
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier: WIFawYFML+eMt6VudVb5v/AT8CIq37nBe5mziauPAOc=
Subject key identifier: 1C:A7:C2:49:E0:D3:37:15:D0:66:21:92:05:2A:03:94:08:22:5E:C8
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial: 08C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number: 08AF
Signing time: Wed 20 May 2026 20:33:52 +0000
Manifest this update: Wed 20 May 2026 20:33:51 +0000
Manifest next update: Wed 27 May 2026 20:33:51 +0000
Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: Larxs6oIcCQAAACW2/wQ090eX76GqCQIuVrq89hSXJU=)
2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: zOV7yFGbs0pfqUQajI5z0XYeqwWi+v4bPf0Ma7OIoeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Validity
Not Before: May 20 20:33:51 2026 GMT
Not After : May 27 20:33:51 2026 GMT
Subject: CN=6a0e1ab0-f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:70:5d:f3:88:57:5a:61:29:57:9e:00:1d:
1a:b6:3b:71:9c:37:2f:f9:72:e6:96:d8:20:f2:46:
19:bb:85:e0:79:92:d2:20:ad:f4:89:c5:42:f1:db:
44:ea:aa:44:48:58:24:02:49:90:b8:10:2a:50:13:
98:bd:15:26:9b:e6:92:47:85:09:e5:be:5a:5c:1e:
d6:b6:d5:83:49:3a:04:5f:c8:4d:4b:49:3f:9b:d0:
34:4e:97:9d:d9:7e:e3:b9:39:3d:5d:21:a7:c3:73:
d9:fb:a3:8d:37:ae:97:82:4f:3e:b8:6a:a9:d3:0a:
6d:c3:47:67:22:00:6d:45:e7:74:a7:a7:4b:c3:04:
f9:e9:18:34:e2:70:d0:af:3b:bc:c1:a2:2c:49:09:
79:40:55:a2:4d:9f:63:2d:fa:b0:21:f5:46:d2:09:
cf:40:09:67:6f:e6:eb:37:64:ea:2b:3e:37:49:48:
1b:e1:c6:ea:54:b8:4b:4b:39:28:b4:91:44:58:cf:
53:f1:91:2e:38:c3:8c:a4:c4:6c:ed:92:39:31:d4:
47:b4:36:3a:f0:f5:96:40:50:f3:e6:18:46:cb:ef:
cb:47:2b:3b:7b:d9:8c:fb:76:fe:48:fc:ae:ea:ad:
4e:32:b1:42:96:a0:e6:4c:47:53:d6:f5:48:dd:9a:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:C2:49:E0:D3:37:15:D0:66:21:92:05:2A:03:94:08:22:5E:C8
X509v3 Authority Key Identifier:
keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:78:e0:49:be:09:ca:d6:a0:8e:25:9d:0a:a1:2d:72:18:
c3:db:bc:43:9c:63:c1:b7:5c:0a:9f:f0:df:1a:00:73:10:07:
1a:6a:10:e4:42:8e:f1:09:e1:ab:4a:26:8f:ee:b5:b2:0c:92:
09:ff:6a:5f:a4:5d:fc:61:9b:eb:47:8b:b2:53:7c:3f:88:92:
19:f8:c1:41:19:73:8b:71:2b:61:fd:e6:2a:01:90:f4:50:cc:
0d:fc:b8:17:bd:5b:37:23:23:ba:6b:6c:d3:c9:d1:fa:3e:66:
cb:33:58:4f:88:b1:a9:7d:73:1f:86:9b:a1:0a:d0:17:19:ec:
40:29:ec:e7:96:7e:8a:e4:fc:48:c9:60:40:36:c6:44:41:8e:
e5:8a:39:07:ce:71:8e:88:51:86:a9:77:92:c8:96:46:8e:61:
34:54:fb:3c:cb:96:89:5e:8c:57:2b:48:c7:aa:70:fa:ce:20:
79:7b:b8:09:c3:46:40:f4:01:54:86:38:ea:e2:ed:11:3d:8a:
91:7b:df:83:f8:23:00:26:07:92:30:6b:81:03:13:9c:f1:a5:
05:63:53:85:ce:1c:9e:f8:e0:1e:1a:eb:bb:9c:ed:bf:4c:3e:
49:6e:56:8f:10:2c:48:54:fd:1b:be:3b:af:a4:fe:5c:f6:d9:
da:d0:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:12 2026 by rpki-client