
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier: 8jlzd0eeWqzkxstxQnEzdlQwp1nXs/Mn1Bm4avsDJFA=
Subject key identifier: A5:44:E9:8D:4A:19:94:E2:80:83:B9:96:82:A6:89:77:60:8E:95:41
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer: /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number: 5E
Signing time: Fri 25 Sep 2026 08:16:00 +0000
Manifest this update: Fri 25 Sep 2026 08:16:00 +0000
Manifest next update: Fri 02 Oct 2026 08:16:00 +0000
Files and hashes: 1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: eTG3J+EecBY7CHz8Zb7CYEXEGDMiUMLuUeWJCt3A/QA=)
2: 7F2C6F04B0BA11F1BBB308266611F970.roa (hash: QuuI6x89fM2Me13ySpS2g80axscXabQ5MLnbeeYJ3Ko=)
3: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Validity
Not Before: Sep 25 08:16:00 2026 GMT
Not After : Oct 2 08:16:00 2026 GMT
Subject: CN=6ab62dc0-5e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:2d:e7:87:43:29:b7:92:d3:20:35:39:1a:
56:48:bf:f2:3c:2f:bb:8c:db:1b:75:4a:28:a3:a4:
da:3f:74:cf:22:5a:eb:57:2b:b6:7f:83:fb:09:3b:
65:91:d1:b9:07:2c:0e:16:40:ef:08:de:8a:e6:9a:
04:7a:91:67:3f:b7:fc:d0:0b:34:95:5a:d5:37:62:
66:da:56:82:fc:e4:72:9b:4b:71:52:85:dc:66:42:
6c:5d:9d:0e:e7:34:69:aa:ed:0c:66:7a:b0:21:ae:
5a:0c:e0:3b:58:a3:e6:19:13:31:c5:d5:4a:de:52:
8b:cc:56:8a:d8:49:a4:7f:07:f1:bd:72:70:93:95:
5a:fc:3c:d7:3f:93:81:bf:b0:a2:64:c7:03:91:47:
a1:e3:98:ca:10:bb:f1:89:86:e1:d5:3f:06:5f:bb:
08:ed:a0:e9:92:c4:7a:a7:d9:90:5a:c5:7b:c2:51:
f3:7c:a5:5a:90:d1:72:33:79:21:b7:91:cf:4b:ef:
ca:1e:a7:7c:ed:3a:54:b9:0d:9d:63:23:c1:eb:c7:
8f:0b:36:6e:70:40:98:b9:10:37:bf:ba:ee:47:6b:
12:9d:c6:35:c2:ef:59:52:f2:46:e0:7c:9c:cc:5e:
72:8f:de:5b:bb:76:39:83:98:20:a6:ad:2f:e0:71:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:E9:8D:4A:19:94:E2:80:83:B9:96:82:A6:89:77:60:8E:95:41
X509v3 Authority Key Identifier:
keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:14:ba:f4:e1:b9:0c:f0:0e:10:eb:00:9d:a6:d7:99:fe:72:
27:ef:26:55:2d:10:d2:55:c0:08:4c:b2:8a:bd:ce:53:17:30:
1a:87:6a:7b:14:00:02:67:18:df:3d:7c:ec:02:f3:65:f5:d8:
7f:6f:0a:2c:0f:c1:4a:2b:2c:3b:43:3c:25:b0:95:26:7d:46:
0c:8f:09:57:12:a3:d4:25:7a:6e:ac:03:26:6a:f3:af:32:09:
fa:5b:f1:c6:57:b7:57:e4:f3:b9:86:1a:a4:46:10:ad:4b:46:
a0:95:83:08:20:87:f3:8b:ec:7b:5a:2b:c4:9f:d7:d6:1a:11:
ce:16:e3:e3:27:c5:2c:5c:0b:20:bd:b2:20:a7:20:3b:69:49:
6e:59:75:57:80:2a:94:80:4d:d4:6c:98:c2:47:e4:a6:fe:0f:
18:6b:1b:75:43:80:fd:72:88:85:ef:37:70:ec:3f:de:c8:54:
a1:32:19:af:c6:29:86:8d:c2:03:c7:42:06:66:2c:7c:c1:a4:
93:81:45:9e:61:8d:c9:f9:9f:66:23:d0:6b:c4:5c:4d:51:90:
f6:68:8f:2c:81:c4:91:b2:f2:d8:23:a8:b6:4b:9f:58:81:d1:
38:c0:a8:ee:cb:7a:dc:c4:3c:87:02:aa:29:0a:33:c3:d0:ac:
1b:af:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:44:07 2026 by rpki-client