
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: BxzJoEHW6J/AzD3XuverA7AbBd/HH9G1apvpbBeBP/k=
Subject key identifier: 3B:46:82:1B:19:7A:47:DD:F9:96:C1:51:4E:FE:82:5C:66:12:64:24
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 258C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2574
Signing time: Fri 24 Jul 2026 15:51:11 +0000
Manifest this update: Fri 24 Jul 2026 15:51:10 +0000
Manifest next update: Fri 31 Jul 2026 15:51:10 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: bpm0lwS7f8tNIB35mP95L2KGBufd9xHexxDWZ6oM/IE=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9612 (0x258c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: Jul 24 15:51:10 2026 GMT
Not After : Jul 31 15:51:10 2026 GMT
Subject: CN=6a6389ef-8aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:3c:74:eb:8d:2f:b2:27:04:b1:b7:5a:30:
5e:33:34:14:6e:c1:d5:ad:86:d6:44:fe:9c:37:d6:
11:93:75:0e:33:d7:f5:02:31:ff:31:56:d8:12:f6:
5e:38:bc:c3:7f:c6:ed:51:1f:f9:b1:99:ee:da:ff:
17:75:16:de:b0:38:91:6e:f3:85:c3:d7:ba:14:2f:
d4:d6:ad:07:a1:d9:02:2e:d1:ba:cb:44:05:dd:93:
ee:8b:9b:b6:93:bc:f8:e5:e5:83:50:f8:9d:c0:bf:
df:d3:10:e1:04:05:33:85:a8:b7:bd:72:49:0e:af:
b0:65:6c:21:0b:f1:57:89:2b:d7:80:69:01:5c:e1:
fd:b9:79:4e:59:d7:7d:fe:47:39:8e:27:9e:35:ad:
7e:71:02:83:90:ef:95:dc:89:44:b4:88:d3:3a:96:
14:5b:bd:ef:24:e4:cf:3d:d5:f7:7c:59:50:ed:be:
42:ca:8d:24:0b:e5:92:b3:42:ef:d9:54:c8:cd:4d:
4b:98:40:6f:17:4f:f8:fd:34:74:06:35:64:c2:1b:
c7:14:49:7f:c4:a7:45:cd:08:14:e4:4d:80:56:ae:
91:88:f8:cf:86:d2:97:9f:34:4b:69:45:3e:17:0e:
de:6e:34:1b:7e:fb:b3:a3:d7:48:3f:5f:8f:9e:97:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:82:1B:19:7A:47:DD:F9:96:C1:51:4E:FE:82:5C:66:12:64:24
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:91:8c:68:b8:b8:ae:97:6a:63:9d:8d:71:ec:52:b2:d8:
8e:b5:0f:2b:8f:a4:61:9e:9f:12:3d:69:56:93:c6:f3:84:d8:
73:27:d2:9b:77:8e:3a:45:d4:fe:aa:8a:49:77:2f:97:fc:46:
77:d2:c7:3d:f8:59:cb:08:4e:df:74:93:5d:87:66:fb:ab:ad:
6b:a0:10:ba:03:61:06:1c:9d:84:cf:3a:5f:b7:d7:88:10:bd:
9e:fa:9d:56:89:96:7e:17:e9:2f:e5:b4:92:cc:4f:02:0d:1b:
15:b5:b4:b0:0d:18:c6:0b:9e:96:26:94:fb:fb:0c:39:08:44:
21:fd:87:6b:b0:cb:9a:48:16:17:53:87:11:b2:b8:bd:63:1f:
37:9c:d8:85:ba:66:49:97:a3:74:47:3f:92:16:26:a8:06:d7:
f3:af:48:6e:bc:9d:90:5f:81:94:f8:45:37:c5:a9:68:2e:ac:
15:36:2f:ae:be:dd:0c:74:f4:5b:2c:70:15:bf:da:e5:53:dd:
0d:df:fa:7f:32:bc:48:e2:b3:80:c4:64:1e:79:95:e0:a8:1c:
af:90:0c:b3:0b:77:02:c8:56:96:9d:8d:59:53:79:98:fd:78:
cd:c3:20:af:ca:28:20:40:4c:ec:db:84:49:03:47:6a:5b:9e:
96:3a:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:30 2026 by rpki-client