
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json)
Hash identifier: r//bvm/v/ki8Q1ZGIt53RxsH2MEoyYMv0PNgtXoTqjk=
Subject key identifier: 2D:3A:24:34:D2:6D:7A:F7:D8:C1:13:F3:89:0D:0D:69:1C:AD:A3:84
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
Manifest number: 020C
Signing time: Mon 27 Apr 2026 02:48:40 +0000
Manifest this update: Mon 27 Apr 2026 02:48:39 +0000
Manifest next update: Mon 04 May 2026 02:48:39 +0000
Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: TfbeJLmYqhM+IXoWSE2l1hCgjcGKOACdnki9un5vc48=)
2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: oX5jPgoEnJEiktMzwRJVvIVKVxoixwhb1Y5ipQvJJlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Validity
Not Before: Apr 27 02:48:39 2026 GMT
Not After : May 4 02:48:39 2026 GMT
Subject: CN=69eece88-3c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:43:f7:c0:7b:11:66:90:69:ac:c2:ad:90:
b6:b7:c3:ea:95:9b:b5:e4:32:53:29:d6:9d:51:cb:
75:7c:0e:dc:1f:cb:ec:b3:19:e0:e6:b7:76:b4:39:
2d:1f:7c:0a:aa:52:ad:e6:43:a2:51:4e:aa:41:51:
95:47:66:f7:95:e9:ce:0a:d7:c5:23:83:35:c4:82:
f0:e6:ae:cf:21:6b:e5:03:2c:90:35:39:b1:68:fb:
7a:f1:13:51:08:26:a3:d6:d8:c6:85:46:5f:fa:b8:
60:b9:39:43:c4:e0:98:fb:7c:82:4d:d9:15:a6:0e:
cb:f3:90:2f:14:66:36:f9:8b:ff:24:e8:14:aa:19:
89:ac:7b:e2:94:a7:1b:58:5c:3b:44:ad:66:cb:cd:
f9:21:d1:a7:94:63:fb:68:b9:b9:a7:f1:1d:6b:6e:
60:7d:d5:cf:3c:c8:95:ab:79:d0:5d:ab:97:ab:d5:
f6:65:0c:70:de:94:25:02:6a:0a:36:73:78:0f:7f:
57:50:21:d1:ac:70:ab:7c:0e:ef:d2:90:09:2c:3b:
a8:a7:cf:5a:f2:af:76:20:ba:1b:b1:00:b3:a1:35:
26:c8:8c:85:d3:7e:14:0f:3a:c0:a2:14:83:b7:ed:
98:99:3d:11:57:1d:36:52:a1:53:c2:8a:a4:13:6a:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:24:34:D2:6D:7A:F7:D8:C1:13:F3:89:0D:0D:69:1C:AD:A3:84
X509v3 Authority Key Identifier:
keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:f2:29:d7:97:0b:27:33:bf:73:bc:42:c2:1d:7c:b2:0a:
d6:69:aa:5e:99:a8:7f:3a:c4:89:47:ca:67:08:70:b0:b0:6c:
d8:8e:b7:af:9b:6e:e9:b2:a5:e0:9b:78:18:6d:f9:96:c8:3e:
5e:a5:8c:e3:66:c2:08:44:af:88:a2:fa:96:e3:90:a8:c2:c2:
45:f6:16:ab:3e:1b:14:a9:88:13:89:9e:2b:6a:69:82:d3:32:
5b:0f:ca:73:5b:fb:b9:0e:66:16:e5:15:7f:83:f9:48:e1:b3:
4a:6d:d5:bf:e1:48:03:c5:5a:5a:08:71:e4:0a:60:9b:35:f7:
44:40:c6:03:e2:71:f1:7a:97:1a:39:cc:83:5f:d4:d6:24:9c:
ea:a6:98:a5:92:b3:1f:07:63:c6:89:0b:14:b0:e3:a0:20:08:
4b:06:5a:a4:5a:17:f3:14:46:6d:2a:7a:e6:b8:85:1f:d5:16:
fd:30:12:ce:f1:45:db:49:7f:16:0e:8c:2c:9f:4a:ca:42:2a:
6a:10:b0:60:fa:1a:1c:10:74:04:bb:25:29:b9:17:2e:b5:b2:
0a:3b:0e:da:7f:45:58:95:40:92:43:60:6a:a4:a2:7b:cf:ef:
f8:ec:57:39:f7:de:a1:a5:e3:8e:51:ee:02:69:5c:d3:8b:10:
2e:23:bd:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4
Qzc2NDBERjYwHhcNMjYwNDI3MDI0ODM5WhcNMjYwNTA0MDI0ODM5WjAYMRYwFAYD
VQQDEw02OWVlY2U4OC0zYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVFD98B7EWaQaazCrZC2t8PqlZu15DJTKdadUct1fA7cH8vssxng5rd2tDkt
H3wKqlKt5kOiUU6qQVGVR2b3lenOCtfFI4M1xILw5q7PIWvlAyyQNTmxaPt68RNR
CCaj1tjGhUZf+rhguTlDxOCY+3yCTdkVpg7L85AvFGY2+Yv/JOgUqhmJrHvilKcb
WFw7RK1my835IdGnlGP7aLm5p/Eda25gfdXPPMiVq3nQXauXq9X2ZQxw3pQlAmoK
NnN4D39XUCHRrHCrfA7v0pAJLDuop89a8q92ILobsQCzoTUmyIyF034UDzrAohSD
t+2YmT0RVx02UqFTwoqkE2q3uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC06JDTS
bXr32MET84kNDWkcraOEMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG
QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ
MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrHyKdeXCyczv3O8QsIdfLIK1mmqXpmofzrEiUfKZwhwsLBs2I63r5tu6bKl
4Jt4GG35lsg+XqWM42bCCESviKL6luOQqMLCRfYWqz4bFKmIE4meK2ppgtMyWw/K
c1v7uQ5mFuUVf4P5SOGzSm3Vv+FIA8VaWghx5ApgmzX3REDGA+Jx8XqXGjnMg1/U
1iSc6qaYpZKzHwdjxokLFLDjoCAISwZapFoX8xRGbSp65riFH9UW/TASzvFF20l/
Fg6MLJ9KykIqahCwYPoaHBB0BLslKbkXLrWyCjsO2n9FWJVAkkNgaqSie8/v+OxX
OffeoaXjjlHuAmlc04sQLiO9tg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:31 2026 by rpki-client