
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier: d5ZAagntiG4AVqeT32QgTShOLnkV2hu49OPOebzo3JU=
Subject key identifier: F3:B0:C6:7C:E0:F9:FC:83:99:15:68:B8:D7:BA:7A:E8:89:39:3C:37
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number: B6
Signing time: Wed 13 May 2026 07:10:37 +0000
Manifest this update: Wed 13 May 2026 07:10:36 +0000
Manifest next update: Wed 20 May 2026 07:10:36 +0000
Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: tF1wkjI1BImHTWOvcYCofbqYlq7zOtJZRgOkVdTdCqo=)
2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Validity
Not Before: May 13 07:10:36 2026 GMT
Not After : May 20 07:10:36 2026 GMT
Subject: CN=6a0423ec-3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:a5:37:6f:fc:b5:5e:69:0b:8b:a0:60:25:
a7:47:34:4d:90:90:15:e0:3f:1a:03:d5:f0:a3:6a:
80:10:58:57:f6:7e:0f:12:b5:da:e1:b5:4a:a1:41:
a9:a2:fd:a7:09:43:7f:a4:14:16:0e:4f:48:c1:a0:
cf:a9:dc:a1:1c:97:61:86:d3:ab:1a:65:3c:65:50:
4c:3d:41:3c:c3:95:d2:f0:69:88:04:a9:95:32:16:
6d:19:d3:87:e7:0c:19:b6:15:ad:33:ab:b9:d2:94:
28:ea:6e:74:85:5c:ff:b9:7b:5f:72:69:b2:c0:de:
bf:1a:2d:0b:34:e0:fc:bc:b5:28:70:a3:d8:ad:46:
e7:59:f0:58:b0:43:0a:94:73:29:e7:27:7a:07:e5:
7a:d0:e7:6e:a1:a1:85:76:2f:87:4b:5e:30:32:f1:
75:3e:61:e1:ac:9b:5a:96:5b:38:f4:8f:c0:0a:40:
49:4b:e8:08:13:77:9a:bf:63:be:76:50:1d:eb:ed:
9d:71:59:21:b5:96:15:6a:1d:6d:f6:e4:38:3b:66:
4d:d0:15:c3:05:59:de:d2:8e:bd:8c:ff:b1:7a:4b:
52:b3:96:e5:3d:1c:14:15:62:2a:70:92:78:91:1b:
d1:97:7b:3f:37:b7:7a:bb:ce:df:51:5d:86:89:5c:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:C6:7C:E0:F9:FC:83:99:15:68:B8:D7:BA:7A:E8:89:39:3C:37
X509v3 Authority Key Identifier:
keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:79:73:2c:2d:e8:ec:7c:c7:68:e6:14:e2:fd:9e:43:9c:
55:ed:bf:60:d0:5a:0b:94:9b:fb:52:cd:ec:b6:30:d0:ff:a5:
b4:8a:7e:47:18:aa:01:80:f7:ef:bb:b6:0a:0b:a8:0d:e3:cb:
2f:01:f9:06:19:8a:aa:a7:b8:6d:10:c7:82:74:ac:d3:9c:f3:
a3:c3:6e:19:bf:14:95:7e:f5:f9:ab:62:a3:66:33:4b:37:d1:
6e:6e:e7:20:1e:3e:58:6c:5d:43:26:31:da:88:43:2e:5c:76:
a6:44:16:a1:8e:7a:f3:bf:8d:b7:d9:83:0c:88:9c:4e:ef:7b:
21:1e:66:55:d6:8d:1e:f1:ce:f1:67:df:1a:17:5f:13:b3:e3:
0b:1d:48:20:ed:c5:77:40:f9:61:f8:c3:0b:c8:0a:bc:ee:a0:
86:e3:ac:47:ec:b6:32:12:d0:29:07:02:93:b9:c0:24:ee:76:
84:c5:36:34:9d:6c:cd:4d:64:bc:3b:0b:cd:7d:1c:18:33:ea:
31:40:47:a4:9c:4a:41:d7:b0:e5:0d:d4:c9:e8:b7:2c:c3:40:
64:17:fd:4c:80:ef:5d:bc:f1:90:49:00:39:85:b7:6a:f5:d1:
d7:da:0f:6b:be:40:78:31:1f:83:ad:ae:34:20:45:3a:28:1f:
30:46:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:31 2026 by rpki-client