
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier: yF6Jp3nfqOxzfvHKzSktNUdJqjACM4jTTVe94v4ES8w=
Subject key identifier: 4C:25:0C:79:F9:94:58:04:DA:36:66:4D:AA:1D:5E:EE:FD:53:A2:57
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number: 0104
Signing time: Wed 07 Oct 2026 06:40:07 +0000
Manifest this update: Wed 07 Oct 2026 06:40:06 +0000
Manifest next update: Wed 14 Oct 2026 06:40:06 +0000
Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 50FWgyvvVRHEYU+5obu0cpNNzaWaK8HlX//29O11IqA=)
2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: gIIumWSAkBw+/Kf2c0p6PpwOKZCEtqNskG3XhcLL5aE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Validity
Not Before: Oct 7 06:40:06 2026 GMT
Not After : Oct 14 06:40:06 2026 GMT
Subject: CN=6ac5e946-288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:93:2f:60:18:d2:8f:f7:5c:1e:10:a9:86:
a5:6f:8c:84:55:da:7e:35:0f:12:5a:e0:ad:7c:df:
06:8f:c6:51:a2:8a:1b:63:31:e3:bf:4f:2c:37:a7:
68:c6:e6:aa:05:5d:9c:c5:73:ed:28:9c:95:e7:80:
0c:61:20:c7:a6:62:de:52:47:2c:52:d9:42:f9:2d:
c1:6c:99:b8:ff:bf:40:c5:5a:70:e0:d9:3e:bf:11:
ef:cd:39:a7:19:48:ee:4c:ad:83:e8:4f:e1:18:41:
d3:20:ca:4b:7e:5e:3c:e0:bb:04:9c:90:2b:c1:bf:
46:8e:07:e7:bb:a5:8f:16:85:7f:da:13:b3:9a:b6:
b8:c3:d2:ab:af:69:e9:42:6b:7a:20:fc:7d:1e:a6:
49:cb:85:6b:87:e2:16:c8:41:d1:4d:5d:6f:5b:88:
e7:bb:a8:86:1f:d3:86:c7:17:c2:c6:2b:a6:7a:df:
30:49:5b:5c:a0:73:5e:c3:66:14:6d:47:a7:84:d1:
cb:c1:d7:28:c6:f8:1c:7f:08:fe:24:17:d7:01:dc:
00:d8:12:b1:6e:ab:2d:ac:f1:b6:40:6d:8b:b8:55:
df:74:3f:37:68:6a:4d:ed:b2:d7:42:53:75:81:98:
e3:ca:67:d4:b3:d0:20:d4:6d:ef:86:27:22:eb:33:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:0C:79:F9:94:58:04:DA:36:66:4D:AA:1D:5E:EE:FD:53:A2:57
X509v3 Authority Key Identifier:
keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a3:90:ac:83:9d:2e:9b:af:4a:7c:f6:f3:3b:ed:a3:49:09:
4e:4e:ec:12:58:67:63:7f:49:b0:b0:71:38:94:f1:0f:58:cc:
1c:08:ae:18:11:db:87:fe:82:dc:30:bb:44:bd:c1:1e:01:94:
2e:3f:b1:28:f6:44:3c:8c:da:91:64:84:bd:81:95:c4:dc:24:
e9:25:03:ce:67:b2:08:3d:98:86:9c:f5:20:19:51:92:53:a5:
58:88:63:60:e4:6e:e9:f0:2c:ce:1c:21:6d:e8:13:30:63:f4:
1a:ca:ad:b1:fb:03:b2:0f:4f:77:55:03:64:bb:5d:ad:36:da:
cb:d1:31:3f:f7:a2:22:05:37:5c:08:e3:2a:0e:53:38:18:8e:
37:c1:64:46:0b:7c:6f:35:38:85:1f:12:f8:9c:d5:fd:7a:b7:
08:86:f7:cc:2f:ae:8a:43:48:d5:cb:a7:e2:43:b7:ad:f2:f8:
27:27:e1:73:bb:0c:84:b6:f7:d7:5b:62:06:33:98:45:34:5d:
50:f3:2a:e4:54:e1:bd:9f:4a:43:be:1c:ac:dd:59:ce:00:25:
37:69:1d:65:99:76:8e:7f:71:27:65:18:8a:ae:2a:1b:03:5e:
1c:49:b1:61:da:51:cb:18:7e:52:48:a8:4a:fb:4b:cf:eb:40:
46:8a:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:01:03 2026 by rpki-client