
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: LYdb5xyb82MVHhAAff+WVOM4nfLOOLb7iH4tfsTwAO0=
Subject key identifier: 59:44:FF:A3:E5:5B:8B:0E:CC:C2:E5:B6:DC:35:AB:AA:EF:03:85:50
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 01D2
Signing time: Thu 23 Jul 2026 05:03:23 +0000
Manifest this update: Thu 23 Jul 2026 05:03:23 +0000
Manifest next update: Thu 30 Jul 2026 05:03:23 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: TYhTethNLcoFl31WYAVcyP4zbF+CsvMZRP58wipmgSY=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Jul 23 05:03:23 2026 GMT
Not After : Jul 30 05:03:23 2026 GMT
Subject: CN=6a61a09b-6f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:c0:b3:1c:93:3b:39:8d:e6:8d:d2:c9:ab:
2e:a9:84:b9:f0:0f:89:9c:34:9d:7c:44:66:60:f7:
d1:65:42:28:af:09:59:48:9d:0b:71:2b:94:b2:cf:
76:2f:ce:84:ec:1b:02:ad:8c:a2:4a:12:90:ad:dc:
e9:c7:2c:d2:9d:dd:3f:95:20:ee:76:33:9c:a7:c3:
3a:1b:66:c5:be:9a:e3:a5:20:43:4d:94:30:9a:c8:
a1:77:9b:10:52:82:ae:92:30:81:3f:07:a2:1f:29:
20:3f:7e:4a:9d:b5:24:a8:53:25:38:a4:9f:ef:97:
89:c6:84:ac:e0:dd:0c:43:8a:87:db:a6:81:25:8c:
db:e2:47:6e:0d:be:9b:f2:6f:48:05:07:10:f6:95:
d3:85:d8:cf:d2:0b:e1:5f:c0:cc:58:c1:e8:2b:20:
95:d5:e8:fa:74:8c:5e:0d:1a:cf:b9:aa:13:5b:c7:
a2:05:7c:c2:b3:a6:c4:d9:5a:22:fc:1b:a7:44:44:
c6:f9:a8:25:f2:fb:a7:d7:d0:1d:1a:6c:ec:4c:b3:
bb:24:1a:b7:25:95:49:f6:9b:7a:c9:8c:f1:ff:93:
a7:86:8d:ea:a8:d0:dc:58:c8:e2:2a:7d:cd:05:53:
38:71:7a:ea:83:22:16:d3:b5:25:16:5a:ae:95:09:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:FF:A3:E5:5B:8B:0E:CC:C2:E5:B6:DC:35:AB:AA:EF:03:85:50
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:73:aa:f2:b3:82:6e:0c:13:4a:2e:04:c7:3c:b8:4a:f2:0e:
e8:1a:4e:35:f6:a9:f2:ae:4e:26:39:7b:b7:ee:02:c3:71:51:
a3:ca:bc:c6:fb:68:88:d7:27:40:75:8d:07:77:75:fb:9f:65:
b5:07:a8:9c:ef:30:27:ba:52:03:3e:8d:27:07:72:11:04:67:
53:34:7f:dd:7e:f1:ce:25:d7:b1:f1:9d:14:ef:eb:58:d1:a5:
f1:1f:d4:92:2e:0b:86:54:e6:62:d3:88:58:39:80:d3:d7:3b:
ce:aa:38:43:89:0d:07:d9:83:4a:f8:e9:80:18:bf:a6:b2:d6:
de:b1:ac:30:34:f7:02:6d:27:cd:01:74:c3:83:e1:48:a2:f2:
b0:f3:78:76:c3:6a:89:7d:b4:1f:c8:58:05:11:bc:6d:dd:7c:
ba:7a:fa:38:6a:42:f8:f1:3b:d3:7e:75:d3:9d:ff:54:70:74:
28:06:0a:52:8a:7d:92:71:14:4c:4a:eb:77:0c:c4:11:e7:f3:
aa:58:e2:6c:2e:9d:4d:77:f6:01:ee:8e:fd:80:d7:d6:45:43:
5a:0d:22:8f:78:da:03:99:a8:9e:9c:38:24:68:ad:4f:1c:86:
e4:18:0e:e7:33:e9:d7:b4:85:2d:98:bb:bf:34:f2:49:b6:cf:
58:df:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:22 2026 by rpki-client