
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier: Pblwc9szf/lax+EArl6HGVQqaU67Deuqk2BrKpMRdoI=
Subject key identifier: AF:C4:7F:37:5B:80:F9:6D:BC:10:BE:B0:62:D7:1E:D6:BF:34:87:96
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number: 026C
Signing time: Sat 05 Sep 2026 01:58:23 +0000
Manifest this update: Sat 05 Sep 2026 01:58:22 +0000
Manifest next update: Sat 12 Sep 2026 01:58:22 +0000
Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: keFZMkDPZhv0vMyWi6ikSj7t4wKiBacICCwqz4SXaaQ=)
2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: Ra5FAe6QIo7u3tetqw7Uoy+AfeHeu6ofRnf40F+mZ8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Sep 5 01:58:22 2026 GMT
Not After : Sep 12 01:58:22 2026 GMT
Subject: CN=6a9b773f-50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:c5:44:06:10:6a:f8:c1:2f:30:28:9a:57:
e2:14:73:f0:35:9f:76:d5:c6:31:71:b8:01:33:68:
ef:0c:6a:0e:25:92:f7:dd:20:68:6b:8d:b0:d3:f3:
42:da:aa:a7:5f:62:44:30:59:ed:7f:35:9e:be:b7:
b5:15:c1:d5:26:52:fd:63:fe:5a:7f:33:d4:77:53:
a6:81:4a:5b:a5:3d:84:64:d1:fb:4d:ad:f1:55:83:
fe:a5:03:3f:07:af:f4:2c:d9:72:6f:e2:88:b2:49:
a0:99:6d:de:e6:77:64:e7:aa:32:07:96:df:43:6b:
4a:54:c0:91:60:2b:6d:e5:6f:93:3a:d8:67:ca:10:
7b:2e:fd:78:d3:68:4a:38:6b:1c:f2:c8:5a:eb:20:
10:37:22:19:74:48:71:79:af:73:a1:be:6d:c6:3c:
ff:84:fd:3f:dd:cd:ed:e9:e4:96:1c:f9:86:4d:20:
c5:0b:ef:84:a2:37:cd:55:e7:d9:da:a7:80:67:cf:
c9:80:cc:c4:57:a4:10:25:cd:0b:50:1b:d3:5c:93:
1e:da:6a:99:df:e9:a0:56:c6:37:68:af:72:58:e3:
2f:93:53:20:dc:84:91:b0:c5:dd:b4:2c:73:14:c4:
1e:e6:eb:ba:b1:ae:e1:fc:6f:18:66:ba:b4:97:8b:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:7F:37:5B:80:F9:6D:BC:10:BE:B0:62:D7:1E:D6:BF:34:87:96
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:d6:16:12:e9:4d:36:ea:cc:44:a3:b2:fd:e9:e5:1f:e7:
c7:3e:a3:a5:55:7d:0e:97:11:5d:e9:f9:e8:16:c3:4f:72:fd:
84:1a:16:d4:c7:1f:37:ae:72:0f:43:d4:ae:e0:d7:de:ed:de:
96:c2:0f:b2:75:30:2c:42:4b:27:b5:50:79:24:21:12:6a:11:
f1:41:57:8e:b7:10:d0:08:93:a6:68:b4:24:a8:e0:41:9b:2d:
08:7f:ef:36:cb:31:ea:76:2b:61:64:9d:5e:3d:1c:82:07:b1:
6b:e7:1a:77:a5:f1:d8:0d:ee:2c:bb:3a:7a:38:84:76:12:f5:
a8:fc:bf:13:41:03:7d:cc:d2:16:8f:01:b1:8b:e5:52:44:5c:
4c:f1:e0:09:4d:f7:ee:82:3f:e8:9b:13:8a:a3:5d:57:c7:aa:
1b:e1:dd:76:57:a9:b1:4b:5a:3a:a1:c0:73:59:91:9a:36:12:
4e:4b:c0:48:f4:c8:1d:f1:f8:0e:b4:27:8e:f4:e2:29:6c:51:
2d:14:8c:46:93:3c:d7:f2:56:3e:d6:0c:69:5c:08:90:2a:1b:
82:6e:b2:f0:a4:02:82:1b:5a:91:21:58:fb:d7:97:fa:9c:68:
bb:51:84:53:85:97:f5:66:42:56:54:5f:a3:eb:65:96:61:88:
c3:1d:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:15:15 2026 by rpki-client