
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft
File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json)
Hash identifier: SLde3vs+q57y0BVlB0V+4q9VACraS0ULvzpqPfrodcY=
Subject key identifier: A7:9C:D6:60:AB:A4:38:FA:28:13:86:F0:44:5A:25:D0:E1:DE:E3:F6
Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3
Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3
Certificate serial: 072F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft
Manifest number: 0722
Signing time: Tue 12 May 2026 21:58:21 +0000
Manifest this update: Tue 12 May 2026 21:58:21 +0000
Manifest next update: Tue 19 May 2026 21:58:21 +0000
Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: 6+OQlmRaBFpkbnPTt3bWLhsg1zGTKKJMq3cxc1xhpRI=)
2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: CxI7KYu4pZe63vL/eoc29VD/jD6Ot+ag5XgopheyhjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl
rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3
Validity
Not Before: May 12 21:58:21 2026 GMT
Not After : May 19 21:58:21 2026 GMT
Subject: CN=6a03a27d-a320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:d0:98:ed:d0:c9:5b:05:f9:d6:8d:21:b7:
cf:7c:8b:71:d9:9c:f5:be:32:b4:ed:62:f2:5d:ae:
22:7b:93:1b:0a:a9:db:21:1b:31:cd:93:00:c8:db:
2e:58:b1:f2:45:75:d4:e1:9e:52:0f:6c:d4:02:67:
99:6c:73:6e:c4:62:0f:f0:eb:7a:a9:4c:9b:f2:f4:
9b:11:65:60:8d:8d:f6:cf:56:da:bc:3d:d4:fb:11:
ea:96:c3:3c:fa:6a:8a:29:54:20:67:37:ed:af:cc:
41:7e:f0:df:a3:60:31:88:b0:3f:0c:ea:4e:30:ab:
c4:ba:04:d9:42:8f:fd:2d:b1:ea:18:11:6a:fd:d3:
2c:4b:7c:a0:d5:d0:d6:c4:42:5c:d6:d4:90:26:12:
3c:7f:a4:b0:82:83:8a:2f:43:11:81:97:f1:a7:2a:
2d:68:c9:eb:65:55:6f:99:0a:19:ce:19:d3:61:30:
9c:be:b3:53:d3:84:e8:5e:2c:3f:e4:dd:e6:b4:4a:
22:59:1b:27:2c:9e:fe:14:a2:87:24:3d:94:51:69:
e1:74:cf:15:3f:e3:ec:00:b6:44:0c:ac:6d:f7:6f:
14:43:b7:5b:9f:96:6d:e2:04:db:d7:4b:02:62:5d:
de:fa:12:96:32:3e:a5:26:82:b2:de:cd:c8:4a:13:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:D6:60:AB:A4:38:FA:28:13:86:F0:44:5A:25:D0:E1:DE:E3:F6
X509v3 Authority Key Identifier:
keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:59:c4:20:2f:01:78:b7:92:4a:f0:81:ee:f6:42:c6:46:
22:32:4c:a6:a1:f6:6e:c6:fa:84:96:97:57:28:78:00:85:6d:
6e:b3:85:1a:f4:75:a6:59:be:8a:54:d2:24:8b:39:4d:84:c5:
30:70:dc:da:62:65:d8:30:76:2c:92:84:19:5d:87:17:9f:af:
49:17:47:87:92:b7:cc:b5:32:31:64:75:34:ef:98:36:ad:74:
1b:7f:65:ef:92:b6:6e:63:b8:c4:86:16:45:b3:17:bb:90:45:
b9:48:6f:0c:a3:e4:84:52:fb:81:29:a1:b8:d7:80:93:b3:d5:
b6:b3:b2:49:90:de:0b:e3:79:be:21:50:f9:fc:8d:4a:85:ca:
c4:47:c5:e4:7f:7b:1d:8a:47:29:35:82:be:11:04:0c:9b:43:
6f:fa:20:f4:97:e5:e0:28:07:a5:89:3c:ee:91:7a:f7:23:af:
ee:dd:0a:5c:c8:24:a0:3f:84:54:90:d2:4a:2f:38:2e:20:f3:
1c:52:4f:1f:6b:a1:0d:8f:31:4e:4e:25:04:7c:9a:b4:d4:2d:
f6:19:c2:23:b8:9a:58:ff:63:b9:07:88:8e:70:4a:9c:23:d1:
06:a7:80:4c:8e:4e:d4:66:58:e2:12:61:2b:91:98:2e:25:33:
b0:2f:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:24 2026 by rpki-client