
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: oIsvegmz3bOOU7AULthTwNtfwSjMn6W7pspeIAWHt0Q=
Subject key identifier: 71:96:02:36:A5:A7:87:94:60:82:2D:6B:90:28:A1:05:21:B7:82:96
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1C8E
Signing time: Tue 12 May 2026 16:12:27 +0000
Manifest this update: Tue 12 May 2026 16:12:26 +0000
Manifest next update: Tue 19 May 2026 16:12:26 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: gVXTxs3BTAbFv2cqTx3054iFnJGLhgEvNo+B1dCSIs4=)
2: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
3: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
4: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
5: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
6: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
7: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
8: B0069018292511F198604A079E833773.roa (hash: IbOqEF2ekXRQhCHLmGbRBnk7WRVXEKD40vwBE300k9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7361 (0x1cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: May 12 16:12:26 2026 GMT
Not After : May 19 16:12:26 2026 GMT
Subject: CN=6a03516b-aa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:59:45:74:31:eb:d2:27:74:14:24:6d:d0:
79:47:c4:ba:f8:04:42:f2:81:96:ce:84:3a:e5:9a:
3d:9e:45:a5:43:d6:e4:2a:13:70:c2:f1:d7:d4:ed:
a1:b6:c9:8c:1f:36:86:4d:10:e7:ac:a4:ea:65:f5:
29:a1:16:0d:55:59:43:0a:a5:65:0c:32:89:82:2c:
a4:ae:eb:f6:ed:2c:43:bd:22:99:c6:cb:a6:64:cd:
d7:c4:7e:74:8a:9e:17:67:91:d8:45:b8:4b:71:78:
96:58:62:ea:de:16:8e:66:34:8a:d6:37:37:34:62:
68:5f:aa:eb:a0:f4:d6:9a:0a:41:bf:24:b5:cc:13:
0b:4f:34:74:cb:09:fb:34:77:d6:c7:97:c1:23:e5:
79:43:dd:6f:ff:3a:d2:1b:c7:27:a7:c9:48:11:93:
3a:87:4a:90:87:ca:ea:db:84:60:d9:7d:31:bd:76:
69:1c:6f:d7:1c:6d:48:39:d2:8d:a9:9f:69:50:be:
97:14:8c:91:26:11:76:b4:bd:0e:dd:b7:00:1c:db:
91:a1:51:00:88:9a:d3:1a:d6:e4:11:cf:e9:3c:36:
7c:6e:6f:93:5e:d6:e2:af:35:40:4f:46:ac:35:b3:
d1:7c:7c:8d:d4:64:52:56:71:c8:0e:0c:d3:a7:04:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:02:36:A5:A7:87:94:60:82:2D:6B:90:28:A1:05:21:B7:82:96
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:eb:88:3f:fb:13:f4:e0:7d:c4:f4:b6:cd:22:d4:6f:57:66:
b0:a7:26:77:76:90:a7:6d:4f:94:64:e6:4b:62:88:94:53:cc:
2b:e8:ea:d1:99:49:cd:9b:d8:72:22:16:89:fc:61:39:8a:19:
ef:dc:97:68:fd:49:f1:59:c6:ec:5e:ae:0d:37:8d:4b:b7:e5:
62:47:66:a8:34:39:6b:6e:67:f0:59:53:56:08:71:6e:a5:00:
a5:86:bc:92:19:05:a4:a3:a5:bc:6f:3c:84:45:3f:03:35:78:
2f:19:5e:48:9a:16:46:ac:7b:5d:33:36:87:29:fb:ca:de:b8:
c5:64:bf:2e:1c:ad:ed:83:3f:ec:87:b8:24:73:6a:51:a0:2e:
ad:e6:f7:fc:a8:b0:c8:56:1a:99:7a:c6:76:af:09:8b:f5:47:
ac:70:ec:59:d2:05:39:44:97:1d:db:9d:42:f2:78:f4:df:41:
31:d6:0b:aa:2c:85:9d:c8:95:ac:62:ac:77:de:f3:ae:3c:e4:
bf:69:f0:c4:55:1b:ff:46:53:42:fe:6d:f2:d1:28:cf:75:ae:
28:d3:62:46:aa:23:c0:f5:87:ec:da:93:ae:ce:e1:22:a6:d0:
c8:3e:d0:79:d4:d3:19:f8:e2:f2:14:50:b8:01:ca:73:02:05:
21:34:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:42 2026 by rpki-client