
$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier: M3EExCjEcXSDfIw0tA5n0Ngv2bgd7rfkW1Nkis4mW94=
Subject key identifier: A0:E7:65:87:AD:CC:00:1A:5E:3F:B2:4E:7D:11:8A:85:4A:5F:E9:53
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 1801
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number: 17DB
Signing time: Tue 12 May 2026 16:34:45 +0000
Manifest this update: Tue 12 May 2026 16:34:45 +0000
Manifest next update: Tue 19 May 2026 16:34:45 +0000
Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: n8Bc2dkkQhHR0+nw3xaKi7zUCdPzWXtiD+/38a/XyKI=)
2: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: 1ifr0yn5rYOREwHuBa/9PEbXr1t4wQIXYEhnH3YZcdI=)
3: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6145 (0x1801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: May 12 16:34:45 2026 GMT
Not After : May 19 16:34:45 2026 GMT
Subject: CN=6a0356a5-011d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:e0:5a:5e:bc:c5:88:8a:ae:70:f2:ed:73:
82:05:89:7f:2b:da:9c:b6:2c:4c:71:a6:6f:42:2d:
3e:e8:3e:26:1f:2c:50:3f:28:f8:d4:d1:29:c4:b7:
b6:5e:98:15:fa:fa:be:fc:8b:1e:ca:eb:4b:04:1b:
1e:5d:0f:a7:8f:b1:19:2d:8b:26:44:76:70:be:d2:
15:9e:dd:24:bf:14:2c:1e:42:95:c2:03:98:e3:b8:
36:71:63:5e:b7:90:54:9c:da:d1:fd:67:10:1d:b9:
f6:d3:ba:fb:0e:a7:d2:cd:5f:ef:4a:c8:c1:c7:9e:
2f:0c:1a:17:76:d6:05:6b:0e:3d:47:1a:59:bf:7c:
eb:34:e8:14:74:8b:66:fa:fb:9d:82:01:af:be:62:
b6:4c:56:16:1b:c0:4a:42:12:a3:97:bf:61:a8:1b:
9c:e3:97:1c:87:d4:01:b1:a4:c7:5f:aa:6d:4e:c1:
68:87:f2:9e:90:9d:df:90:99:87:c0:c0:2e:5f:ec:
66:35:23:71:97:9a:37:dc:17:67:a8:4a:a4:5e:97:
cb:cb:d8:0b:07:28:bd:42:18:be:53:10:7e:8a:2e:
ba:03:86:3c:9a:08:e7:d1:59:6f:b1:48:ab:dc:95:
23:fb:d8:bf:a4:7a:d1:df:22:0b:3c:e3:d1:9b:0d:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:65:87:AD:CC:00:1A:5E:3F:B2:4E:7D:11:8A:85:4A:5F:E9:53
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a4:77:c0:2e:7f:b8:dc:2a:16:f3:f7:59:4d:63:73:76:2e:
36:10:18:6b:3b:15:5a:54:90:bc:80:d4:1b:42:f5:53:87:66:
f9:56:e1:c4:64:fa:ce:c4:29:77:e9:c7:f3:5a:3d:e4:80:c2:
2d:2b:5f:2a:d8:96:41:ef:4f:fb:b5:dc:27:3c:10:77:a0:d0:
a2:99:d2:b4:cb:25:9a:6d:34:2e:98:e1:9c:9e:c7:cb:4c:1c:
30:fb:33:58:6c:a5:08:71:62:c0:74:44:fd:c3:49:f5:49:2c:
de:d0:fd:b7:53:92:0f:0c:f9:c5:fd:91:31:87:33:da:36:08:
21:bb:6f:72:12:04:a9:de:66:91:16:81:c1:61:67:02:d9:48:
87:3e:84:12:c5:e5:a1:a6:27:e4:b8:26:9e:a5:31:0a:cf:01:
82:98:b3:b2:48:12:a0:20:d9:21:13:41:ba:bf:f0:65:e6:20:
d4:c1:0f:d0:29:6f:85:78:2f:7c:0f:98:a8:c0:b3:ce:bb:fe:
5c:0b:eb:91:ab:26:ec:9a:ee:f6:b7:3a:31:97:dc:f1:8f:47:
5c:53:d5:2f:3b:93:51:d6:f6:4e:46:b9:b7:1c:81:f7:58:e3:
c3:ad:f3:42:5e:12:17:1b:d2:2b:89:e6:60:ef:8b:0a:28:53:
86:67:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:13 2026 by rpki-client