
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: 5DTyHBgJdHm3fW6KHmKBL8927rE8nTzitjqpJ1paI00=
Subject key identifier: D5:CB:02:19:10:98:E3:F2:C0:F5:61:00:2F:D3:3C:2F:68:D4:27:8B
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1C74
Signing time: Tue 24 Mar 2026 16:07:35 +0000
Manifest this update: Tue 24 Mar 2026 16:07:34 +0000
Manifest next update: Tue 31 Mar 2026 16:07:34 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: m/Sly9oXiTe33ebEUkOXaVgH6u+56X4i+4kAR+JwIPQ=)
2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
3: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
5: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7332 (0x1ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Mar 24 16:07:34 2026 GMT
Not After : Mar 31 16:07:34 2026 GMT
Subject: CN=69c2b6c7-9ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:e9:a9:2c:c1:70:ab:0c:de:aa:e1:6e:f9:
90:fd:02:35:76:da:22:a9:0d:29:d4:b8:04:4f:f2:
b8:92:9a:fd:78:3f:bd:f0:b1:b2:b4:f2:00:b1:ca:
6b:70:86:96:8c:4e:6a:16:7f:b6:1b:de:6b:ea:9c:
7a:f1:6c:73:ed:2e:f4:65:ad:3c:e0:aa:69:73:3e:
a1:46:b3:c0:d7:26:3c:d3:e6:95:13:32:6f:12:9c:
18:d4:94:72:54:08:3d:c4:d6:f4:28:11:a9:bb:67:
d0:58:d4:40:0c:d2:72:7c:38:7b:7b:1b:f0:fa:28:
1d:41:e8:44:01:30:a5:0d:1f:24:9c:82:a2:6f:d2:
3c:d1:45:3c:f1:fc:ba:05:ac:91:e9:15:bf:ba:dd:
f0:1e:55:73:b7:6f:1d:9b:93:84:e6:14:0f:9d:13:
aa:8e:b3:c2:46:0c:33:d5:43:19:ce:d1:5e:65:96:
0e:47:25:ec:81:6b:62:d6:a9:e9:b2:02:49:3b:03:
82:d7:d3:ac:c8:70:23:6d:37:c4:07:3a:a3:77:f1:
74:fc:14:33:dd:4e:56:c8:6a:06:f0:96:cc:bf:34:
e6:43:2c:96:c1:2c:a8:c8:e2:c3:1a:a3:7d:ea:b1:
e6:cd:0e:3e:f5:5d:b8:be:f3:96:ff:4c:99:bd:da:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:02:19:10:98:E3:F2:C0:F5:61:00:2F:D3:3C:2F:68:D4:27:8B
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:56:df:2c:73:89:59:59:2e:cc:4f:76:b3:47:3e:0f:fb:d3:
5b:1c:42:8e:c2:35:9f:89:3c:e7:c5:80:fc:7a:20:61:a4:c6:
0d:6a:6c:ee:e9:b8:b6:26:c8:e9:a5:db:87:a6:d3:a3:4c:3f:
56:d0:c2:3f:76:fb:b0:cd:02:ec:74:aa:53:a9:ca:0c:a2:c3:
a3:0f:b9:77:9b:a4:b3:f2:c3:c9:22:a5:51:d4:a7:6a:34:73:
b8:ce:4e:c3:a6:12:75:8b:fe:86:4e:24:46:ed:25:ac:b2:38:
f2:26:41:8a:b8:71:a3:f2:57:54:84:62:8d:25:96:4c:57:65:
35:b0:b6:21:0d:70:48:e0:1e:11:52:3c:db:3a:53:f8:ba:9c:
6b:f3:5a:62:6f:6b:da:9a:ba:4b:17:6f:f6:76:91:f1:77:b0:
e5:9e:f2:43:6a:c7:b4:16:75:5c:6a:40:8d:9b:e3:c3:9f:f1:
9a:0d:70:d5:91:86:34:3b:d9:3b:44:47:f0:ab:43:f3:13:86:
be:13:ee:ab:2a:d4:57:30:b6:c8:e3:89:bd:ab:52:4e:ec:90:
5b:83:67:f4:20:2d:62:9c:f5:55:90:67:59:16:7f:93:f4:1d:
c3:4e:9c:cf:96:8f:30:16:5b:5b:49:91:00:f2:2a:d2:4b:ab:
98:94:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:39 2026 by rpki-client