
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier: UCgGRY2WG9Gjl97SXm6Ph7oey9B+GlQyhCRexXw57E0=
Subject key identifier: 85:98:18:AE:84:32:B9:87:C5:45:86:C4:3E:B0:8A:0E:FA:CF:26:80
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number: 0292
Signing time: Fri 17 Apr 2026 01:27:15 +0000
Manifest this update: Fri 17 Apr 2026 01:27:15 +0000
Manifest next update: Fri 24 Apr 2026 01:27:15 +0000
Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 7uyQIT4egGNCrmCNjwxpiadvw7GXAzSy7svEX7w8pv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Validity
Not Before: Apr 17 01:27:15 2026 GMT
Not After : Apr 24 01:27:15 2026 GMT
Subject: CN=69e18c73-9340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:60:6f:a2:91:b1:42:e8:fd:48:eb:01:a8:
57:e0:c6:0b:94:62:f5:e3:ef:06:e6:06:30:cd:e5:
d0:ac:80:da:5e:4f:88:02:ce:dd:84:b6:33:41:18:
23:bf:9a:a0:6f:40:7f:c0:e3:c2:6e:5d:29:03:bc:
c7:18:56:87:ac:b7:a4:9c:48:38:2b:fc:ef:3f:b6:
cd:0d:01:c2:e7:96:7c:e1:f0:e9:a4:06:b8:79:02:
df:55:b5:70:25:c8:e9:e3:99:67:17:24:39:e1:98:
e9:84:3e:98:1d:6b:c8:e0:35:f5:53:8b:9e:41:d0:
71:b6:b5:01:46:23:e8:47:ff:4b:d5:38:9c:b4:ca:
3e:f9:19:ef:d9:b9:4e:11:de:0a:1f:a5:7d:32:5d:
ac:fd:93:ca:7b:f3:77:40:9e:ec:b9:59:fc:f0:07:
0c:50:f8:8c:e1:58:f5:92:fb:ce:35:2c:10:9c:70:
15:9c:4d:c2:fd:2b:a6:28:5f:06:f8:f1:76:27:6e:
07:3a:ee:1b:64:7b:11:c0:0c:21:18:91:82:a0:5f:
d1:00:74:c3:92:47:6c:ca:22:d6:4b:d3:3d:28:39:
db:9e:18:5f:6d:31:fd:8a:4a:5e:0c:06:37:4b:88:
e1:4d:a6:0d:b4:07:bb:00:41:f6:1c:e5:61:69:1c:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:18:AE:84:32:B9:87:C5:45:86:C4:3E:B0:8A:0E:FA:CF:26:80
X509v3 Authority Key Identifier:
keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:3f:e4:48:10:f9:c2:7b:dc:a0:1b:ce:12:8a:40:b2:37:
1e:b6:02:40:4a:ec:64:6d:30:55:d9:45:4c:a6:2b:60:ed:c7:
d6:04:e3:c3:4e:95:14:85:96:ea:ba:7b:3d:92:ef:5d:7c:88:
59:dd:2a:13:4d:08:ff:9c:1d:9b:15:77:27:06:c8:b5:08:19:
3e:d8:bf:74:c3:93:48:d8:64:2f:18:15:33:c1:c1:54:f2:6a:
30:20:4f:dd:65:67:24:8c:4d:ed:a0:fc:ae:e2:f3:43:76:b8:
3c:6f:64:d3:ae:32:7f:e3:d9:10:01:cb:bf:44:b4:f6:9b:01:
bb:1c:a1:08:ea:1d:b9:c4:07:09:d4:e1:18:07:7c:52:9b:6a:
0d:b2:8a:61:3d:b3:01:1b:76:3c:a9:d3:69:bf:5b:24:ac:6c:
76:fe:38:e2:a2:71:c2:69:33:5f:b0:33:b0:5e:76:27:20:79:
c3:5b:5b:87:68:a5:db:d7:79:5f:29:1d:62:79:02:4c:0f:30:
dc:4d:e0:4f:49:c1:cc:18:32:ec:9f:0f:df:c7:5c:1a:3b:c6:
ec:7e:ae:0a:4d:c8:d6:69:fb:4d:e0:88:39:38:9e:c6:1e:cd:
72:6c:fe:5f:94:5c:04:3c:a4:43:45:72:61:df:5e:8e:7f:1f:
f4:82:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:18 2026 by rpki-client