
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: BLvxzq9vCjS3qIz6MTpJhqGSepoGTe2Yf7BC5Lh0U+A=
Subject key identifier: C2:B5:A2:A8:1E:87:38:C6:BE:48:5B:41:31:AB:C2:37:E6:25:5A:95
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 0255
Signing time: Thu 23 Jul 2026 03:31:36 +0000
Manifest this update: Thu 23 Jul 2026 03:31:35 +0000
Manifest next update: Thu 30 Jul 2026 03:31:35 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: vONt2lokO6PrxP0Yylt47xOpyAbc7rishOharUQzwAQ=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: Ra5FAe6QIo7u3tetqw7Uoy+AfeHeu6ofRnf40F+mZ8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Jul 23 03:31:35 2026 GMT
Not After : Jul 30 03:31:35 2026 GMT
Subject: CN=6a618b18-a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:6e:a7:27:c5:0d:2d:a3:c0:bd:cf:24:04:
65:51:f6:56:bb:19:37:be:68:22:be:dc:72:2c:20:
c3:d8:20:00:bf:5d:bb:7e:03:2c:0a:e8:c4:97:ea:
1e:ad:b9:cd:6a:21:b6:53:bd:84:a0:b8:e6:92:15:
ca:24:f6:b9:3a:82:5d:a8:87:57:b4:82:89:5d:b5:
8a:06:46:18:61:b2:1a:9f:8c:53:33:80:e3:5c:fb:
22:37:7c:3d:60:1d:13:22:fd:f9:78:69:8e:c6:5a:
ac:c2:b3:5b:e4:ff:8b:4d:c5:eb:8e:97:a3:9a:9e:
66:7a:e4:a7:74:5d:a8:91:c1:08:d8:d6:c0:de:16:
9f:24:22:81:3c:64:45:c7:93:16:d0:fe:d8:0b:a3:
4b:f1:e5:c5:7e:4c:d0:23:f9:d7:c1:98:04:fe:fa:
94:00:f6:01:58:26:64:6f:04:9b:d2:81:22:9d:0e:
9f:3c:04:fe:08:a1:cf:61:d5:a5:c9:e1:29:bd:56:
80:1a:e7:9f:cb:0c:5a:f0:0c:18:68:e8:76:15:cf:
d5:78:18:91:39:2c:5f:8c:be:0e:39:bb:bf:a9:ee:
39:0e:06:cf:24:43:b9:4d:4c:60:f7:34:1d:36:07:
08:68:3e:bc:e3:1c:02:b3:5f:4b:8c:93:f8:f2:74:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B5:A2:A8:1E:87:38:C6:BE:48:5B:41:31:AB:C2:37:E6:25:5A:95
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f0:15:5e:5d:47:b2:32:66:88:39:0b:11:2b:f4:96:7d:b7:
1a:9f:07:2e:2e:8d:bd:75:09:73:33:f3:99:c7:a1:46:88:63:
bc:cd:b6:89:17:ff:87:ab:03:35:00:ac:c7:2d:6a:07:cd:2e:
f5:ed:89:6a:cc:05:6e:73:2d:ad:f9:04:6c:6c:a4:d5:9f:55:
98:02:a3:a4:0c:19:9d:1c:22:2e:52:1e:6d:3d:87:87:09:23:
96:2e:b9:a8:e8:f3:e6:2f:38:45:d4:a2:ad:90:e0:53:30:ff:
b9:b4:fe:b8:a7:87:bc:0a:2b:ff:1b:87:10:ce:a0:00:d0:25:
12:45:ef:b6:d3:4b:d7:7f:ab:61:39:c5:bd:fa:70:5c:75:84:
5e:3f:fb:2a:f3:66:fb:c3:93:1b:d5:bc:53:b2:4d:ca:24:b7:
a0:6d:64:f9:16:c2:e7:ec:44:87:ec:82:37:5b:3d:0c:ba:3b:
f2:ab:47:a7:4c:26:c2:76:ba:dd:58:df:86:63:e4:79:22:a2:
e4:fa:da:4f:6f:0e:ac:88:25:f4:d2:f9:9a:45:8c:7b:c5:29:
ae:ed:b3:ea:0c:57:f8:8f:cc:0a:eb:61:f9:62:2d:c7:9e:47:
c5:c0:70:de:b7:d7:ee:21:96:f4:3e:61:d4:5d:ce:5a:5f:7b:
78:ad:f6:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4
MkU2RkVEREYwHhcNMjYwNzIzMDMzMTM1WhcNMjYwNzMwMDMzMTM1WjAYMRYwFAYD
VQQDEw02YTYxOGIxOC1hOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu05upyfFDS2jwL3PJARlUfZWuxk3vmgivtxyLCDD2CAAv127fgMsCujEl+oe
rbnNaiG2U72EoLjmkhXKJPa5OoJdqIdXtIKJXbWKBkYYYbIan4xTM4DjXPsiN3w9
YB0TIv35eGmOxlqswrNb5P+LTcXrjpejmp5meuSndF2okcEI2NbA3hafJCKBPGRF
x5MW0P7YC6NL8eXFfkzQI/nXwZgE/vqUAPYBWCZkbwSb0oEinQ6fPAT+CKHPYdWl
yeEpvVaAGuefywxa8AwYaOh2Fc/VeBiROSxfjL4OObu/qe45DgbPJEO5TUxg9zQd
NgcIaD684xwCs19LjJP48nQgzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMK1oqge
hzjGvkhbQTGrwjfmJVqVMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF
Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI
R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMfAVXl1HsjJmiDkLESv0ln23Gp8HLi6NvXUJczPzmcehRohjvM22iRf/h6sD
NQCsxy1qB80u9e2JaswFbnMtrfkEbGyk1Z9VmAKjpAwZnRwiLlIebT2Hhwkjli65
qOjz5i84RdSirZDgUzD/ubT+uKeHvAor/xuHEM6gANAlEkXvttNL13+rYTnFvfpw
XHWEXj/7KvNm+8OTG9W8U7JNyiS3oG1k+RbC5+xEh+yCN1s9DLo78qtHp0wmwna6
3VjfhmPkeSKi5PraT28OrIgl9NL5mkWMe8Upru2z6gxX+I/MCuth+WItx55HxcBw
3rfX7iGW9D5h1F3OWl97eK32tQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:55 2026 by rpki-client