
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier: AjHKT5Kq/tOsl308oH898CN6VxHeld9/XW4IneFDf/Y=
Subject key identifier: E4:54:00:BD:6C:16:B7:7B:DA:32:C8:71:77:4A:28:94:A9:FC:5F:0A
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number: 02E2
Signing time: Mon 21 Sep 2026 01:02:01 +0000
Manifest this update: Mon 21 Sep 2026 01:02:01 +0000
Manifest next update: Mon 28 Sep 2026 01:02:01 +0000
Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: u00LeWvFz5TFMKdZ0GcYxGIOSFE2Cu7mpjcm2pdHtYw=)
2: BB052E76A76E11F1B714FA7A3A11F970.roa (hash: RodMID7dxNErWw1sBBYwx0WpdnoFizXAEXRE37nOvNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Validity
Not Before: Sep 21 01:02:01 2026 GMT
Not After : Sep 28 01:02:01 2026 GMT
Subject: CN=6ab08209-3894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:35:d0:0b:84:5d:be:fc:6b:72:04:96:59:
5d:e9:c6:0d:99:d1:23:16:1b:15:2c:f9:23:53:e1:
18:fa:44:bd:5d:aa:e0:0c:b1:c8:25:17:4e:e6:f2:
45:34:62:10:6a:45:5b:69:9a:04:49:af:48:ad:89:
ce:80:d0:1b:f0:62:1a:e2:4d:c1:03:b6:73:d8:4d:
e2:15:c9:40:03:ed:b9:ac:22:fa:59:de:24:3b:62:
71:f2:b4:fb:27:63:f3:7f:20:58:7f:68:47:db:0f:
a1:0d:39:40:ae:b1:d1:36:54:95:6c:10:1e:1b:90:
48:2d:e6:18:c3:2a:4e:91:43:f2:67:49:14:20:43:
c4:f1:c1:7b:73:46:54:10:ae:d6:1a:4d:3b:1a:a9:
f6:09:96:e6:db:72:fe:4d:d5:5f:e6:62:fc:b1:3a:
aa:49:5c:0d:34:df:d3:b0:55:34:04:f4:43:f1:b7:
30:d3:ba:2a:c2:78:72:89:5d:b4:81:c7:0a:ba:23:
7e:c5:37:24:de:1f:d8:1e:7c:8a:3a:0e:74:a2:f0:
89:09:a0:6a:a1:12:04:ec:ab:16:db:8e:32:bd:1e:
2f:e3:89:91:ea:ce:ac:68:dd:f0:2e:50:b2:d4:23:
79:ac:32:54:0e:14:c2:80:8f:5d:43:4e:27:94:88:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:00:BD:6C:16:B7:7B:DA:32:C8:71:77:4A:28:94:A9:FC:5F:0A
X509v3 Authority Key Identifier:
keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:56:e6:5e:f3:08:15:99:1e:8e:d5:bf:45:9d:36:14:de:
d8:5b:aa:e0:41:bb:bd:18:ba:d3:6c:ea:28:0a:f8:38:c4:1a:
c0:05:d3:a0:71:e4:f3:5e:20:f7:01:9b:62:ca:1f:c5:74:e3:
9c:e9:1f:b7:c7:8d:85:52:40:d6:c4:8b:75:48:60:09:41:c4:
f6:d8:b7:2e:42:cf:2c:3c:7a:6a:68:0c:20:05:ac:9c:61:54:
5f:c5:1b:ca:21:19:37:4b:ee:e0:3c:5e:fd:7e:1f:18:8d:ea:
3e:d9:c5:63:7d:89:7c:94:17:84:39:9f:9a:53:fc:95:a7:87:
52:5b:1d:e4:9e:de:6e:91:0a:50:5d:a8:92:37:42:18:87:e1:
02:ae:1f:7b:0c:88:39:19:da:a0:f1:19:57:37:71:72:8c:c2:
1c:d0:6c:7f:1c:a6:9f:50:59:17:69:af:9c:5f:79:2e:36:c3:
86:7e:f5:09:95:dc:53:3d:9e:b1:76:c0:9d:a6:01:69:86:9e:
ad:25:60:6f:1f:b6:a4:72:34:8d:75:3c:a7:7e:b1:06:05:65:
39:6c:e0:87:ec:d7:3e:8e:5f:63:43:d1:72:40:b3:82:4b:d0:
b1:d2:05:67:e0:01:16:f8:04:fb:6b:e9:f2:ee:a7:fa:2b:53:
70:06:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:38 2026 by rpki-client