
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier: aBiDxoR/5pxCtRZlPFRwXYGNyDZdS0Z2jdcx8tUyaPs=
Subject key identifier: 63:A0:6E:05:5B:8D:60:13:59:83:33:A6:AD:4D:00:F3:E0:6C:DD:BD
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer: /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number: 19
Signing time: Wed 13 May 2026 09:08:02 +0000
Manifest this update: Wed 13 May 2026 09:08:02 +0000
Manifest next update: Wed 20 May 2026 09:08:02 +0000
Files and hashes: 1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: Ao2a6GpBfN3qMRxdlF3zIIxUCvxM+t47r/hdyEYBRPI=)
2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Validity
Not Before: May 13 09:08:02 2026 GMT
Not After : May 20 09:08:02 2026 GMT
Subject: CN=6a043f72-66ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:21:23:79:a0:35:32:2c:b9:db:eb:75:4a:4a:
a0:10:dd:a2:0f:89:24:d6:9d:31:66:74:97:8a:40:
17:a3:34:c9:02:2e:1d:cd:07:4a:a1:6f:67:bd:4d:
fe:88:bc:13:c5:9e:f4:f5:a8:df:27:77:6e:e1:b4:
9f:5c:f3:e2:41:68:e5:46:73:7c:e2:fe:f3:72:3a:
d7:62:b0:76:70:6c:ca:d1:83:be:45:ef:d7:20:c1:
fa:2f:64:81:42:ac:84:4f:00:3e:b2:83:a1:21:c9:
8e:15:dd:16:ca:df:65:94:7d:3e:5e:90:66:6b:2a:
c3:1c:b9:92:8d:66:2b:32:7e:e7:ba:d9:c3:d4:19:
f4:ab:0e:44:f1:1c:6b:36:c2:6d:ce:f7:20:96:f7:
17:4a:2a:5c:94:6a:c9:1c:09:5f:f5:94:4a:ed:32:
10:57:f1:fc:32:3f:4c:69:69:98:6b:11:d8:05:d3:
0c:e5:31:d2:6c:bd:bf:4d:9e:13:a4:47:97:a5:7a:
d1:cc:fe:d2:92:7e:ba:8b:e7:8e:57:2f:ac:d1:e5:
77:94:06:a2:e8:8c:f7:f3:cb:d9:24:2e:ca:22:a1:
51:1b:35:62:e8:e2:2b:b0:08:a1:55:ec:80:68:ee:
94:0f:9c:89:f3:ec:fc:2f:55:d9:2a:47:f6:73:a3:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:6E:05:5B:8D:60:13:59:83:33:A6:AD:4D:00:F3:E0:6C:DD:BD
X509v3 Authority Key Identifier:
keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:6d:b0:43:61:6c:59:56:7c:b6:61:b0:30:65:5d:bf:70:
87:44:81:b9:77:a8:26:dd:83:74:67:3f:ed:d9:37:5d:27:51:
aa:ed:b2:56:d5:de:09:90:aa:ad:ae:fa:b4:4c:0e:a9:20:fe:
80:54:9c:4b:18:d4:77:af:a2:c4:a6:3d:3a:6b:ca:eb:a3:94:
6f:fc:03:04:e4:4e:bb:d8:6d:61:e8:9e:96:bd:b3:2d:88:c8:
db:fd:69:16:49:ba:ee:a4:fc:86:1c:f1:e4:4d:b6:ad:3c:37:
cf:1d:51:b0:32:ec:84:7e:bc:12:bc:dc:c4:75:6e:0e:da:c6:
0e:18:fd:90:2a:6b:8d:39:1b:b3:cb:85:85:67:6c:0c:06:2f:
9c:8c:41:44:cc:12:56:10:10:d6:b5:c2:30:68:1b:a2:6c:a2:
f1:3e:41:d5:6c:f6:ad:84:4e:f6:7a:8d:4f:3b:9d:d0:92:2f:
50:21:cf:d3:a5:1c:69:ac:bc:87:6c:38:6b:8e:cc:28:ca:bf:
93:c1:db:2a:2c:c4:80:98:e4:2c:3e:27:94:73:7a:d8:c8:c2:
e6:61:4c:b1:c3:ab:4b:c5:04:ee:c8:69:0c:b0:c3:c6:56:60:
4f:b2:40:71:87:ac:7c:7c:5e:b2:e9:10:90:f5:ff:7f:b2:cd:
ba:03:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:42 2026 by rpki-client