
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier: xuHwp0Wb1DUGP1kcDUINk/yqz3i58yAjUwNgBQdLnVM=
Subject key identifier: 25:86:F5:1A:F4:A0:E6:C0:4C:4F:F5:30:F0:A0:CE:08:97:6E:03:14
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number: 0156
Signing time: Mon 01 Jun 2026 05:47:41 +0000
Manifest this update: Mon 01 Jun 2026 05:47:40 +0000
Manifest next update: Mon 08 Jun 2026 05:47:40 +0000
Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: nnHcZFW+Hi6mET59S51JDBl/88x+lVPAtI5FNUkn+us=)
2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: shtxP/SBAQ2iT3UezvldJfibekIWgVIPJ+ZajU+8AuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Jun 1 05:47:40 2026 GMT
Not After : Jun 8 05:47:40 2026 GMT
Subject: CN=6a1d1cfd-bb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:de:e3:c2:6f:9b:61:75:23:44:9c:f9:3e:
e3:f0:a1:76:a3:80:7d:0a:f0:d4:25:1b:e8:fb:66:
e7:fd:3f:58:a3:ef:08:1c:13:8f:f3:d2:39:ee:d8:
73:3d:1e:37:38:6f:0c:26:58:91:40:92:48:74:de:
8c:fa:4b:b1:19:7a:76:54:40:e9:29:e9:5f:b5:95:
7d:c0:2b:47:d7:7b:e7:f4:79:58:5e:43:fa:bd:96:
05:a9:31:d0:ef:c0:24:e1:96:51:b5:2a:33:c3:5e:
c7:e1:43:6b:eb:82:79:ac:cf:61:43:c3:f4:2a:63:
f2:e8:8b:df:4e:28:da:34:82:ba:ba:9d:4a:54:ef:
49:a8:8c:d6:66:41:c7:67:fc:91:5a:63:57:ad:0a:
a5:d7:d4:25:3b:a5:f5:13:cf:bd:1b:8f:fb:e1:e4:
33:bb:0d:f4:9c:bb:d1:03:14:f7:16:24:d0:65:a0:
45:62:b4:34:c6:64:a1:33:0c:75:26:f0:26:77:a8:
c1:4b:45:f4:57:aa:2d:64:f0:c7:94:37:5a:54:24:
7d:8c:c6:0e:d2:68:8c:be:89:9c:dc:48:e3:f9:64:
a4:9a:7c:88:f0:78:de:ce:36:98:5b:cb:8e:64:10:
07:88:be:39:e2:12:5b:b2:d9:9f:05:8b:b6:3b:26:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:F5:1A:F4:A0:E6:C0:4C:4F:F5:30:F0:A0:CE:08:97:6E:03:14
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:33:d3:ed:d2:c1:34:09:2b:8b:f3:eb:09:26:1c:ae:d1:68:
4c:51:f3:55:87:90:2e:a0:40:47:93:d6:a4:3b:57:67:4c:f6:
93:dd:d9:85:08:45:53:02:e7:36:08:a1:79:2b:8c:f9:18:ad:
65:40:e9:73:83:89:3f:6f:45:c9:fb:21:24:e9:8b:cf:42:85:
92:9f:fb:9e:81:72:99:54:a6:64:d3:e4:90:1d:b7:1c:ae:50:
fc:42:b4:d2:2d:17:a1:1c:bd:46:66:c3:b0:d9:73:a2:3d:55:
ea:5a:ee:d4:9b:cd:37:d1:3f:ce:cd:59:50:a7:0f:d0:3b:98:
e3:ea:f1:db:65:86:2a:4f:94:7b:03:0a:df:d3:b6:f9:37:94:
3b:21:c7:63:e7:b6:a6:37:74:99:98:28:08:23:32:03:49:84:
13:b3:13:3e:4b:ae:22:4f:2a:4d:3f:d8:17:7a:3a:9b:e9:28:
3a:28:38:09:5e:96:ee:2a:f0:b5:e0:66:3f:83:d8:a1:40:13:
7f:a8:87:5d:13:43:5d:d0:45:91:13:9d:55:61:b0:e9:02:51:
85:f6:e8:5f:6e:5a:e0:df:15:f8:27:95:99:c8:1d:1f:df:a3:
bf:70:da:43:a4:e3:df:03:26:a2:21:de:67:b1:b2:16:f0:2c:
99:b2:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:33 2026 by rpki-client