
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: 5StTDdl8Dx1JnaqiNzd1I23/0cQhNVwu5zDW5F10J+M=
Subject key identifier: 48:E8:55:35:71:DC:88:87:5B:DF:F2:0E:03:08:AC:CA:BF:A7:1F:1A
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 022F
Signing time: Mon 11 May 2026 02:42:34 +0000
Manifest this update: Mon 11 May 2026 02:42:33 +0000
Manifest next update: Mon 18 May 2026 02:42:33 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: aOfsSeivRYwi76pZ4OWhF5DKzVjcteI9wT4BsOZ19J4=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: gOzuZuHt13/+CPeSVRF/LcUWEvkvTc92dX/tHfFEGBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: May 11 02:42:33 2026 GMT
Not After : May 18 02:42:33 2026 GMT
Subject: CN=6a01421a-3bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:fa:87:53:f0:56:f4:e1:55:79:af:38:bc:
70:02:a2:de:9a:2c:7c:14:1b:04:b7:8e:d2:11:21:
3e:57:9f:88:44:ee:ad:25:3e:12:85:63:27:a1:84:
8e:6a:f0:c6:ba:51:06:e7:8b:36:0b:9f:05:fa:04:
01:cf:5a:05:bf:4e:6c:ea:2b:96:df:dc:3e:40:1b:
fc:49:88:59:e0:33:8c:64:a6:3f:0f:d6:0d:0a:ee:
17:f5:22:0a:be:18:fa:38:62:07:56:af:49:9f:52:
c7:31:77:fe:61:bb:c3:8f:82:c9:82:fb:85:8d:fd:
bc:13:cd:d2:12:e8:54:3e:13:eb:e2:30:41:7b:59:
97:e3:ae:93:1c:59:df:ad:e7:1d:f8:f2:db:fa:77:
88:a8:65:b3:1b:28:06:59:c4:ca:99:8e:06:1c:e2:
4a:d5:bc:13:34:4e:29:61:e2:ac:44:32:6c:10:e2:
bf:ba:39:04:af:86:fc:9c:69:f1:31:f7:d1:f4:f3:
09:11:53:28:c5:59:73:38:88:dc:70:24:3b:43:02:
fc:4b:70:47:f9:37:9e:2a:a5:92:dd:4a:01:bf:fe:
05:4d:6d:a5:dc:b0:23:e4:07:61:95:35:06:4c:34:
3c:d2:c1:85:d0:af:b5:22:85:01:9e:73:1e:80:c5:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:55:35:71:DC:88:87:5B:DF:F2:0E:03:08:AC:CA:BF:A7:1F:1A
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:1a:e1:1a:eb:51:a9:b3:d8:71:c3:36:53:9f:a6:c0:0b:
58:80:a4:87:73:e6:ba:48:9c:b6:50:38:a5:0f:0b:b0:d8:ad:
d6:6c:9e:8d:0b:f0:b8:29:20:20:66:21:68:b8:3d:41:54:a9:
68:b6:8d:bc:7d:5c:7a:0f:c4:32:94:3a:a5:a6:8a:32:f2:6d:
7a:54:01:da:77:4c:df:56:36:97:75:0c:26:9d:55:17:e0:54:
92:35:c2:2f:74:39:53:a7:d9:74:7d:5c:69:13:74:97:de:20:
36:7f:6c:5a:82:bc:57:7e:dd:7e:3a:8f:f2:13:0d:c8:c8:74:
6d:89:fa:de:a4:9f:a0:6d:30:53:bd:01:4c:5c:f3:9d:1e:28:
58:4e:7c:08:6c:22:2a:3b:dc:f5:5d:10:e1:8b:a6:11:92:47:
cc:90:22:c7:20:dd:9c:7b:53:a0:b7:db:aa:ac:ec:12:61:51:
6f:1a:2d:e1:aa:c6:7c:00:25:8d:d8:33:84:70:d7:c8:42:e9:
57:30:21:4b:63:6e:2f:cc:27:97:ff:b1:54:14:c1:d8:81:8e:
0f:71:99:b7:eb:90:90:14:26:bf:99:cf:45:8c:da:30:5d:fe:
49:f1:15:af:9d:37:32:5a:fe:93:9b:af:a5:99:89:b7:c8:98:
61:a2:71:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4
MkU2RkVEREYwHhcNMjYwNTExMDI0MjMzWhcNMjYwNTE4MDI0MjMzWjAYMRYwFAYD
VQQDEw02YTAxNDIxYS0zYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyev6h1PwVvThVXmvOLxwAqLemix8FBsEt47SESE+V5+IRO6tJT4ShWMnoYSO
avDGulEG54s2C58F+gQBz1oFv05s6iuW39w+QBv8SYhZ4DOMZKY/D9YNCu4X9SIK
vhj6OGIHVq9Jn1LHMXf+YbvDj4LJgvuFjf28E83SEuhUPhPr4jBBe1mX466THFnf
recd+PLb+neIqGWzGygGWcTKmY4GHOJK1bwTNE4pYeKsRDJsEOK/ujkEr4b8nGnx
MffR9PMJEVMoxVlzOIjccCQ7QwL8S3BH+TeeKqWS3UoBv/4FTW2l3LAj5AdhlTUG
TDQ80sGF0K+1IoUBnnMegMWgzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjoVTVx
3IiHW9/yDgMIrMq/px8aMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF
Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI
R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKhca4RrrUamz2HHDNlOfpsALWICkh3PmukictlA4pQ8LsNit1myejQvwuCkg
IGYhaLg9QVSpaLaNvH1ceg/EMpQ6paaKMvJtelQB2ndM31Y2l3UMJp1VF+BUkjXC
L3Q5U6fZdH1caRN0l94gNn9sWoK8V37dfjqP8hMNyMh0bYn63qSfoG0wU70BTFzz
nR4oWE58CGwiKjvc9V0Q4YumEZJHzJAixyDdnHtToLfbqqzsEmFRbxot4arGfAAl
jdgzhHDXyELpVzAhS2NuL8wnl/+xVBTB2IGOD3GZt+uQkBQmv5nPRYzaMF3+SfEV
r503Mlr+k5uvpZmJt8iYYaJxNA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:49 2026 by rpki-client