
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: CdYS+PedZbW1Vqdxdq8Py7CzfT39R3j73qWCbIJBaW0=
Subject key identifier: 01:24:68:E0:D2:42:83:4D:6E:0D:50:06:0A:A3:1F:E1:B2:EF:38:9E
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 0274
Signing time: Mon 21 Sep 2026 02:04:50 +0000
Manifest this update: Mon 21 Sep 2026 02:04:50 +0000
Manifest next update: Mon 28 Sep 2026 02:04:50 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: ctfLsaVrXDJ7xzlW8XraAC5+E/eqlNsM1ldu4jKF1Rg=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: Ra5FAe6QIo7u3tetqw7Uoy+AfeHeu6ofRnf40F+mZ8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Sep 21 02:04:50 2026 GMT
Not After : Sep 28 02:04:50 2026 GMT
Subject: CN=6ab090c2-aab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:5d:8f:02:d3:cb:b6:89:97:26:a4:c6:ed:
8d:67:48:ef:ef:4f:f9:e3:ff:ce:ce:30:39:86:8d:
b9:9a:da:81:db:7f:dc:9f:17:f0:d2:89:87:51:1a:
37:cd:27:dc:26:53:ab:d1:c7:67:e7:5a:59:8d:d6:
b7:57:d2:9d:a0:d4:5c:f2:b7:0e:73:9c:ec:c8:11:
33:7a:37:54:e8:8f:2f:dc:85:14:4b:a9:aa:63:ba:
1c:53:08:cf:13:6c:76:1f:1f:f0:e0:28:d9:d5:85:
78:46:8e:87:25:bc:69:d6:b7:af:c3:fe:c1:eb:6b:
36:cc:b9:50:b7:0e:69:c0:35:2e:1d:88:68:f0:a8:
21:4e:cd:43:b8:e5:e5:ea:a0:d1:f8:74:8d:18:4c:
e2:e4:b7:0a:71:5e:f7:60:b2:10:86:3d:01:8d:44:
33:56:60:f0:40:d8:a9:f9:42:13:dc:3f:76:2b:38:
25:6b:2c:20:33:f5:a8:6c:cf:70:73:db:2b:30:b6:
e1:e4:8b:fb:45:25:ee:16:bb:ea:26:eb:83:09:dd:
ea:63:05:d5:69:db:a1:6f:fe:f2:c0:c8:75:5b:5b:
18:cf:fb:a0:de:7f:53:ad:e5:43:69:41:47:86:15:
e1:4e:38:fb:2a:34:92:4c:ea:f2:cc:e5:4a:ed:1d:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:68:E0:D2:42:83:4D:6E:0D:50:06:0A:A3:1F:E1:B2:EF:38:9E
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:33:aa:67:0a:4b:a5:fe:68:d5:b6:4a:2c:05:5e:5d:ee:20:
db:72:27:b6:a4:56:b5:90:d9:47:fe:00:c3:7a:f8:8c:26:8a:
74:3c:c3:3b:bf:05:d8:78:54:ea:8e:18:6d:ba:42:49:b6:ec:
06:6e:bb:91:87:a1:cc:8c:55:56:1b:98:f9:4f:87:b0:5d:30:
b1:09:68:9a:34:25:91:0a:35:2c:f4:44:7c:bb:ad:3a:e4:45:
b7:33:8a:5a:48:cc:63:de:17:fa:25:55:d8:41:7d:fe:d7:5e:
a7:82:40:bc:96:a6:55:e9:d8:e2:52:df:44:32:f3:1f:20:39:
59:de:1d:f3:c9:df:58:34:86:83:1c:83:1b:30:30:38:11:5f:
cc:b4:07:37:b3:a2:75:76:ff:e7:08:8f:b9:5d:83:fe:10:94:
16:73:d8:79:69:a7:b5:d5:d0:28:2d:88:18:94:55:ba:02:09:
2f:68:5e:d5:86:69:43:91:12:6f:23:44:79:4b:7f:07:0e:79:
a1:75:93:d4:da:64:ee:b4:9d:b3:ab:73:67:26:e3:01:4d:8e:
ee:67:cf:b5:6a:df:38:2e:e1:5d:b9:0e:42:0b:a5:2e:96:6e:
88:23:8e:20:b5:ea:a5:76:3e:57:48:bc:db:62:d1:f7:f0:5f:
aa:91:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:23:38 2026 by rpki-client