
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier: gsbROrNeqDCCoLBCkiyGR8eZMYQk/wmFvrmDCXe7iC4=
Subject key identifier: C0:E0:C6:59:2A:3C:5B:D1:97:83:F3:D2:7F:4A:9B:19:D0:21:5E:A9
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number: 026C
Signing time: Fri 17 Apr 2026 01:52:02 +0000
Manifest this update: Fri 17 Apr 2026 01:52:01 +0000
Manifest next update: Fri 24 Apr 2026 01:52:01 +0000
Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: CqnV7mq5lASvygqyA7olDtsB9mXZ79SHfSzwfH/YWNY=)
2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Apr 17 01:52:01 2026 GMT
Not After : Apr 24 01:52:01 2026 GMT
Subject: CN=69e19242-c76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:b2:b9:e9:f0:9c:78:e7:a2:8e:44:1c:7f:
ac:ff:d5:21:17:33:ab:5d:61:a3:d0:51:7a:af:75:
bb:98:97:69:f5:ce:49:2f:9d:b2:d9:b7:7c:0b:ba:
7e:ec:a0:b1:84:72:15:d5:e9:96:66:45:19:a2:34:
ad:ea:48:21:2e:8d:45:9f:9e:88:0a:93:0e:d8:bb:
c5:37:d0:ec:65:9a:06:cb:75:88:8b:b1:19:ad:2a:
a2:ce:c0:78:65:f6:b3:f3:fa:ab:5a:a2:e1:96:01:
0e:bd:05:e4:4a:04:5b:d5:04:38:85:29:25:8e:d8:
8f:2c:ad:61:1e:2e:19:56:41:9a:db:69:25:bd:be:
77:79:7e:a8:f7:10:69:a3:5b:dd:d8:e1:40:3e:d1:
fa:3a:13:0b:df:72:0e:8b:cc:b1:22:73:1d:e7:da:
79:4e:5f:9a:93:77:b3:65:cb:39:84:6e:89:f8:ed:
16:ab:2e:8a:79:b7:9f:c2:4c:b7:da:2f:4d:eb:f3:
c6:5f:c4:2a:b1:03:81:ba:66:26:97:db:af:1c:27:
82:11:62:b1:99:73:12:69:3d:fc:bd:7c:08:0c:e1:
53:d9:83:2b:84:8b:bb:4b:04:29:bc:60:a9:ef:26:
25:90:d4:86:65:41:5d:c7:ce:35:e8:4c:8b:f8:54:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:C6:59:2A:3C:5B:D1:97:83:F3:D2:7F:4A:9B:19:D0:21:5E:A9
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4c:ea:3e:8a:cf:0f:83:64:ac:bc:a6:43:69:ca:ad:51:7f:
19:d5:81:cd:c7:11:46:78:f3:d1:82:b0:53:b6:8b:19:5b:31:
ae:a8:3d:59:ac:d0:be:e3:83:8a:dc:3c:1a:66:80:00:b3:af:
da:f3:33:ca:3b:64:de:be:12:b2:51:14:17:a1:7b:4d:7b:42:
4a:26:22:a8:21:97:5f:58:f4:53:26:88:16:60:ff:81:84:43:
b0:2c:7f:11:39:dd:d3:5e:b9:b5:3b:8b:33:5d:3b:7d:0a:43:
80:35:aa:84:c6:fe:7f:ef:b3:96:66:4a:ee:b2:d6:93:82:e8:
be:7f:9a:e0:57:ce:6d:25:cd:f5:c5:f4:2c:8c:7f:ed:04:34:
84:88:4b:9c:f8:0b:f9:03:d4:70:70:a9:24:79:e8:f4:d7:ab:
05:4d:7e:46:f1:07:1e:2f:c5:9e:57:67:60:8b:f4:00:0b:f4:
98:2c:d1:7e:4e:6a:92:73:0e:05:4d:49:34:02:d3:73:2c:05:
e7:b0:4e:6b:e9:11:f9:18:0f:94:d4:95:d9:a2:28:97:14:5a:
c8:ad:ec:1b:07:9f:66:2c:e9:08:65:0e:75:55:2e:12:bf:fb:
cc:19:e3:6f:37:a3:58:46:93:1c:c4:48:6a:50:c6:3e:4c:5b:
59:a3:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:36 2026 by rpki-client