
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier: UcaGZMkE+mXgAEzXajFigvlVUQ9LRa5n6/8JSHazv/I=
Subject key identifier: 8F:67:0F:C6:83:06:DC:B7:0E:5F:9E:B8:E5:6F:C0:38:4A:3B:13:31
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 1849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number: 1823
Signing time: Tue 22 Sep 2026 16:28:55 +0000
Manifest this update: Tue 22 Sep 2026 16:28:54 +0000
Manifest next update: Tue 29 Sep 2026 16:28:54 +0000
Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: 0CA1r4I21sHbfhCu7oavDdtzl0wJAVO0350dp4UzJRA=)
2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6217 (0x1849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: Sep 22 16:28:54 2026 GMT
Not After : Sep 29 16:28:54 2026 GMT
Subject: CN=6ab2acc7-eadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:bf:6a:b0:e3:58:7e:16:10:d1:02:2d:d9:
f2:a4:34:bb:08:4f:2b:b3:3e:64:45:02:ce:bc:89:
d0:ec:13:f4:a2:17:9d:f3:08:47:6b:6b:a8:ed:4c:
4e:0c:17:68:5d:6e:b0:70:ad:d2:af:3b:66:ef:11:
0e:20:3f:fd:58:7f:9c:d2:82:b5:ab:31:de:0d:34:
9c:24:c2:ff:3c:e4:e1:e8:97:d0:fb:ce:aa:ea:67:
53:74:09:4a:23:ea:0a:08:65:b5:d3:ac:86:a3:9d:
bb:0c:18:e5:97:a0:94:85:78:0d:0a:78:bb:41:a4:
d5:f3:ca:d7:c7:88:14:9f:c3:a0:f1:61:49:f0:99:
31:bd:b2:f6:65:d8:94:d2:d5:17:75:cb:e6:1a:5f:
84:66:2f:4e:fd:5c:90:7b:cc:b3:33:74:bf:58:43:
27:f2:9a:89:9a:8b:84:3a:1b:dc:c9:4d:48:0c:8d:
6f:39:38:cc:5d:7a:52:68:a0:4d:f3:bd:14:02:3a:
be:f0:9c:76:70:f5:21:7e:d9:67:53:78:43:aa:2c:
39:c3:48:6d:da:5a:dd:24:d8:e3:dc:01:9b:47:60:
ea:df:4d:e3:3c:43:36:37:1d:9a:ea:1e:15:d1:e7:
72:65:da:fe:d2:93:8e:b2:86:00:be:a1:f1:55:db:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:0F:C6:83:06:DC:B7:0E:5F:9E:B8:E5:6F:C0:38:4A:3B:13:31
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:56:e0:04:8d:5c:2b:2a:53:90:37:56:36:66:e8:38:d0:
c1:52:59:d9:56:c2:3b:a7:54:7b:ca:ce:25:9d:04:2e:08:8d:
20:54:06:23:d5:47:f4:ec:6b:a5:f3:24:c7:d0:d1:c2:26:62:
ca:64:8a:76:ab:f6:39:14:d1:ed:5f:57:32:46:9b:75:bb:7d:
fb:26:dd:79:8c:1f:65:6b:8b:08:b8:14:bc:35:00:a9:1f:7e:
ee:07:d4:a1:f9:2c:c4:e7:73:e5:19:89:44:f1:6c:9d:e4:3e:
67:cd:62:e9:e6:d4:79:7d:33:92:74:6a:f3:51:97:89:dc:11:
bd:68:2d:9f:1c:15:b5:44:e1:df:bc:9c:a4:76:d4:23:f0:b2:
01:0c:52:c4:83:06:0f:46:b9:59:9e:1d:25:67:ea:64:d5:79:
27:4a:3b:e7:f7:12:d4:b1:a7:f5:9a:1c:31:7f:0a:46:b9:10:
86:a9:09:5d:79:a9:46:a3:28:cb:0d:f5:4d:2e:5a:9a:b3:42:
cc:5a:6a:24:cd:6b:36:6c:4d:01:80:94:e4:75:b0:85:81:9e:
41:7e:af:90:1d:df:2d:a7:a1:47:ce:8a:1b:ff:b6:7e:2f:99:
50:e4:5e:12:39:3d:29:b1:d8:ea:40:84:62:31:3a:cb:18:79:
f4:f9:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:31 2026 by rpki-client