
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json)
Hash identifier: T9+7qgaCvC8rZAvS4XchMwOoQIZyJOOMSwsX1tOTcVE=
Subject key identifier: D9:13:4D:3A:06:46:C2:C2:34:90:6E:73:98:D7:8E:49:6B:A2:BF:28
Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
Manifest number: 0292
Signing time: Wed 13 May 2026 01:47:22 +0000
Manifest this update: Wed 13 May 2026 01:47:21 +0000
Manifest next update: Wed 20 May 2026 01:47:21 +0000
Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: FM4KqVwWjlhjqbuXIoGqBwgCcmdtMtegZ7SmvMRt8VA=)
2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: B6zuGQHiLLMcpOAalP92RoQpZ8Tfo5uy0bH1HnD3XPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Validity
Not Before: May 13 01:47:21 2026 GMT
Not After : May 20 01:47:21 2026 GMT
Subject: CN=6a03d82a-ff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:9c:91:38:cd:a1:55:04:d8:0a:9a:ec:93:
24:5f:b8:a2:4a:fc:ce:50:b5:b3:45:8b:e9:d3:44:
c6:b4:4c:e1:8b:12:22:43:10:38:bf:79:ef:40:0e:
7b:f9:6f:50:be:c3:cf:91:31:81:95:5f:26:9f:d8:
29:01:38:26:cd:53:15:53:22:66:6b:48:a6:d8:f0:
26:ff:83:29:ad:1d:0e:39:45:a1:47:16:e3:25:df:
aa:a4:22:df:41:7e:d9:a3:30:2f:81:dd:ad:25:49:
a7:df:05:0d:aa:cb:7a:91:c8:05:34:57:85:35:20:
66:aa:30:f9:95:af:46:73:15:d5:7f:24:1e:67:aa:
9d:db:cc:35:44:1a:1e:49:f0:e0:89:e7:02:f5:97:
ff:a7:77:3f:96:ce:08:61:2d:be:b9:19:31:00:56:
b4:29:ab:a0:bd:dd:1c:23:97:c8:48:50:c6:a2:26:
95:22:c3:ac:b5:5f:2c:5c:e7:c3:b3:f0:11:d5:74:
10:35:47:b7:65:88:63:ee:22:1b:fa:9d:e2:fb:da:
67:40:6b:ca:af:2a:5a:fc:18:aa:fe:74:5a:d8:f3:
9d:8b:cf:29:d5:52:da:c6:5a:47:4e:4e:a5:da:9f:
df:47:68:4f:2f:56:43:a7:c3:2a:e7:51:c2:e1:eb:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:4D:3A:06:46:C2:C2:34:90:6E:73:98:D7:8E:49:6B:A2:BF:28
X509v3 Authority Key Identifier:
keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:dd:1c:64:77:73:02:04:a2:51:ab:fa:50:69:7b:46:e4:
3f:62:10:32:d1:60:3b:9d:e4:42:b3:a7:a4:68:fa:80:d0:ee:
d1:02:b6:66:85:fd:c8:9a:16:ab:f7:77:3a:b6:cd:c7:89:c0:
ff:fd:a5:aa:72:ae:92:a6:08:b0:f4:3b:d0:8d:88:68:31:08:
4d:60:c2:ce:25:24:14:e7:09:52:41:3e:c4:28:19:fc:27:60:
1c:19:6b:b8:6f:6d:2d:74:88:af:58:e9:b3:47:c9:37:84:4c:
a4:2a:bf:9a:6e:a9:6f:7f:b4:cd:ed:4a:4e:8d:6b:42:7a:a5:
6b:fc:19:39:f4:db:da:6b:88:9f:b4:ed:86:c8:c8:89:29:d7:
9a:4b:ff:6e:02:37:a9:69:1b:75:dd:e6:9d:5c:de:89:07:e0:
fb:55:f8:27:66:2f:78:fe:ca:b6:e2:74:f4:3f:cc:23:66:2c:
32:e8:1c:bf:0b:9d:98:1f:2b:93:f6:19:60:f2:ac:db:45:60:
53:f7:04:8a:d3:5e:61:15:c3:e6:62:47:51:70:96:d8:2f:2e:
46:60:aa:f7:fc:bb:e3:e8:96:68:c7:b0:c0:6e:bf:f9:3e:ef:
c5:87:b6:90:02:8f:1c:11:f9:e5:4f:68:5c:72:ea:4d:20:25:
a3:6b:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:40 2026 by rpki-client