
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier: yqXBCBOP/Pwi5hrgJXJbo9NcNAFhLMJz2WtcJTfeWc0=
Subject key identifier: 99:19:D6:AA:A7:F1:C4:D7:4B:B3:86:37:89:80:8C:E1:A3:6B:66:63
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number: 02AC
Signing time: Sun 25 Oct 2026 02:06:35 +0000
Manifest this update: Sun 25 Oct 2026 02:06:34 +0000
Manifest next update: Sun 01 Nov 2026 02:06:34 +0000
Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: boDtslGf4v6NMXmHTtZRa7heJLao+pgB3YStvABXFts=)
2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: EM/KOkF5SIj09EIDJvtomVdUlaIY1tXE0xhdTGi6p4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Validity
Not Before: Oct 25 02:06:34 2026 GMT
Not After : Nov 1 02:06:34 2026 GMT
Subject: CN=6add642b-9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:55:24:09:d5:fe:2c:52:37:88:2a:b8:39:
cd:28:7c:08:bf:0c:7b:f3:f7:26:17:59:a5:14:88:
47:e0:35:85:ce:1c:b6:3e:dd:73:c8:be:29:b8:d3:
01:21:5a:1d:31:9d:fb:e5:e3:22:64:f3:3c:60:b6:
1f:79:fe:d6:91:5c:85:c5:76:19:95:ea:f4:3f:01:
50:03:c0:4b:2a:71:41:da:03:89:9c:76:c5:b3:85:
ce:b5:ae:e7:0b:7d:66:1a:c3:07:b4:4b:c6:d1:38:
36:dd:bc:14:8c:50:a8:15:a7:73:1d:37:1c:f9:67:
8f:47:25:17:79:e1:70:33:bd:14:69:04:b3:a1:59:
e4:e1:c0:fc:a5:4b:63:b9:2a:5f:4f:a0:20:b2:0e:
47:c6:eb:9e:5e:06:23:e2:d5:f6:4e:24:75:c1:ed:
b7:40:ff:69:a9:9f:b6:02:91:19:0f:b7:cd:10:79:
05:89:5a:1f:ae:a0:32:18:86:2a:36:df:71:1d:b3:
58:49:81:9f:6c:8c:3e:fa:88:62:85:39:16:3b:9d:
c3:24:0a:1c:e4:fd:52:55:15:5b:29:43:f3:df:a0:
4e:22:a9:37:81:18:b1:d0:69:2b:6b:db:73:b2:de:
97:4d:6f:50:cf:59:a3:36:9b:b3:6a:cc:ec:bd:ef:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:D6:AA:A7:F1:C4:D7:4B:B3:86:37:89:80:8C:E1:A3:6B:66:63
X509v3 Authority Key Identifier:
keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:c0:39:c8:85:0c:35:8c:38:cd:b3:be:80:47:82:a9:88:
46:ea:83:e7:4c:4d:5a:41:a4:ae:e7:41:db:00:05:17:5b:5c:
75:e9:52:e9:06:07:70:4e:a7:c6:0d:68:d8:cb:64:b2:cd:76:
b2:40:5d:fe:66:a4:95:87:1d:5a:5e:36:1e:97:5c:29:ba:f8:
2f:12:dd:97:f5:72:82:5e:39:ec:e5:aa:6d:a8:5a:a4:6e:4e:
46:af:00:67:5d:d0:c3:c9:8d:c3:71:11:3d:9c:0f:fc:c7:d0:
10:bb:7c:61:ec:f6:f7:7e:20:28:39:5a:ca:55:0c:09:3a:d2:
8a:b5:85:ac:24:8d:d0:6a:fe:1b:c4:cb:dc:62:53:ee:de:89:
77:82:43:9a:fd:dc:39:7e:27:78:cd:52:e6:91:50:1a:33:d5:
45:9e:e4:7c:fb:c9:16:84:33:2e:4b:52:26:73:d5:1f:aa:5c:
0f:d2:a7:95:d1:75:e0:b9:5b:a4:c9:60:e3:c1:22:4b:d0:df:
4d:d2:10:d4:e6:50:d7:9b:93:69:b9:02:51:0d:f1:6f:d0:09:
ee:80:9c:ba:89:54:f7:f0:06:9a:f9:db:99:24:8c:87:36:9d:
13:e6:7e:be:51:08:0a:60:b1:0b:4e:8f:0d:78:90:87:9a:63:
b0:6f:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:45:59 2026 by rpki-client