
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json)
Hash identifier: 0sb1algRq5QlyGs5wIuFIfrlbGYts3B5Bujo1bbPhvQ=
Subject key identifier: 55:70:2C:2B:D0:BE:C6:64:0D:35:DB:A8:76:F8:78:6B:1C:D3:EA:EF
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial: 0C48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
Manifest number: 0C43
Signing time: Tue 24 Mar 2026 18:34:01 +0000
Manifest this update: Tue 24 Mar 2026 18:34:00 +0000
Manifest next update: Tue 31 Mar 2026 18:34:00 +0000
Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: KdxxBEeB77eD535ADbQoy/NOIdIvhk9/vKjH46MyWKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Validity
Not Before: Mar 24 18:34:00 2026 GMT
Not After : Mar 31 18:34:00 2026 GMT
Subject: CN=69c2d919-b1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:8c:70:2c:9e:2a:d8:6f:b5:0e:6e:76:4e:
3a:e0:d1:25:61:cf:b8:b4:c6:0e:53:4d:a2:5e:f9:
8a:25:b5:41:47:08:9b:98:e9:09:a4:a0:67:1e:b4:
30:22:63:5c:a3:13:ac:6d:1b:23:d1:9f:66:ce:54:
00:01:7c:61:2a:0e:7d:a3:f4:f5:4d:49:0d:d2:06:
5d:ef:96:5d:eb:07:b3:f1:35:3a:42:44:07:15:6d:
ab:71:c4:f5:a4:e4:7d:b1:7a:5b:4e:22:b7:67:99:
95:cb:76:a7:86:47:64:b3:64:60:e6:e9:5d:3e:fd:
38:2a:06:a0:c7:e1:eb:75:2d:4a:b1:1d:e9:de:52:
6d:37:55:97:2d:3e:63:90:85:07:e1:2d:de:48:e4:
43:a4:75:21:d0:ac:e1:ad:3b:bf:5b:6f:95:f8:67:
91:ed:83:05:36:99:45:66:4d:81:29:73:d2:de:d6:
d6:fb:4b:bf:aa:f8:c5:95:10:4b:bf:1f:3b:15:07:
a8:44:5c:74:f8:29:8b:9f:3d:76:70:49:0a:ab:03:
82:84:b2:f5:8b:46:de:1d:0e:41:25:2d:a5:b2:8a:
4e:9f:25:a1:64:5e:41:e7:83:9a:f1:16:71:ba:6c:
06:8e:18:44:ec:50:8e:f1:fc:9e:6a:0c:88:49:4c:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:70:2C:2B:D0:BE:C6:64:0D:35:DB:A8:76:F8:78:6B:1C:D3:EA:EF
X509v3 Authority Key Identifier:
keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:b6:09:cb:84:38:54:90:aa:c8:87:6e:95:af:0b:3e:ec:
5c:8c:1b:f8:a2:c2:c9:f8:01:07:75:98:99:0a:f8:ec:62:a4:
cf:16:fc:62:8d:43:fe:47:69:64:93:88:bf:27:0e:32:b7:cc:
8b:95:c5:c4:98:88:86:3e:39:5b:67:69:09:6d:b9:5f:21:5c:
2c:0a:c6:ad:9d:d4:21:0b:f8:b6:85:ad:7b:f1:38:49:c7:14:
43:e7:53:ed:1e:70:83:f4:12:20:4a:2a:88:91:0f:c9:27:28:
3b:3f:50:b0:a6:52:d3:d1:10:58:97:5c:85:53:68:b0:c6:f5:
ad:e4:66:dc:86:b1:da:01:9e:47:48:dd:7e:ea:64:3f:02:ac:
38:5b:19:09:aa:ee:b4:c8:93:f2:df:f0:24:d5:60:94:7b:cd:
63:8c:b8:26:18:50:e6:93:4f:1b:a8:e5:f1:f1:eb:7e:c5:ae:
b8:0b:bf:5d:08:05:0d:2c:8e:7a:33:56:7a:55:bd:de:e5:40:
4b:1e:ac:fb:72:8e:ad:6d:3a:cf:d4:ba:8d:83:93:a9:2f:1a:
4b:20:29:2a:cb:72:71:3f:9b:bb:f8:f7:30:80:51:5e:43:17:
6f:f3:07:df:39:a8:6d:1a:c1:a2:97:65:1e:64:a0:38:20:1c:
7d:7a:e6:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC
QTY5RTQ0M0QwHhcNMjYwMzI0MTgzNDAwWhcNMjYwMzMxMTgzNDAwWjAYMRYwFAYD
VQQDEw02OWMyZDkxOS1iMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArM2McCyeKthvtQ5udk464NElYc+4tMYOU02iXvmKJbVBRwibmOkJpKBnHrQw
ImNcoxOsbRsj0Z9mzlQAAXxhKg59o/T1TUkN0gZd75Zd6wez8TU6QkQHFW2rccT1
pOR9sXpbTiK3Z5mVy3anhkdks2Rg5uldPv04Kgagx+HrdS1KsR3p3lJtN1WXLT5j
kIUH4S3eSORDpHUh0KzhrTu/W2+V+GeR7YMFNplFZk2BKXPS3tbW+0u/qvjFlRBL
vx87FQeoRFx0+CmLnz12cEkKqwOChLL1i0beHQ5BJS2lsopOnyWhZF5B54Oa8RZx
umwGjhhE7FCO8fyeagyISUw0oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVwLCvQ
vsZkDTXbqHb4eGsc0+rvMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0
ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W
N1k2ZmVmRnd4OC02YWVSRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPKS2CcuEOFSQqsiHbpWvCz7sXIwb+KLCyfgBB3WYmQr47GKkzxb8Yo1D/kdp
ZJOIvycOMrfMi5XFxJiIhj45W2dpCW25XyFcLArGrZ3UIQv4toWte/E4SccUQ+dT
7R5wg/QSIEoqiJEPyScoOz9QsKZS09EQWJdchVNosMb1reRm3Iax2gGeR0jdfupk
PwKsOFsZCarutMiT8t/wJNVglHvNY4y4JhhQ5pNPG6jl8fHrfsWuuAu/XQgFDSyO
ejNWelW93uVASx6s+3KOrW06z9S6jYOTqS8aSyApKstycT+bu/j3MIBRXkMXb/MH
3zmobRrBopdlHmSgOCAcfXrmJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:38 2026 by rpki-client