
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json)
Hash identifier: YQW+egEGNFLd6+T0ePxJPqqOhBrRy0YwuQdL7z5XX1c=
Subject key identifier: E2:10:39:01:E5:D0:08:0C:03:BC:71:8D:4D:E8:A3:14:C4:4D:25:91
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
Manifest number: 0296
Signing time: Sat 13 Jun 2026 01:49:55 +0000
Manifest this update: Sat 13 Jun 2026 01:49:55 +0000
Manifest next update: Sat 20 Jun 2026 01:49:55 +0000
Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: rgXGv5WSdmMol27d5p2mxjleRGvtw20U89y12pnjmEY=)
2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Validity
Not Before: Jun 13 01:49:55 2026 GMT
Not After : Jun 20 01:49:55 2026 GMT
Subject: CN=6a2cb743-4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:82:cb:dd:5e:8a:e4:77:6a:10:ec:c1:af:
13:f2:c7:d5:c1:b1:03:38:99:40:f2:fb:2d:ef:9a:
f3:6a:a0:0e:f7:44:2b:07:a4:20:14:99:8c:8b:85:
3e:e6:31:86:29:35:82:64:eb:e1:3a:6e:ba:c0:72:
96:1d:ad:e6:81:1c:ba:72:0c:d6:a5:3e:e5:8a:46:
69:9a:74:1f:c9:33:de:d6:5c:3d:ac:d8:f6:f2:f9:
96:c6:1f:d3:0a:5f:7f:73:2e:c7:f7:61:55:db:c1:
ed:51:0a:5c:cb:8e:49:3e:a1:23:7f:10:96:a4:a4:
8e:fe:33:12:cb:c2:69:c5:c4:e9:8e:90:be:a8:a7:
36:22:b8:f5:8a:08:b8:8f:ea:dd:19:68:11:cf:73:
2a:51:ff:93:2d:68:5a:9c:d4:81:43:b1:3e:4a:3f:
15:ff:92:02:26:1c:bc:79:ea:0f:67:f2:ee:d6:11:
2a:5e:ba:43:e7:cb:9e:27:f9:71:ed:17:93:38:d3:
44:6a:24:f7:cf:87:e6:40:70:db:29:99:2f:a0:6a:
d1:bb:2a:3b:4b:c1:a2:60:42:a9:dd:46:73:0f:21:
dd:e0:9d:2e:50:5f:2d:fb:67:29:a7:4b:69:9f:46:
06:45:5b:b3:3d:36:99:e2:34:7f:ff:51:6d:14:1b:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:39:01:E5:D0:08:0C:03:BC:71:8D:4D:E8:A3:14:C4:4D:25:91
X509v3 Authority Key Identifier:
keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:68:78:bd:3c:99:fd:8c:0d:09:c7:76:a0:40:ce:81:0e:43:
d0:2e:8e:57:ba:9c:81:76:24:20:fd:b8:aa:e5:0a:b0:15:89:
89:e4:d7:fe:c1:87:97:a7:8c:66:06:f6:34:30:ec:dc:27:25:
9d:b0:3c:c8:6f:c8:93:61:af:48:9f:ab:8d:38:10:de:26:e3:
5a:42:ee:28:a2:93:82:72:cd:ef:74:97:a3:8c:e6:a8:5f:95:
a1:2a:92:50:d5:38:2f:2d:0c:50:39:1a:e1:02:df:d0:a4:6a:
15:fb:61:31:bf:73:be:bb:e4:47:35:44:9d:10:82:c3:d8:e9:
43:a7:70:e8:99:5f:3a:2e:f0:8e:2d:03:04:16:d2:fa:74:36:
26:61:f4:d3:2c:d3:12:4f:e2:1a:ea:52:be:79:a6:27:ae:09:
3d:e9:b2:a5:75:64:0e:59:b1:8f:a2:78:69:36:e1:c0:67:eb:
65:c3:d6:b3:f6:f0:5a:58:98:ec:06:a0:7d:d3:a1:b6:6d:08:
3e:f7:74:1f:70:03:4f:55:f8:a4:d1:1a:b8:6c:87:22:5d:48:
f4:1b:81:97:26:21:61:62:50:b9:b2:54:72:14:16:82:cc:e2:
8a:6a:92:9a:a5:25:d3:0b:21:12:9f:8b:12:5a:39:ea:72:14:
05:6f:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:44 2026 by rpki-client