
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier: cVwX4DrT+HhxdLmv8+2VOqnwRYnX9ixs5hP6rLFphTo=
Subject key identifier: C0:27:D2:BC:BC:6B:A0:01:4C:08:B7:99:A1:39:12:03:B2:93:56:03
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number: 6166
Signing time: Tue 12 May 2026 14:15:22 +0000
Manifest this update: Tue 12 May 2026 14:15:21 +0000
Manifest next update: Tue 19 May 2026 14:15:21 +0000
Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: iO2KyvXWwIVsa+tQwb5RiYRZyV0GpT4M7kE34AmEGrE=)
2: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=)
3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=)
4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: May 12 14:15:21 2026 GMT
Not After : May 19 14:15:21 2026 GMT
Subject: CN=6a0335f9-bb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:df:94:47:2c:f4:16:f1:de:9c:58:4c:22:
42:6d:15:54:a9:c7:04:47:97:35:ba:ea:24:d6:3d:
d0:a4:ed:0c:6e:35:57:c3:e6:b8:de:db:75:60:23:
5c:6c:a3:77:35:67:3e:15:76:de:e3:e7:b8:c6:87:
25:d1:4f:b0:04:11:8a:f1:44:bc:a7:12:50:84:0d:
3a:75:af:6b:da:a7:65:6f:1f:a7:50:2c:48:50:ee:
90:e3:33:64:83:35:e3:e6:84:bb:fc:62:36:11:77:
4b:65:ad:21:2b:e8:90:3e:32:05:e5:38:dd:be:63:
03:32:f1:50:18:d9:e2:49:39:da:d7:f4:2e:96:e7:
41:97:fb:9d:6c:d5:e8:4b:fb:cd:a8:8a:7c:6f:28:
f1:fd:b4:f1:fe:b1:2d:5f:d2:32:b7:01:b6:af:2e:
c9:9b:50:b3:09:4a:e3:f8:b0:7a:a5:59:30:4e:5b:
de:af:b8:75:b5:c0:64:19:de:ef:24:20:b2:6c:34:
66:b4:d9:a7:b0:bd:ee:d3:c4:0c:c5:76:e0:92:e4:
0b:bd:a0:4a:c7:0c:bf:cc:d5:34:70:c6:88:72:85:
70:d5:b8:21:24:52:fe:ca:6f:1f:39:36:3c:dc:ea:
cd:62:e3:e2:a3:98:1e:35:1e:df:86:a0:ec:37:92:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:D2:BC:BC:6B:A0:01:4C:08:B7:99:A1:39:12:03:B2:93:56:03
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ad:2b:5c:2a:ec:17:72:5a:a7:c2:4c:da:d5:bb:df:5a:0c:
3d:8a:3d:7f:1c:91:33:28:ac:7f:1c:e5:84:b3:3c:90:4e:86:
5c:34:d3:e3:0e:10:b5:c2:de:34:f7:f7:b8:34:0d:ca:a4:0c:
70:eb:ea:51:3b:b0:f3:3a:72:51:f3:78:ad:6f:44:df:e5:72:
8d:65:a6:f2:f6:c2:3c:fd:31:06:0c:9f:0a:5e:33:45:f1:5d:
76:55:42:22:fb:08:b2:04:69:6c:60:27:5d:c0:9a:7c:f6:33:
c1:78:61:ce:c7:f5:ea:10:38:70:13:18:24:29:06:4a:d6:ad:
85:0c:d3:94:04:6a:db:3b:07:18:31:0a:57:a7:25:a7:95:ce:
58:a2:be:1d:81:ff:fb:a3:d2:4c:a8:3b:5d:24:d4:49:2e:b4:
74:fe:63:23:05:f2:c5:e9:34:5a:f6:2e:2c:3f:a8:2d:a6:f6:
5c:44:5e:66:54:51:7a:60:b7:42:af:c8:4b:20:fb:3e:ad:40:
70:7e:ef:09:f2:ea:8b:ea:d2:47:ab:f6:ee:70:56:6b:f7:30:
03:8c:7f:f1:b9:d7:de:d7:6f:e8:60:e4:09:43:91:ab:af:8f:
1b:ba:15:73:80:9f:52:12:dd:0e:34:b6:0e:7e:6f:39:ec:a3:
0f:b3:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:42 2026 by rpki-client