
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier: UCm4ZROCq/dnXUA9E8VqwQEeQ9h0+ZomKxzJtx5kCLk=
Subject key identifier: B9:B7:EA:D8:D5:D9:3A:E1:2B:DD:E5:97:C3:A1:DE:D2:54:9F:F4:97
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial: 0728
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number: 0718
Signing time: Wed 22 Jul 2026 22:43:47 +0000
Manifest this update: Wed 22 Jul 2026 22:43:46 +0000
Manifest next update: Wed 29 Jul 2026 22:43:46 +0000
Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: HGEsVezxooW+UO0tGk7s1+NaWZobE6UTg0r57hqDdcQ=)
2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
Validity
Not Before: Jul 22 22:43:46 2026 GMT
Not After : Jul 29 22:43:46 2026 GMT
Subject: CN=6a6147a3-1d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:9a:8c:38:b6:9c:2d:55:0d:83:33:03:e8:
c7:9e:25:ce:da:1a:2e:e9:61:58:a7:88:52:1d:72:
51:44:08:99:d0:75:5c:23:da:10:a4:00:0e:77:d1:
bf:f0:61:dd:a2:bf:d1:06:b9:52:16:be:c6:ca:08:
32:4d:3a:0c:97:08:de:72:60:10:2f:b8:a2:3c:d5:
de:e4:66:d3:65:cc:48:b5:08:80:82:48:f8:de:cb:
b4:6e:bf:63:9a:5e:52:82:5a:b7:c0:75:04:62:e5:
5e:82:ab:82:93:01:49:44:42:cd:65:6c:25:ac:81:
7b:14:2d:58:4b:fd:a2:64:3b:0a:e6:40:a1:8d:fd:
e3:5e:23:3a:e6:db:e3:0e:a1:5b:ab:92:c4:8f:68:
38:c7:86:46:ba:f7:e2:2f:8a:2f:4c:c8:3e:37:cc:
f7:e9:3a:bb:72:a3:a8:0e:1f:43:02:73:4c:fe:43:
b2:06:2a:46:42:0b:55:be:e2:3e:fd:ef:a3:04:1c:
eb:2b:95:2d:05:e9:be:8f:6f:30:96:a0:79:e3:b3:
bb:af:77:8c:82:81:09:39:fd:c5:30:0c:5c:8e:60:
6a:e2:f7:20:01:25:50:fb:f8:97:d1:af:a4:9b:6f:
72:de:06:37:d4:4d:19:44:cb:03:c8:d2:bb:0f:b5:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:EA:D8:D5:D9:3A:E1:2B:DD:E5:97:C3:A1:DE:D2:54:9F:F4:97
X509v3 Authority Key Identifier:
keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:52:c7:b9:b7:05:4b:35:e6:14:cc:45:f2:9a:0a:97:98:
ec:2a:bc:bd:4f:e1:45:c1:95:92:0f:10:66:98:15:2a:bf:ae:
84:3a:7f:58:77:2e:99:30:b2:75:b3:14:3b:cf:28:3b:ce:08:
f0:64:a0:bf:8f:78:4a:12:ea:c1:85:0b:ab:f7:9e:07:18:26:
40:b9:56:c2:21:01:0b:09:ad:56:d1:50:bb:7b:ba:a1:5f:dd:
07:3c:56:5b:c3:a5:7f:20:ea:a5:bf:97:31:9b:2b:29:10:ae:
23:6e:f2:b3:73:34:66:b2:e7:0e:5b:cc:e2:62:0f:03:c3:45:
bb:68:68:63:6a:68:ad:d5:a7:89:62:89:ee:63:cb:4d:81:26:
1c:88:41:86:94:55:4d:b4:8a:b8:49:b0:6b:df:5e:ac:65:9c:
42:d3:89:4c:df:b1:99:f8:e8:71:f1:84:ac:01:46:3e:d9:24:
1b:11:61:14:63:62:fd:8f:69:84:fb:32:8c:b5:d0:23:f2:22:
33:2a:fe:56:84:3d:3a:72:fc:67:1c:42:33:aa:e1:55:bf:24:
05:d7:19:7c:b8:36:54:76:61:56:b5:22:88:80:63:5f:27:69:
29:4f:a4:a9:f1:2f:8c:4c:fd:e3:bc:ff:fe:23:f4:03:cf:5a:
d1:53:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:36 2026 by rpki-client