
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier: ko5YuXEBqE54euP6OyGUH0c4ynb5++KQ8pk5H/ehS9g=
Subject key identifier: BA:07:37:C6:3C:FA:EA:FD:58:28:4C:0C:34:4A:A8:01:75:D2:25:8C
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number: 0298
Signing time: Sat 19 Sep 2026 02:02:10 +0000
Manifest this update: Sat 19 Sep 2026 02:02:09 +0000
Manifest next update: Sat 26 Sep 2026 02:02:09 +0000
Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: A1widXLURcWyTPxoqrUv7RPAJsEKSuaUxXJFslP3eew=)
2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Validity
Not Before: Sep 19 02:02:09 2026 GMT
Not After : Sep 26 02:02:09 2026 GMT
Subject: CN=6aaded21-3670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:22:f7:04:2e:08:09:46:4d:f8:ac:64:49:
2d:bf:f4:5d:e6:b2:85:5f:17:21:59:1e:98:17:4b:
db:a2:72:2b:1c:e0:81:05:d1:73:20:2f:85:cf:e3:
44:76:e0:69:27:8b:48:a8:51:29:cc:77:b4:a2:7f:
dc:2a:39:d3:df:ca:1a:41:f9:fa:b1:b2:18:a2:5a:
de:84:b0:81:ff:8d:7c:ac:a3:82:a8:8f:66:b9:e8:
4a:65:03:c5:d1:96:94:c2:35:0c:2e:e0:c0:ea:f5:
58:dc:24:b1:55:f0:58:d6:26:7f:ac:35:25:68:89:
ee:6e:51:7a:f2:17:54:06:ac:bd:ad:f2:6b:25:11:
d1:cb:3a:11:a2:7a:1c:50:13:09:d7:2f:37:15:33:
c4:ed:e8:66:d9:ce:80:26:2c:4b:09:9d:84:ef:c8:
ed:ae:ab:ac:94:e7:63:be:93:f8:73:60:40:95:32:
a1:52:20:b1:4f:d6:68:4e:6a:0b:04:42:ef:16:17:
29:47:be:16:e9:65:af:5b:fe:4e:04:46:e8:30:62:
5e:c2:21:49:d2:c0:30:bc:78:ac:4c:ff:de:3e:54:
90:07:2d:51:68:42:4f:a5:f6:4a:27:7a:47:40:67:
8b:dd:63:88:d3:ed:d4:25:95:2e:fd:cf:23:49:6a:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:37:C6:3C:FA:EA:FD:58:28:4C:0C:34:4A:A8:01:75:D2:25:8C
X509v3 Authority Key Identifier:
keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:a2:51:8a:01:79:c3:cf:12:28:f8:90:8c:7c:c9:d3:e0:
a8:92:49:e3:a3:63:2f:4d:12:23:66:92:bd:21:2e:3d:3b:8a:
11:75:a3:81:c1:0c:1c:11:c1:05:3e:61:6f:06:59:67:1b:98:
3c:db:c6:d4:55:d4:83:4e:da:9b:30:87:b8:98:14:c0:71:f7:
81:68:c4:76:7d:12:5a:2f:21:99:57:8f:42:71:f4:1f:ed:99:
23:d5:30:2f:97:ca:74:4f:a6:00:fb:60:57:44:a6:d7:9e:85:
e5:87:cc:11:2f:0a:d7:56:ff:9a:7e:0d:7a:e4:b4:18:77:88:
16:6e:d6:a5:04:33:74:f1:95:75:61:f8:58:de:af:6c:cd:06:
61:26:b1:d1:20:86:00:e6:4e:20:f7:4a:31:67:39:77:eb:c9:
0a:8f:55:33:2b:51:b8:c8:65:36:71:18:4b:c9:53:d1:4e:71:
d2:0d:30:f9:97:68:2e:fd:6a:fd:80:5e:65:5f:40:15:84:a4:
21:f2:be:b0:47:a5:b6:88:e5:09:c8:7e:47:da:8e:04:fb:52:
24:1c:a0:ad:8b:50:e6:97:00:9a:57:6c:d6:ad:5f:f3:c2:30:
72:af:d9:15:2b:97:e6:7a:b5:29:1c:a0:df:55:b8:06:ad:b9:
0a:de:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:27 2026 by rpki-client