
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: J4i2IBN92xTEgcdsII1GPVRQ36Zs2T4DiDeAWgu1EIs=
Subject key identifier: 15:D3:19:1F:56:0B:35:60:2C:32:11:2D:60:47:0C:DE:A6:89:C6:F0
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 0258
Signing time: Wed 29 Jul 2026 03:21:40 +0000
Manifest this update: Wed 29 Jul 2026 03:21:39 +0000
Manifest next update: Wed 05 Aug 2026 03:21:39 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: 1NX515dGpkkEnli6iuSxnlg0m/WrAdJUnhF4hbHGOgw=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: Ra5FAe6QIo7u3tetqw7Uoy+AfeHeu6ofRnf40F+mZ8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Jul 29 03:21:39 2026 GMT
Not After : Aug 5 03:21:39 2026 GMT
Subject: CN=6a6971c4-cefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:af:c9:ad:46:32:a6:79:d6:c6:dc:37:1e:
a3:e6:b5:5c:3a:7d:27:eb:c4:fa:40:1c:1f:38:4c:
1b:0e:1d:5e:60:d1:61:47:32:b0:f5:e5:22:93:2e:
79:5f:a4:d0:08:fa:13:31:2d:65:36:15:96:ef:63:
06:04:35:f6:1c:cf:be:ef:5d:aa:3e:c7:99:87:d7:
6f:66:78:22:86:81:80:b6:b8:34:0e:25:63:ff:14:
33:db:11:b3:c9:20:3a:e6:d4:90:4f:4c:34:fd:a1:
cb:b0:f7:91:86:ef:75:57:b9:c4:bb:7f:04:9c:da:
ee:a6:55:bc:21:4e:a8:14:52:bf:71:b7:2c:96:86:
7a:ad:98:cc:26:76:64:3c:03:2f:6d:15:10:9a:40:
85:98:f0:48:de:bf:ad:03:b4:92:98:52:67:5b:5c:
16:41:02:b1:52:ad:94:f0:8c:1f:58:d4:d2:d2:ac:
38:d9:c7:d5:25:a4:ec:8c:8c:31:0c:28:f7:69:72:
ed:05:ca:8a:d9:91:de:64:3f:6c:f1:1e:a5:39:20:
9e:3c:16:46:35:34:f3:54:85:c8:fe:5e:8d:2c:d5:
1e:92:97:8b:5e:ea:dd:92:c1:4e:22:41:f8:68:c3:
19:e9:b4:4d:92:e4:de:29:11:81:01:a9:ee:35:88:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:19:1F:56:0B:35:60:2C:32:11:2D:60:47:0C:DE:A6:89:C6:F0
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:96:16:1a:f2:d5:23:06:73:b1:39:73:f6:a1:f3:b0:08:
5d:08:c2:6e:d7:dc:2b:63:2a:bd:87:1c:9e:6c:33:f5:87:d8:
78:e7:a0:2a:b0:f1:55:4e:d4:3a:53:51:d8:e3:2c:c8:98:1e:
36:63:e2:1d:75:25:60:8e:4f:fb:da:81:33:d6:d7:86:1e:72:
61:20:aa:7b:0e:24:9f:32:75:c7:87:f0:49:80:b0:0e:2b:eb:
ed:1d:1b:45:53:fb:99:02:69:e7:b2:18:14:7e:fa:9c:7d:56:
2c:34:48:0e:02:6a:9d:b1:16:c5:f8:dd:06:a8:25:de:5c:3a:
14:dc:b6:d7:33:c6:ef:10:fd:3e:72:e3:50:28:d7:8c:cf:ea:
54:5c:70:40:64:a4:ca:b8:82:4d:53:5f:6d:a1:77:6d:79:0e:
86:e6:eb:79:66:7b:e8:5e:81:6c:72:43:6d:6a:47:b7:ac:14:
a3:22:07:54:6a:3f:95:2c:d0:85:a7:57:92:e0:f2:79:03:43:
c5:dd:a9:a8:c8:a5:eb:3d:a1:6c:54:3b:ce:fd:c8:28:d9:fc:
b8:df:a6:9a:3d:1d:c7:bf:db:18:91:39:22:c2:af:ed:c6:e1:
81:58:9f:1c:c0:a1:75:ec:27:af:53:48:49:33:79:32:31:9f:
e3:8f:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:00 2026 by rpki-client