
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier: X9utVsjxUR+KQK8dWcvq3dlPbB7ax0dnrRk8haEqfOA=
Subject key identifier: 2C:E4:7D:DC:29:D1:86:F2:43:76:98:7B:6E:21:C1:46:F5:0E:A3:C6
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number: EB
Signing time: Wed 19 Aug 2026 07:07:34 +0000
Manifest this update: Wed 19 Aug 2026 07:07:33 +0000
Manifest next update: Wed 26 Aug 2026 07:07:33 +0000
Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: oleZOK4gOhgv65TwG3YjG9ITyL/3FHZ36sE1lvsSHfc=)
2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: gIIumWSAkBw+/Kf2c0p6PpwOKZCEtqNskG3XhcLL5aE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Validity
Not Before: Aug 19 07:07:33 2026 GMT
Not After : Aug 26 07:07:33 2026 GMT
Subject: CN=6a855636-1263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:65:41:5e:e3:aa:87:26:40:3e:c4:6f:35:
65:20:b5:fb:1b:6a:49:a8:74:1a:39:eb:55:4c:fc:
c6:f6:68:c3:d7:03:ef:e9:8f:3f:a2:45:19:cd:b5:
95:bc:e8:9f:0f:df:a0:e1:0a:48:24:e9:73:12:6d:
b0:17:86:a4:30:33:7c:8e:f7:d1:bc:5d:f3:6c:9b:
ec:cc:3f:0d:b7:55:c1:6c:e3:ce:11:78:b6:c0:cf:
0e:35:d1:a9:72:26:cf:85:0c:35:97:db:cc:06:60:
91:6b:f8:c5:60:2e:d5:42:04:e1:f0:5f:3c:c1:e0:
64:49:9f:6f:3c:97:f5:a3:c1:99:a4:ff:72:19:4d:
27:1e:55:8c:23:7a:13:36:6a:bb:bb:c6:a9:1b:1b:
91:1e:e2:96:6a:da:95:6c:3e:fb:84:71:71:89:84:
93:b6:b3:18:17:d1:4b:77:7f:b3:06:cc:96:19:a1:
79:96:d9:ad:dc:c3:a8:5c:71:fc:1c:92:76:de:2e:
76:b6:c8:b0:4b:4d:67:2c:df:ee:26:52:ea:e8:fc:
63:41:be:55:f7:84:1f:b3:25:09:9b:86:79:62:d3:
d8:fe:4d:a9:e0:d8:94:a1:20:9a:1a:d5:c3:a6:d9:
64:b5:9c:4a:30:b1:7b:09:86:b6:4c:72:89:a5:9f:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:7D:DC:29:D1:86:F2:43:76:98:7B:6E:21:C1:46:F5:0E:A3:C6
X509v3 Authority Key Identifier:
keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:17:f4:d3:56:a2:ed:73:35:f6:a1:c7:ef:73:25:9c:26:6f:
26:b3:e7:8f:b8:7c:59:94:f0:30:94:70:52:2c:30:18:d0:6f:
48:61:56:57:43:c7:87:c9:fe:86:72:52:10:7e:4d:d2:26:84:
d2:7c:80:57:60:9e:6e:d0:52:00:c8:e7:1c:47:fb:1d:2f:4d:
4f:2c:ff:f5:08:fe:4a:94:83:9e:3e:06:ee:05:76:2d:ef:4f:
90:2a:53:49:55:80:ed:7c:99:94:9c:86:6d:10:b8:67:38:cb:
16:81:08:42:ac:3f:bd:5b:b9:2d:77:99:0a:ae:70:2a:ed:48:
ba:3d:ba:5b:77:6e:81:9f:21:fe:85:80:5f:7b:4f:72:a9:aa:
5f:ae:83:fa:77:b8:e6:72:20:2c:ae:6d:cd:a8:d0:90:67:3a:
4a:cf:f4:4c:39:15:45:ce:6b:64:53:f6:5b:de:1a:7e:85:6a:
79:9a:cb:5f:02:19:b7:f9:b6:77:d9:d1:36:d4:23:f1:64:4c:
a0:da:16:3d:ce:2d:f6:87:c9:59:23:d5:ba:13:b2:77:f8:f6:
51:7d:11:ed:9d:bd:39:a3:ab:a1:58:7d:2c:f9:78:03:4a:92:
48:d5:4b:87:5b:68:71:46:f4:9d:c1:8c:6d:a4:3a:40:88:bd:
45:e2:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:35 2026 by rpki-client