
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: JjzBdTLa8uW7TBwkAmJD72Szak8jT0IY3p2NtSJMk0E=
Subject key identifier: D5:5D:E1:C0:84:51:22:43:50:32:28:2E:8C:A2:99:05:3D:79:96:1F
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 256B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2553
Signing time: Wed 20 May 2026 15:45:18 +0000
Manifest this update: Wed 20 May 2026 15:45:18 +0000
Manifest next update: Wed 27 May 2026 15:45:18 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: kcnaRKoMrY0I9oZI5tqN2YOEmGG7Ghvza7GuKVYTv44=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9579 (0x256b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: May 20 15:45:18 2026 GMT
Not After : May 27 15:45:18 2026 GMT
Subject: CN=6a0dd70e-c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:b4:9b:1e:41:e4:a2:5c:78:08:a0:eb:85:
2a:6d:45:57:2d:6e:da:96:95:31:0e:73:01:c7:3b:
23:86:d5:b7:15:4c:83:42:9c:a5:2d:80:09:89:4e:
18:14:54:99:e4:e7:a5:80:66:79:45:a9:e1:86:a9:
45:94:05:6a:0e:66:70:23:aa:2a:b5:09:39:ca:37:
1a:54:0f:13:54:74:93:33:06:60:4f:d8:c3:0a:c2:
fe:21:1b:86:b1:13:93:19:de:21:3b:64:05:0e:6c:
30:93:d7:9b:29:7c:49:de:81:2a:9a:c7:e1:8e:c9:
fa:c9:26:d6:a2:51:f2:d5:df:8e:0f:a1:3a:c2:25:
1c:d9:c3:d0:76:30:a6:2e:64:4b:19:38:30:52:ea:
cc:71:39:aa:f9:18:db:94:48:6a:7a:be:4b:7c:30:
de:38:a9:a2:c3:3d:c1:3c:eb:9a:cc:6b:3f:69:67:
97:80:48:8b:93:9c:da:08:40:2e:d9:db:11:8c:ed:
4c:ce:9d:0a:34:2f:85:d0:b3:97:eb:a6:36:1b:d4:
a1:01:f0:e1:1c:a6:37:b3:06:e9:da:b3:55:27:6c:
bd:d2:b7:72:ea:5e:c5:a4:16:ac:63:26:5d:40:42:
db:a4:02:6f:88:b1:01:8b:fc:93:97:3d:87:20:31:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:E1:C0:84:51:22:43:50:32:28:2E:8C:A2:99:05:3D:79:96:1F
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b4:e1:b8:20:46:3e:48:65:50:b2:12:5e:96:2b:18:73:a4:
38:36:2c:8d:ad:0b:89:0a:73:2d:50:3c:fd:3b:8d:52:f7:61:
5b:24:aa:04:47:71:d5:01:59:73:4c:99:b6:93:e6:33:df:fe:
6e:58:3a:c7:f7:5f:fd:f5:e3:b4:17:79:ab:9e:a6:b5:a9:ac:
ec:75:da:56:d0:9e:00:b9:ae:8b:d5:86:64:43:0a:fb:51:af:
2a:10:42:e6:fb:00:b4:6b:48:37:e1:5e:d6:18:d6:17:4a:6c:
bd:f3:9d:a4:42:0e:11:50:dc:74:cd:69:ee:67:e0:d0:00:04:
58:b8:d4:4a:09:41:05:d2:37:b2:93:28:41:2e:35:80:8c:71:
ec:6f:ef:c2:a7:80:e4:e0:d1:bd:1d:d0:9e:1b:48:90:3a:d1:
41:bc:8e:c4:87:54:f3:0e:cb:2f:f3:ba:7f:98:b7:bb:fc:8d:
ab:6a:6d:c3:20:dd:cc:30:68:3f:ee:ae:73:31:7b:de:15:61:
20:29:40:70:51:58:7e:c2:23:f8:25:a2:d2:20:b1:7c:e5:fe:
43:ee:29:f7:8e:38:b3:16:5b:1a:dd:a0:be:4e:0f:42:e6:a1:
31:f2:41:ff:d2:9a:a8:42:51:77:9c:0e:fa:2a:6f:c2:c3:74:
10:4b:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:29 2026 by rpki-client