
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: tQVnyVcg8Xt5ZbYCkQAj4OubVx+sdVizratWRSPif2Y=
Subject key identifier: 0F:1C:1F:75:2F:0B:92:E6:E1:76:92:38:89:6E:D8:78:76:A5:E3:18
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 0285
Signing time: Sun 25 Oct 2026 02:14:06 +0000
Manifest this update: Sun 25 Oct 2026 02:14:06 +0000
Manifest next update: Sun 01 Nov 2026 02:14:06 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: kY3hzl77hKjrZ1Vb2nBUJwIH39ocDiUKc8E453XjTg4=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: Ra5FAe6QIo7u3tetqw7Uoy+AfeHeu6ofRnf40F+mZ8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Oct 25 02:14:06 2026 GMT
Not After : Nov 1 02:14:06 2026 GMT
Subject: CN=6add65ee-dc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:b4:b7:9a:3f:34:56:23:b4:8f:a9:19:84:
1a:b2:9f:0b:04:96:20:35:29:fa:d5:7a:a1:50:ca:
47:a0:d0:a4:2a:33:10:8c:8b:ed:16:5b:62:6a:c9:
d0:ed:88:b2:08:d7:30:1a:e7:c0:23:11:f4:6e:22:
08:ee:d7:2e:c8:e7:fc:e7:98:03:cd:13:18:22:c6:
1e:88:0c:9d:32:63:a2:ed:53:a0:da:dd:49:ee:e0:
00:4a:8c:9d:9c:de:85:ae:7b:c7:67:6f:d3:7a:5f:
62:37:fb:75:a1:50:d0:65:2d:80:11:63:a3:ca:00:
84:24:05:dd:d4:92:e6:4b:eb:f4:66:cf:4c:22:5f:
f9:b8:ec:1f:3c:99:b9:10:93:78:20:58:84:b4:0f:
d8:61:6f:ae:6d:de:f5:aa:7e:85:f3:af:98:46:85:
48:52:cd:26:0f:3b:78:ce:85:61:bb:db:c6:fe:f8:
0f:ce:c1:bc:c9:ed:37:43:5d:87:31:18:fc:c0:0e:
36:b3:75:79:e7:bd:14:10:af:63:70:76:95:46:11:
0c:df:c5:81:57:43:9f:ae:df:9f:f3:17:13:33:74:
40:09:c7:bf:63:e7:5b:bb:67:e0:93:da:bf:37:be:
8b:17:44:7a:15:45:64:e5:3d:7e:34:ab:e2:12:0c:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1C:1F:75:2F:0B:92:E6:E1:76:92:38:89:6E:D8:78:76:A5:E3:18
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:48:d8:07:ed:67:41:6f:ff:e7:8e:fb:6e:6b:ed:1a:c1:b3:
c0:27:36:0a:97:b3:c7:37:e5:2b:be:61:68:0f:8b:c5:03:c8:
aa:1b:b7:c6:f7:c8:51:2d:95:8b:8e:33:7f:8b:b4:37:8e:a8:
2d:3b:c1:a1:ac:96:76:a8:f1:b8:8e:c6:b6:c2:11:d4:d1:63:
b3:c5:56:9f:c4:8a:84:43:22:a2:f1:6c:cb:16:62:51:2b:57:
60:39:45:ff:88:09:98:da:9e:01:8d:de:bf:c2:19:6c:34:7d:
69:4f:96:4c:7c:f8:3c:ae:f2:32:f9:80:93:56:36:60:69:86:
73:72:be:cb:f9:74:11:36:65:9a:9f:19:87:00:7d:e2:58:72:
9b:24:0a:fd:1d:0a:0a:c3:d8:40:58:22:02:0d:e6:4f:b4:f6:
0e:ac:1c:15:63:a8:98:2f:39:08:52:46:fe:ee:e1:f4:e9:aa:
b3:9c:66:ad:21:f0:48:0c:30:ea:ad:44:d7:1a:c6:42:6c:e5:
30:2b:ad:7a:ec:b8:3e:9b:c9:d3:ea:6a:c5:25:a1:a0:08:5b:
c7:e9:ee:e4:0e:20:9f:3a:ab:a2:c8:1f:22:19:32:cc:4b:6c:
82:d2:2a:31:35:9c:e1:61:81:ac:c2:46:b0:53:ac:81:04:8d:
16:2f:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:43:39 2026 by rpki-client