
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier: IKBntBVIKzm+ElEtN0lNJPY5f42AKGvVecxT1iawly0=
Subject key identifier: 77:93:E4:5E:31:BD:3E:E1:1B:FE:AB:37:26:42:65:C5:B6:45:53:B2
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number: 1CB3
Signing time: Wed 22 Jul 2026 16:16:32 +0000
Manifest this update: Wed 22 Jul 2026 16:16:32 +0000
Manifest next update: Wed 29 Jul 2026 16:16:32 +0000
Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: qI7l1AgJCDEANYOucKKJtVOH5Lo+BqJnJ2kp8YWKzl8=)
2: A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (hash: j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=)
3: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: xteJ79wHyuR0rixXXMGsUbkm0SbKtGms9qzJTlI8DjA=)
4: AF2687DE292511F198604A079E833773.roa (hash: tFLq8+CNxLhCxJRm+42b8Upze1btSlBQf6Y4qxRs7Xw=)
5: F84860820DB811F192A7BEDC343D8C67.roa (hash: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=)
6: AE916370292511F198604A079E833773.roa (hash: tgUzFdlOQSWXXogjU4/dQwzUeee/8JuUMUF1DhKD6aQ=)
7: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4=)
8: B0069018292511F198604A079E833773.roa (hash: kawalWq5XI6cfeCxsnT2HyX5rJIkbilhJhx9UIeYzQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7399 (0x1ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Jul 22 16:16:32 2026 GMT
Not After : Jul 29 16:16:32 2026 GMT
Subject: CN=6a60ece0-2e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:0e:33:11:88:1f:2a:74:9f:df:1d:d1:09:
9c:9e:0f:45:fc:e8:1c:0f:5c:c8:7a:7a:e3:77:b4:
7e:d5:b1:64:ba:5d:65:66:0f:45:cc:f1:9a:82:ad:
8f:4a:d4:51:46:60:5f:2a:58:03:6e:09:42:1e:97:
66:c7:16:3c:3f:df:47:f9:8b:59:fc:5f:d6:93:39:
13:91:eb:b1:63:b5:08:8e:02:e1:0d:78:3c:bd:dc:
e0:cf:5c:5e:b3:c8:77:54:02:c6:b6:35:d2:9a:29:
20:5a:58:d3:01:00:cc:77:43:9c:3d:9a:50:e6:bf:
92:a9:04:79:e8:e2:6a:d4:1f:26:9d:1c:e4:ae:73:
73:23:85:75:00:a4:28:46:d5:9a:f6:fb:85:2f:d2:
23:99:90:f6:07:40:a1:4a:b3:b3:72:86:aa:fd:9f:
02:e7:6a:35:f5:41:3f:20:fc:3e:b5:80:d6:88:69:
dd:14:ff:e0:48:6e:c1:a0:62:9a:f7:7a:0a:57:b6:
21:14:9e:24:20:cd:76:0f:5f:ed:b2:86:fd:2e:4f:
24:55:9c:75:60:e4:56:d8:df:3e:6f:c9:0d:88:af:
79:66:4a:cb:45:09:29:9f:74:e2:95:bd:64:b7:b5:
b7:9e:3c:8b:87:74:50:4d:d5:4a:74:54:4a:aa:b6:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:E4:5E:31:BD:3E:E1:1B:FE:AB:37:26:42:65:C5:B6:45:53:B2
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:76:cf:9f:99:e9:39:97:d8:4f:66:a9:ac:f5:a3:9b:60:
19:e3:f9:03:f2:71:0a:21:74:5a:54:dc:39:85:97:fa:18:cb:
99:a8:45:d9:0e:81:20:61:14:32:9c:38:e3:19:a5:f1:31:ab:
be:10:0f:17:47:6e:27:17:af:9b:c5:9e:f5:c3:c2:87:14:70:
9c:5a:65:d6:82:0c:f9:5b:a4:28:20:99:6a:5b:2f:e8:62:37:
51:e9:e8:36:4a:f4:6f:2b:73:20:1b:7c:93:db:1d:8a:ab:1b:
62:4c:29:df:fb:22:84:21:c7:80:fc:0c:e8:4a:ca:49:67:4d:
2b:2a:dc:a3:94:17:36:5e:f9:c5:8d:85:ee:8a:f2:b7:f3:e1:
c0:de:0e:6e:7e:f4:2f:02:28:5e:62:82:11:19:dc:32:ff:7c:
cc:09:37:a1:80:65:22:29:1f:7d:20:29:73:70:12:1e:35:c4:
26:a6:af:f2:5e:d2:b6:18:96:8d:85:6e:01:0e:16:b8:78:d6:
46:b6:ac:2f:5b:8a:0d:00:1b:42:46:55:6d:1a:ba:f9:36:27:
71:24:86:1a:61:2c:1d:b1:ab:8f:1e:0b:cd:cd:c3:3e:8c:de:
1d:fe:c2:78:79:74:c1:28:63:11:0d:45:aa:a9:2f:74:56:36:
90:8a:ec:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw
MDNFNEJCNzUwHhcNMjYwNzIyMTYxNjMyWhcNMjYwNzI5MTYxNjMyWjAYMRYwFAYD
VQQDEw02YTYwZWNlMC0yZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnAOMxGIHyp0n98d0Qmcng9F/OgcD1zIenrjd7R+1bFkul1lZg9FzPGagq2P
StRRRmBfKlgDbglCHpdmxxY8P99H+YtZ/F/WkzkTkeuxY7UIjgLhDXg8vdzgz1xe
s8h3VALGtjXSmikgWljTAQDMd0OcPZpQ5r+SqQR56OJq1B8mnRzkrnNzI4V1AKQo
RtWa9vuFL9IjmZD2B0ChSrOzcoaq/Z8C52o19UE/IPw+tYDWiGndFP/gSG7BoGKa
93oKV7YhFJ4kIM12D1/tsob9Lk8kVZx1YORW2N8+b8kNiK95ZkrLRQkpn3Tilb1k
t7W3njyLh3RQTdVKdFRKqrZvnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeT5F4x
vT7hG/6rNyZCZcW2RVOyMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE
NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj
UFFieVNSblBySDRBUGt1M1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX/92z5+Z6TmX2E9mqaz1o5tgGeP5A/JxCiF0WlTcOYWX+hjLmahF2Q6BIGEU
Mpw44xml8TGrvhAPF0duJxevm8We9cPChxRwnFpl1oIM+VukKCCZalsv6GI3Ueno
Nkr0bytzIBt8k9sdiqsbYkwp3/sihCHHgPwM6ErKSWdNKyrco5QXNl75xY2F7ory
t/PhwN4Obn70LwIoXmKCERncMv98zAk3oYBlIikffSApc3ASHjXEJqav8l7SthiW
jYVuAQ4WuHjWRrasL1uKDQAbQkZVbRq6+TYncSSGGmEsHbGrjx4Lzc3DPozeHf7C
eHl0wShjEQ1FqqkvdFY2kIrsZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:42 2026 by rpki-client