
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier: WqAINs9nGyjsFryawLTTlzqGoe2U5NUUuIdq91QBgX0=
Subject key identifier: 0E:D1:9B:A4:C8:6A:E1:BA:BE:79:6D:3D:AC:AA:FE:26:88:3D:FE:64
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number: 03CB
Signing time: Wed 19 Aug 2026 01:00:02 +0000
Manifest this update: Wed 19 Aug 2026 01:00:01 +0000
Manifest next update: Wed 26 Aug 2026 01:00:01 +0000
Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: z9KXqiybMAEGmf4Q9SlidJKOmCcicY4a1UJYKViumRI=)
2: 3824E928764711F0980D9877C4F9AE02.roa (hash: RNrBzsULWKNLzQ9xO26elmeen/lXKp/Fjr/z7K/9x2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Validity
Not Before: Aug 19 01:00:01 2026 GMT
Not After : Aug 26 01:00:01 2026 GMT
Subject: CN=6a850012-5ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:f8:ba:61:7a:dc:6a:b5:bf:d0:3d:55:33:
01:01:69:d6:9f:2a:97:0a:c3:ca:4d:20:b5:46:25:
09:f8:8d:ae:a2:d4:a8:87:4a:4c:f5:4b:dc:db:76:
a3:0e:cc:b6:06:0b:1a:56:ab:83:fe:3d:c5:e7:8a:
94:b3:33:a4:dd:4b:b3:fa:45:da:b0:8f:7b:50:d8:
f1:2e:90:6f:74:83:fa:e8:b4:84:08:c4:30:7a:80:
de:d4:1b:00:aa:ce:f2:01:62:c0:35:50:1d:b1:76:
a0:c6:04:90:ca:c8:5b:aa:bd:48:f9:f8:85:24:99:
ad:7b:cb:bc:cc:2f:59:f2:46:10:0a:6a:ff:5b:0f:
2a:ff:b0:df:a0:c9:69:bf:7b:5d:d2:5c:8e:c1:a9:
62:7f:c7:f2:c7:52:60:ee:a6:a9:9f:0c:5a:9a:7f:
33:93:0a:cd:d1:8e:1e:af:46:3b:c7:12:8e:43:d3:
8d:73:7d:e4:08:15:81:b6:62:87:fd:ac:d2:5e:8a:
34:f1:aa:af:ec:c7:57:b6:2c:88:81:f4:03:bd:d7:
74:77:88:9e:8b:5b:9a:54:2e:5e:11:70:54:bd:25:
6b:0f:7b:f1:20:ad:09:7b:f7:5b:92:2e:74:2d:43:
60:03:85:f3:de:51:83:02:7b:57:8b:26:0e:d5:c2:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:9B:A4:C8:6A:E1:BA:BE:79:6D:3D:AC:AA:FE:26:88:3D:FE:64
X509v3 Authority Key Identifier:
keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:99:35:84:4c:c0:c7:ce:4c:b2:49:ef:6d:e9:56:b7:05:
2e:87:a7:47:68:da:e2:8d:73:59:55:07:06:4e:b1:86:c0:b9:
22:9b:9c:b2:74:81:0d:cf:06:f3:91:97:f9:d1:4c:e1:b2:91:
26:80:8a:2d:17:17:4f:5a:3f:b5:96:f6:64:da:3b:9e:e2:7b:
e0:01:3b:87:c9:66:c3:0f:8e:5e:2d:53:09:bd:27:68:ec:3a:
e8:9d:dc:f6:ee:56:3c:1f:5b:21:34:85:1c:c6:fd:74:98:7a:
de:af:11:7b:70:2f:b6:52:5a:54:33:80:d5:7f:37:76:7a:6b:
00:6e:00:af:5d:a8:a1:c5:76:2a:db:2f:63:9d:35:41:de:05:
03:d1:07:dc:c2:88:6e:b3:c7:7d:1b:05:41:16:32:91:70:f8:
6c:76:16:4e:b8:31:b4:48:d1:8c:ff:c2:70:b6:e3:c4:37:bc:
6c:3b:de:b5:7c:3f:f3:58:f4:9b:65:d9:7b:a7:f5:a9:e4:ca:
0f:ca:2c:04:b6:96:42:aa:74:a8:02:0d:4b:45:48:cf:4b:28:
41:57:0d:9b:ab:41:aa:46:f0:d1:87:2e:5c:94:ee:3d:8e:c7:
5a:93:e1:bd:d1:6c:0a:02:9c:af:c4:3d:47:78:f2:fe:19:48:
9c:82:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:02 2026 by rpki-client