
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier: JbOmIIaEML2TLkngqBr+hNuanuxTxV3CiFMp2PB03gE=
Subject key identifier: 2D:27:3D:53:34:0C:98:D7:D9:85:97:19:7D:5B:5C:E0:AB:16:49:60
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number: 06A9
Signing time: Sun 26 Jul 2026 23:18:26 +0000
Manifest this update: Sun 26 Jul 2026 23:18:25 +0000
Manifest next update: Sun 02 Aug 2026 23:18:25 +0000
Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: 6xnBuW6fMe741zLz71TycRAS1RY9LbV5UzNoLa3N8OQ=)
2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=)
3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=)
4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Jul 26 23:18:25 2026 GMT
Not After : Aug 2 23:18:25 2026 GMT
Subject: CN=6a6695c2-2134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:74:40:ec:c4:26:4e:1c:a7:82:82:c1:09:
d9:7f:25:da:82:4d:8e:38:67:a8:12:16:87:dc:9b:
dd:ca:54:7f:ab:5e:ea:c3:0c:05:a9:2e:93:c5:d1:
6b:1a:04:e9:a2:0f:64:f0:84:15:b6:a4:69:67:ee:
02:84:2c:40:cc:b6:49:9f:c0:11:70:1d:fc:00:fc:
18:51:2f:50:db:cb:58:0d:6b:0f:a3:20:8b:3b:43:
51:6e:95:1b:e8:90:8a:b7:7e:c5:dd:dc:05:e3:12:
28:bb:45:a7:38:1a:6f:b2:6e:78:4f:17:d7:b2:a5:
6b:14:81:d2:88:cb:9b:e6:f4:ef:91:65:36:06:ff:
bf:40:f2:c4:52:49:53:3b:fb:fd:31:34:1c:87:84:
7d:d2:c8:7a:f2:7c:ee:1b:ac:15:a0:41:3c:1d:86:
bb:0a:b1:52:2b:b7:8a:25:a5:2d:54:31:5c:f3:96:
5d:36:93:ac:15:3c:f3:da:a8:d1:14:49:70:84:e6:
b9:12:c5:da:1e:b5:dd:3d:3c:03:8f:a4:62:a2:21:
5b:3b:dc:48:33:df:a8:ea:3b:da:3e:a6:da:b2:5e:
40:ff:b9:78:64:60:d2:a2:77:9f:28:86:89:34:50:
34:c1:7a:eb:23:45:78:e1:d4:6e:2c:7b:42:18:9b:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:27:3D:53:34:0C:98:D7:D9:85:97:19:7D:5B:5C:E0:AB:16:49:60
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:ff:9f:b6:49:06:05:89:8a:3e:83:55:77:7c:c9:d4:51:
ab:ea:95:dd:3d:e1:19:b9:74:3f:eb:b5:b1:fb:41:6f:ef:23:
bb:8b:f8:8c:d4:b5:63:43:39:20:ba:7f:51:84:f1:c1:ff:10:
f0:2e:6d:63:84:52:b4:5d:6b:97:58:c0:b4:3c:99:fc:c9:b1:
de:2a:24:84:5e:e0:c6:0e:f0:56:49:83:e9:06:2b:e8:f5:73:
7a:21:99:49:09:2e:51:ed:ad:aa:e1:52:de:6f:5f:5c:87:f3:
a2:73:0c:5b:7f:76:a1:2b:66:36:56:d6:56:df:3f:62:fb:42:
a0:03:f1:2b:43:af:76:3f:6c:a9:e0:11:c1:61:fc:da:5b:78:
46:67:95:e4:90:46:b3:b6:6a:85:ba:98:ee:24:cd:c6:45:43:
d8:f3:18:b6:f2:91:38:82:38:df:71:7c:da:56:71:a8:d3:96:
31:67:8c:56:9d:93:87:66:2c:b4:87:10:0e:f2:43:12:6d:1a:
1b:a4:e9:df:7d:e4:de:19:fa:cc:e2:9e:2f:69:f8:1f:c7:6d:
b6:b8:1a:c8:e5:31:c8:17:7f:4b:8f:30:5a:98:38:7f:6f:89:
12:1c:6f:b4:1c:d9:e5:81:45:89:50:8c:6b:3b:cc:0a:d4:3b:
91:2a:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:29 2026 by rpki-client