61:ad:aa:4d:47:31:
4e:44:e6:b3:0c:1e:44:88:aa:cb:8e:7e:0b:64:01:
c6:e1:4e:7e:88:4c:c6:cd:57:66:60:bd:73:7e:c1:
50:25:77:ce:52:aa:65:63:f6:b6:6b:9c:70:0a:dd:
64:c4:c7:25:23:9c:d0:8e:6e:53:88:54:d2:91:56:
8f:b6:cd:1a:39:5c:3e:39:9d:d8:65:9f:b8:bd:1c:
7a:ad:d2:79:dc:a2:5c:05:f1:dc:7f:49:ae:45:98:
86:42:3e:6f:d1:88:2e:10:04:a5:10:52:b4:d8:9e:
62:60:1a:4a:d5:42:06:46:d0:c1:20:d4:7c:24:36:
8b:78:b3:93:11:d4:d8:b0:dd:f8:ec:95:e4:b9:91:
53:74:73:b1:34:90:d2:69:14:3a:3f:04:33:29:f2:
a5:00:bd:24:4f:ff:7d:57:ab:c8:01:33:2b:a7:70:
8a:b5:b4:af:be:32:77:f5:e6:75:e9:43:0e:91:65:
14:3e:ea:7c:71:54:c6:47:e9:58:c1:86:8a:aa:c8:
b6:ea:e8:3a:0a:a2:46:74:a1:ba:58:55:6b:7d:a4:
7f:ce:13:f5:38:95:cb:9f:77:98:c5:e8:7c:f2:58:
d2:60:ca:80:9e:d7:ed:6d:cf:54:35:af:29:90:37:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:3A:D4:F3:C5:D3:F3:25:C7:F0:B0:B8:A7:C2:B7:0E:40:4B:BB
X509v3 Authority Key Identifier:
keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:33:f4:91:44:37:06:cf:80:e3:46:51:b1:21:54:e1:41:93:
72:69:3b:f5:88:40:dd:a6:6c:f9:b8:2c:fc:80:06:a1:68:fa:
b6:bf:30:f1:aa:e0:ec:c6:67:46:40:53:0c:13:42:0b:aa:13:
98:ad:8c:f4:23:f6:3a:2c:e4:01:53:f0:43:0b:eb:16:8e:b7:
db:a7:64:ae:90:09:30:41:2d:c1:7c:0f:2d:45:21:6a:56:36:
c5:f0:4e:21:5d:d9:25:a3:7f:92:91:69:23:ff:60:97:03:6e:
5c:78:f0:0d:24:b3:b8:8d:98:7d:3d:d8:10:8f:c8:be:af:38:
a6:0c:29:e5:77:61:95:d3:77:51:a6:51:e8:26:f0:d9:80:b5:
2f:89:a1:dc:7b:3b:d2:38:c0:e4:3f:aa:76:0d:52:4c:82:23:
20:70:10:56:1a:b0:d3:08:4b:ae:94:40:f6:41:44:71:53:2a:
72:4f:e2:0a:07:a6:3d:6c:50:3d:98:3b:60:7a:cb:ff:d2:d4:
54:f9:61:1c:d6:a4:35:ad:c8:ce:b2:f7:b4:56:ef:4b:b5:fc:
58:4f:94:f0:8b:cd:03:8b:5f:b7:dd:b2:e0:f9:51:7f:4a:e7:
ea:60:7a:31:bf:3b:3f:76:d6:3c:99:36:a5:43:83:be:04:9f:
43:b7:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:03 2026 by rpki-client