
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
File: 2lexkcVbszGevZGC3A1Oau8-Ddg.mft (raw, json)
Hash identifier: mzl69bCWCqezK2sIQlLDtNpxFreUx0A+jX2iZCdbSPo=
Subject key identifier: A4:85:05:75:54:35:7B:0B:0A:81:1D:5F:15:1B:7B:EE:1A:0B:B5:87
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
Manifest number: 0260
Signing time: Thu 23 Jul 2026 03:21:17 +0000
Manifest this update: Thu 23 Jul 2026 03:21:16 +0000
Manifest next update: Thu 30 Jul 2026 03:21:16 +0000
Files and hashes: 1: 2lexkcVbszGevZGC3A1Oau8-Ddg.crl (hash: uILzwuos02W03PZBTnleFEOgJRc+J2KVOhrap6le/qU=)
2: 7DA38A8E727011F08682A20EC4F9AE02.roa (hash: X373raxuE2iLwtaK4YO98Y1yBAk9TK8MxVlU8+CTPKI=)
3: 5181F33CE8C011EDADA54A23C4F9AE02.roa (hash: 3weaQ4o+eQXlXxL8Agh4qybWMOK+rrtdU5IbG/vM6oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Validity
Not Before: Jul 23 03:21:16 2026 GMT
Not After : Jul 30 03:21:16 2026 GMT
Subject: CN=6a6188ad-d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:5f:de:f2:aa:35:b4:9f:a9:41:a2:da:df:
91:4d:97:12:4f:8b:50:e1:dd:28:a8:e8:fc:dc:c7:
5f:5b:2e:db:fe:19:cc:3d:67:be:71:62:47:00:ac:
67:a7:e7:cd:db:ef:e0:59:14:c7:18:74:50:17:38:
ab:11:ca:57:ed:d4:89:4f:2c:ea:e7:0d:6d:cf:24:
c1:08:01:da:14:49:ea:f0:5b:17:08:9b:39:ca:fa:
74:4f:3b:7c:cc:82:76:d2:fe:54:57:2e:d8:d7:de:
cc:4c:eb:46:03:79:bd:09:a7:b9:5f:03:be:8d:c4:
5c:0b:16:d2:5b:d4:14:dc:e7:3e:10:9b:55:ca:88:
cc:db:39:9f:59:01:72:9f:a4:ac:21:8c:22:10:fa:
a5:5f:5b:2a:31:df:f3:2f:59:6f:63:6a:15:b3:70:
60:27:7d:9c:e1:82:8a:9d:ee:8a:e2:12:ab:92:76:
91:8e:e0:aa:d6:19:81:ae:61:49:15:a7:36:0b:cd:
bd:42:1d:a4:f6:0b:90:e5:e1:63:5c:92:dd:61:f9:
8e:ed:1d:27:43:11:8c:ea:80:cd:b6:6f:97:48:cc:
f2:b4:71:52:36:90:6d:a7:b2:a5:61:99:18:d1:a2:
ff:d4:df:da:3b:32:89:3a:7c:24:66:42:76:3f:83:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:05:75:54:35:7B:0B:0A:81:1D:5F:15:1B:7B:EE:1A:0B:B5:87
X509v3 Authority Key Identifier:
keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:e4:6d:9c:5a:32:0f:1d:37:29:be:44:e2:b3:04:1c:7c:
ba:1c:c0:f2:c7:93:b2:ee:6d:5d:e0:e7:c8:93:fe:d9:05:0f:
c8:2d:21:d3:54:81:7f:13:13:ec:4f:d1:06:66:cb:c6:c5:81:
ce:2f:6f:d2:1b:44:8b:c7:35:5b:e9:73:03:56:fd:e9:d7:b5:
42:4c:53:ad:7f:54:68:75:a6:57:ef:0c:e2:25:5d:67:50:f3:
79:b3:48:b2:01:30:0d:31:64:b6:a4:4c:b3:d3:65:47:fc:50:
b4:63:f9:7f:4f:ec:f0:dd:82:09:8b:dd:eb:2c:f4:1c:35:79:
03:81:e6:bc:56:2d:92:75:d4:8d:bd:fe:56:2f:8b:8c:8d:99:
98:d9:5c:74:5a:f3:a7:d6:ec:85:12:af:ff:a8:8f:c1:d2:34:
53:56:2e:b0:ee:38:31:db:c3:0b:4f:5e:16:45:39:95:ea:f3:
ca:1a:bf:47:5b:9c:81:8c:02:66:8d:65:90:5e:51:8c:55:84:
31:88:ab:9d:46:c1:54:22:49:14:a7:4a:8a:40:af:86:b1:c0:
4a:cb:1b:fc:4d:ea:94:4d:99:5b:91:d1:de:f2:49:c5:59:a9:
6b:71:ba:a7:cb:b3:88:c1:f8:e9:e5:c4:c4:ab:09:dc:18:ad:
00:51:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:26 2026 by rpki-client