
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier: z+5X/n4vEbl7iL2U4Um0mpWnj3co2/6glUDlEFWaLac=
Subject key identifier: 7E:2B:78:09:DE:82:B3:BC:68:02:91:F3:93:6B:BA:70:0B:4B:1E:D4
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number: 9E
Signing time: Sun 11 Oct 2026 08:01:31 +0000
Manifest this update: Sun 11 Oct 2026 08:01:30 +0000
Manifest next update: Sun 18 Oct 2026 08:01:30 +0000
Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: Z8pJjh+qIehDYQBZwKDwjRnXYy0I/3XD7NFmulz4kvQ=)
2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=)
3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Validity
Not Before: Oct 11 08:01:30 2026 GMT
Not After : Oct 18 08:01:30 2026 GMT
Subject: CN=6acb425a-16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:fc:eb:29:49:3c:fc:43:9c:02:59:41:10:
2e:0f:c1:6b:e2:0b:10:cf:a8:bb:6b:b4:e1:3e:23:
37:be:52:4a:26:db:c0:f4:68:62:62:13:f9:f8:f3:
78:4d:a3:59:08:ee:15:48:67:cd:32:5b:11:7b:03:
25:89:dd:23:cd:ab:c2:5d:38:23:b7:a2:6b:3b:92:
a5:44:1c:f3:79:53:45:25:2b:9f:07:ff:fd:53:b5:
b3:66:29:ea:4f:46:07:f9:0d:a3:f0:f4:54:26:7d:
5d:15:ad:80:0a:b5:3f:ad:69:8e:cd:09:02:b9:ff:
c6:7d:79:51:c8:8d:15:fb:c3:56:95:69:16:b5:d8:
cc:be:44:04:ac:2a:79:63:58:dd:7a:5c:fc:e9:5d:
91:68:da:33:ec:b1:11:83:2f:bc:ce:19:cc:6f:4b:
ed:ec:59:8c:42:9d:b9:03:50:19:dd:d7:73:9a:be:
25:b3:a4:7e:fc:d6:93:14:7b:f9:d4:98:8b:9c:61:
2f:9b:54:b3:22:5b:69:98:ab:5c:de:06:0b:54:6c:
14:9e:5c:9d:6e:4d:53:81:d8:13:f1:c3:51:b4:07:
41:94:1a:b8:e3:2b:79:95:9b:12:d3:7e:f8:dd:9c:
5b:97:17:25:37:4a:80:8d:58:86:4d:f0:a2:7f:a2:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:78:09:DE:82:B3:BC:68:02:91:F3:93:6B:BA:70:0B:4B:1E:D4
X509v3 Authority Key Identifier:
keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d6:f4:63:fd:42:13:19:89:bf:b3:88:cc:95:2f:2c:b0:ad:
9a:ab:0a:f5:56:a2:c9:ae:af:24:29:48:78:a5:be:51:d5:5d:
f1:bd:c8:f8:62:ac:84:5d:96:83:37:ac:f9:f5:b9:3b:22:44:
92:5b:3f:57:fa:b0:ab:10:12:3c:e8:5c:2f:18:64:ec:0a:9e:
74:f6:9b:b6:09:a1:10:2c:0a:6c:d9:b5:2d:01:fb:3c:5b:03:
0c:e1:c2:b8:85:24:4e:e0:64:a9:ae:9e:f0:07:ca:c6:48:9e:
1c:36:79:82:1c:71:4b:96:a9:27:15:c4:06:0c:6f:30:86:40:
3d:52:83:29:9a:21:f6:b9:0f:0b:fb:1d:78:2a:71:44:cc:5c:
79:a8:2a:b9:57:c8:3e:e8:8f:64:c7:bc:e8:ab:da:71:df:60:
30:2c:8c:0e:b2:b9:30:93:b1:94:a9:a7:fb:8b:ec:16:79:22:
c7:82:a9:75:f4:13:0a:8a:7d:0e:c7:e9:ed:5b:61:cc:18:18:
79:dc:7b:50:5d:1a:63:dc:c9:1d:de:70:65:eb:94:13:d9:01:
2d:a4:10:61:eb:4d:9a:50:d9:0a:f8:a3:9f:d7:ca:0c:6d:64:
96:5c:d6:6c:5a:be:96:59:be:0d:d1:79:0b:dd:32:91:be:dc:
36:e7:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:47:34 2026 by rpki-client