
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
File: 2H7vwei9pDKhIQ84dxk7cV6zmbA.mft (raw, json)
Hash identifier: izf27jjiMzCuQK04AY+JkFcJ37az2r8vtbo9DAz+1I4=
Subject key identifier: E0:30:71:EC:53:5B:6D:7A:42:7D:72:22:41:87:25:E0:8E:56:FC:33
Authority key identifier: D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0
Certificate issuer: /CN=A912A45D/serialNumber=D87EEFC1E8BDA432A1210F3877193B715EB399B0
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
Manifest number: 2C
Signing time: Wed 23 Sep 2026 08:30:59 +0000
Manifest this update: Wed 23 Sep 2026 08:30:58 +0000
Manifest next update: Wed 30 Sep 2026 08:30:58 +0000
Files and hashes: 1: 2H7vwei9pDKhIQ84dxk7cV6zmbA.crl (hash: p4GSusESrjnPWiZTI1Y22JjQzAyaDhH81FLCkPTneCw=)
2: 730F41927B9F11F186A8876472A30FBC.roa (hash: iwhQrfMzx7dXc+jURYQOTrqOxFZxvuMvS1ulTb489oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.crl
rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A45D, serialNumber=D87EEFC1E8BDA432A1210F3877193B715EB399B0
Validity
Not Before: Sep 23 08:30:58 2026 GMT
Not After : Sep 30 08:30:58 2026 GMT
Subject: CN=6ab38e42-1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:57:67:58:67:5e:ec:f4:ce:3f:ae:7f:46:
a9:6e:87:a4:06:f6:64:44:fe:d0:74:c7:94:b9:fe:
38:b5:2c:e3:26:39:b0:ea:4a:58:b7:bc:64:32:b1:
59:28:3a:09:34:aa:75:c5:0f:b5:03:e1:8b:ea:09:
1c:9f:6a:8c:27:3e:7f:28:51:1e:3a:83:82:39:f5:
83:9a:4c:c6:0a:10:fd:80:48:fa:af:79:ad:9a:85:
20:f7:9b:b0:9a:00:9b:07:cb:3c:d3:d2:5c:07:06:
41:40:8b:4b:96:5c:f9:85:c5:1f:bd:5a:e1:10:0c:
95:27:a7:3f:23:56:6c:09:78:ce:55:30:c0:de:f5:
85:1f:2b:83:6e:04:b1:59:68:73:8c:6b:ce:d8:1f:
a2:e9:f3:29:53:51:b5:27:a0:8b:92:56:74:e1:19:
42:49:34:c0:e6:bf:96:3c:20:4b:e3:d2:b9:28:05:
e1:97:10:9f:8f:3f:d3:39:0d:ab:09:4f:d0:a1:00:
23:10:ce:86:d9:ca:bd:17:27:bc:2a:e6:7a:2b:6e:
9b:03:38:17:43:f8:32:d2:46:6f:80:90:44:51:bd:
bf:85:8a:fe:64:c3:0a:81:15:dc:08:d5:ec:04:cb:
f9:97:21:51:90:e1:28:db:c7:96:d5:a6:b1:fe:02:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:71:EC:53:5B:6D:7A:42:7D:72:22:41:87:25:E0:8E:56:FC:33
X509v3 Authority Key Identifier:
keyid:D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:58:97:d4:12:cc:c8:53:ea:cb:5f:db:72:a7:95:d9:cc:
30:5c:00:3e:95:ab:b6:34:ff:2c:6d:f2:7b:e8:3d:45:9a:c5:
23:5e:fc:9b:52:1e:dd:a7:81:30:dc:71:5e:2d:9c:c2:38:2e:
d4:65:53:5b:1a:dd:75:f1:a5:48:6c:ed:47:81:d0:eb:1e:70:
98:96:38:1d:21:31:4f:81:ef:e5:c9:2c:ed:79:89:76:a9:3c:
85:d8:91:c5:3f:4d:db:e8:85:9e:f2:73:f6:e8:5a:3f:92:ca:
dd:d6:8d:db:62:d5:98:fc:e1:f1:c4:f4:4d:35:d3:5b:45:bf:
cd:e0:66:55:75:39:06:2b:93:d7:ac:17:58:a6:ae:4e:16:5d:
6d:ed:bb:c2:41:a6:34:c6:1b:b7:14:cd:48:62:46:16:45:6d:
e4:51:e0:bd:c0:71:73:1f:6c:91:02:d8:8d:53:7d:94:95:9b:
06:e7:71:77:f4:23:cd:87:95:ed:c3:a2:6d:c0:ab:ce:6d:ed:
45:01:0f:a2:7e:65:4a:6d:41:10:30:f3:a7:f0:2c:49:32:71:
13:99:81:bb:88:12:c3:41:14:e6:c2:8c:ec:d3:85:b9:82:01:
42:1d:0c:d0:9d:70:a2:f6:35:99:42:e0:39:ee:62:04:eb:ae:
96:0a:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:53 2026 by rpki-client