
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: v/aaRJoB3Wwp0jlkPRJwnDkmGMQ5vAcbKQSsSNMbANY=
Subject key identifier: 3A:5C:BB:0C:2B:A4:C0:E3:C4:27:2D:36:7D:70:BE:F5:D2:E1:D7:E4
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 253E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2528
Signing time: Sat 28 Feb 2026 15:46:45 +0000
Manifest this update: Sat 28 Feb 2026 15:46:44 +0000
Manifest next update: Sat 07 Mar 2026 15:46:44 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: ekB3+GQfgrWyI+EiC3wqnJLvrgPn/wnQ1ZvLWKN9TGY=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9534 (0x253e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: Feb 28 15:46:44 2026 GMT
Not After : Mar 7 15:46:44 2026 GMT
Subject: CN=69a30de5-af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:b7:84:b0:40:df:c6:c8:a7:92:d9:12:d3:
8c:e2:31:30:7b:c6:7d:1c:f3:96:11:64:42:2d:36:
a6:ca:68:14:27:07:c7:79:49:ef:ea:40:41:7e:f2:
60:cc:eb:ae:63:2f:82:ae:e3:8d:bb:86:3f:89:88:
12:b0:62:fb:e8:df:10:e5:f8:00:3b:e4:84:1f:d5:
cb:c1:28:c2:e4:a8:65:ae:ef:55:1b:0e:8e:ef:dc:
c4:c6:96:74:69:cd:86:45:e8:60:a8:7a:40:47:2a:
04:23:69:e2:5b:5d:e0:06:c1:46:49:4c:f3:50:2a:
87:2c:e3:8a:58:fd:eb:54:24:99:b3:a8:2b:5e:f2:
e3:75:da:a5:8e:59:84:bc:e8:04:96:81:fe:93:63:
26:f4:f3:e1:c9:b1:43:05:54:36:92:50:13:39:ba:
fe:ca:75:4d:be:b2:7c:97:d0:62:75:be:cf:95:8f:
aa:fe:cf:f2:2f:92:af:fd:35:99:a5:45:52:90:07:
4a:18:11:01:36:7f:06:0e:10:52:d5:a8:1d:0d:50:
a8:7b:39:b3:6e:48:a9:db:14:b2:5c:f4:d4:ae:ce:
6b:e1:44:62:08:b5:de:af:5d:2a:fb:68:d3:5a:f0:
3f:71:1f:8f:32:c2:b4:7a:ae:48:69:f1:1f:c5:64:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:BB:0C:2B:A4:C0:E3:C4:27:2D:36:7D:70:BE:F5:D2:E1:D7:E4
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:3a:f4:6f:dc:0b:c9:c8:f7:a7:f5:fe:04:62:29:ca:f8:
73:e8:6c:d1:9e:ed:83:30:9c:74:c1:e0:58:5f:ef:3b:43:9b:
a8:6a:0a:ab:94:a4:f3:93:e6:43:7a:47:5b:be:2e:a2:bf:1d:
fc:27:8b:05:28:b3:39:af:5c:be:a8:71:61:82:02:25:4c:0e:
d7:51:1f:1c:e8:c9:d2:09:12:28:93:68:45:a9:50:64:a8:ea:
87:8a:11:88:d1:7f:8f:19:0e:d8:50:c7:bf:75:0d:93:75:e8:
71:76:64:ff:d3:23:a5:a6:ed:6b:b0:0f:16:71:33:23:c0:fe:
30:7a:41:8e:d8:63:db:2b:99:47:b2:92:f9:99:6e:f5:5b:bd:
70:95:c0:74:03:e2:98:35:67:60:86:4d:42:c6:e0:e8:15:cc:
b3:55:3a:bd:30:ca:c2:6d:c6:48:1f:b1:7f:73:9d:66:2b:99:
7b:81:8e:fa:3a:9f:e7:ab:6d:bb:7a:eb:13:49:0d:d4:6e:62:
a8:45:b8:69:e5:ce:f7:57:18:e0:67:b4:6c:b8:d7:9a:1b:c2:
4b:53:27:b5:8b:b9:53:fb:b4:a0:82:66:f0:e3:37:d8:89:37:
93:74:93:9d:8b:70:bd:50:eb:e4:b7:68:68:6c:ff:ee:e7:20:
ee:47:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:24 2026 by rpki-client