
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier: ipK8g12H3ca1B6A00ekJJ3RZxprxez5dXRy3qbK3w7k=
Subject key identifier: 2D:07:AA:E6:1E:5A:10:07:71:EB:D3:4E:58:CF:2F:BA:FE:D2:E5:1A
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial: 0933
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number: 092C
Signing time: Wed 22 Jul 2026 20:40:18 +0000
Manifest this update: Wed 22 Jul 2026 20:40:17 +0000
Manifest next update: Wed 29 Jul 2026 20:40:17 +0000
Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: MrPw3xgcu82nA+OZ06pbYpPrqcowvkLqwqLt+x4exWk=)
2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: Z2QNPzHw5Ee7FsMiXK3KEIBE/uAyk1VrZxpoDjQMDc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Validity
Not Before: Jul 22 20:40:17 2026 GMT
Not After : Jul 29 20:40:17 2026 GMT
Subject: CN=6a612ab2-530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:76:3e:54:33:2e:7f:de:8b:15:1f:72:b1:
03:16:6e:65:ef:31:96:bf:af:78:5d:8e:76:73:38:
12:3a:d5:fe:aa:99:bc:ba:f1:9c:aa:2d:4a:e8:80:
24:cc:94:66:34:d6:56:2d:29:c3:6d:c5:d0:5e:b1:
7e:1c:3b:56:c1:3e:e9:e7:a3:5c:58:ba:db:bd:79:
da:95:6b:03:cd:e4:a4:fd:90:f7:76:0c:2e:2e:4d:
69:8a:58:43:2a:1e:50:5d:ff:7e:63:c8:e6:5c:be:
11:b3:05:0f:1a:cb:05:e1:42:51:bf:e4:a5:45:40:
bd:30:2a:3f:ac:ba:2e:3d:71:de:29:a2:93:9b:9b:
a3:e0:b6:40:d6:76:3a:c0:b4:52:d0:0e:3f:05:8a:
44:4b:f5:21:d5:36:02:54:16:f9:7b:bd:d9:53:2d:
e5:a1:ab:33:eb:a1:d3:d4:4b:48:68:ef:40:29:0c:
99:8b:50:4f:df:b5:fb:ce:c4:32:09:9d:b4:b6:02:
d7:32:1d:47:dc:4a:fb:6f:b2:cb:91:8f:2e:a4:9b:
20:19:8f:ee:b1:37:ee:52:e5:2a:e4:63:5e:1b:70:
25:84:c8:03:fb:bd:97:76:43:2d:77:f1:d4:4e:e2:
13:9a:fc:66:69:59:6b:45:5c:be:bc:e0:c4:13:6f:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:AA:E6:1E:5A:10:07:71:EB:D3:4E:58:CF:2F:BA:FE:D2:E5:1A
X509v3 Authority Key Identifier:
keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:6a:25:f8:e8:0c:b1:47:98:85:f5:b6:5b:69:0f:71:a5:
02:b4:00:30:65:48:68:0c:08:0f:d3:bf:42:10:b0:51:fd:7e:
fd:01:a0:1e:3b:ea:96:1f:ba:33:71:e9:14:f9:c4:35:06:c6:
c0:8d:60:14:3d:03:de:d9:5d:af:df:d6:7c:85:cd:05:32:f0:
a1:8a:fa:a1:5e:fd:03:3b:d8:e3:ec:eb:7a:1e:5d:a3:58:6d:
3b:42:65:62:f4:90:10:53:e5:5c:9b:2c:4c:bf:65:99:2f:bf:
3b:1c:c0:1b:db:d0:5a:64:32:cc:54:0c:d2:8b:ac:6c:25:b3:
a4:9e:10:6a:e7:ce:13:42:15:74:5b:61:28:ac:d1:7b:3d:ff:
a9:93:0b:d9:cc:08:84:3d:f2:d2:a9:04:4c:49:d3:82:8b:2a:
80:90:13:a2:38:c1:b4:b8:b5:91:32:e7:0a:af:2c:98:6b:44:
a5:05:5f:4d:8c:f8:69:35:21:ff:a7:73:4b:75:33:e7:0f:bb:
7b:0a:4b:a0:b9:f8:23:3a:ca:1b:f4:58:41:91:c8:9a:25:f4:
88:ee:52:fa:54:1c:89:4e:c1:09:6d:87:e2:f4:39:a7:8e:6e:
f4:ec:9f:44:24:99:15:2a:b1:b4:5c:40:72:12:72:fc:86:f8:
d6:fc:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:45 2026 by rpki-client