
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: gDYuR/8Z6irjn0OV1dA38fFsKuTTDS9JHaJGJMh9apg=
Subject key identifier: 2D:80:C6:3F:E9:B9:C3:C8:1D:0D:CE:A1:BB:28:BE:A1:E6:7E:14:41
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 258A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2572
Signing time: Mon 20 Jul 2026 15:49:26 +0000
Manifest this update: Mon 20 Jul 2026 15:49:25 +0000
Manifest next update: Mon 27 Jul 2026 15:49:25 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: RD2IgBndFyPK2pcAlpsbF2friJQ3f8BsJSCYM1AFJMk=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9610 (0x258a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: Jul 20 15:49:25 2026 GMT
Not After : Jul 27 15:49:25 2026 GMT
Subject: CN=6a5e4385-ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:e7:73:7f:e8:a4:70:b6:0a:58:ef:85:68:
2f:7b:dc:71:66:1a:75:6b:d7:66:8d:d0:56:a9:5d:
3a:6b:0a:9d:ec:ce:e6:a2:59:c4:d1:54:31:55:1d:
32:92:f9:1f:7b:bf:7f:63:65:92:b1:f1:9a:13:b6:
e3:44:da:57:da:f4:6c:67:59:52:16:c3:a0:4c:14:
e5:70:f3:03:aa:a3:7e:a7:32:63:de:0a:b1:33:0f:
7d:e2:68:b7:02:c7:70:47:92:d0:8f:03:69:86:45:
6a:ef:e0:ee:77:9f:06:22:c1:39:37:c7:94:3a:05:
3d:3a:fe:de:01:9d:73:81:9c:cb:8b:64:8e:35:5d:
e3:45:50:83:89:fa:ba:56:d7:ba:78:bb:84:c8:99:
cc:4d:dd:a4:5d:80:fc:8b:d9:48:8f:d0:b6:f9:a5:
a1:27:cd:f6:d8:de:04:ff:9e:86:17:5b:7f:22:83:
34:fb:4c:f5:c5:92:3d:e9:3a:bd:d6:0f:42:3e:28:
69:89:82:07:a7:e4:3b:ce:d2:90:64:6b:18:ef:63:
ec:7f:43:b9:ec:d9:80:a2:ae:a8:0b:1d:a4:2b:b2:
8d:2d:57:1f:2c:be:d4:69:38:84:ad:4f:57:49:62:
a7:10:dd:ec:42:71:ec:c5:32:03:52:59:76:05:3f:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:C6:3F:E9:B9:C3:C8:1D:0D:CE:A1:BB:28:BE:A1:E6:7E:14:41
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:42:5d:cb:7b:9e:55:95:88:42:8e:d4:19:ca:97:84:e0:
4e:8a:22:fd:6b:fc:46:c8:05:be:ff:cd:17:e3:f2:6e:49:1c:
8d:bc:2c:6e:f8:8d:09:62:10:27:02:78:b8:59:bb:47:78:3f:
32:4a:81:c3:1f:05:f0:a3:7c:45:82:e5:8f:4f:d3:a4:f9:a9:
36:82:43:c5:b4:d8:1f:d5:0e:22:98:e3:0e:e8:f6:45:a3:e4:
97:49:e0:7c:94:48:85:a6:e9:63:b9:21:30:0a:68:53:1f:7d:
4b:9d:cc:34:d8:09:00:d0:31:31:b4:c3:c9:ae:6d:c0:d8:18:
f1:7b:ee:bf:c0:39:51:03:d8:37:a6:ae:03:f4:84:0d:4a:5e:
0e:30:4c:4f:99:4e:b1:77:dc:c4:40:16:58:8f:20:5d:ca:7f:
f5:64:dc:0d:b8:6e:09:8c:04:f4:a1:a6:a0:bf:40:cc:c8:b3:
f1:94:18:d0:d3:31:4a:16:b5:a0:e4:19:6a:0f:ff:d2:27:cc:
91:18:9b:ca:0c:23:5a:ba:42:b9:ef:3e:fc:dd:1d:63:0f:cc:
a7:e3:9f:2b:7d:5e:47:f9:14:e1:ea:49:12:83:ad:6c:2a:79:
32:73:5c:35:7a:00:85:89:00:f4:75:78:7d:64:bd:74:90:ae:
5c:75:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:39 2026 by rpki-client