
$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier: 5GY03D9beCOWCJrQkdoEDOFGFyGIw1tPtzoaKiJ+hN0=
Subject key identifier: 53:6B:0E:3B:18:07:19:9E:03:1F:E5:46:C4:40:E5:FA:22:16:08:C2
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number: 039E
Signing time: Mon 11 May 2026 00:50:12 +0000
Manifest this update: Mon 11 May 2026 00:50:12 +0000
Manifest next update: Mon 18 May 2026 00:50:12 +0000
Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: p35NJWaaLOk6zsEZK4/srZ9u475J3ctOipzGXKX9BM0=)
2: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: HR77bAhQABOuXN2zNBh50gOjybW96fMlKzOiXRirJbk=)
3: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: HcV+IrVTq5pa4gc80I8x5ly7AndrsJpUFdKWEySl9RA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Validity
Not Before: May 11 00:50:12 2026 GMT
Not After : May 18 00:50:12 2026 GMT
Subject: CN=6a0127c4-917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:f5:eb:a3:8c:2b:95:26:f1:65:27:88:f3:
d3:69:32:7b:7b:40:1c:a3:e1:72:64:b0:06:c1:62:
2a:22:a6:ab:a3:e9:85:47:ee:1c:db:35:8c:73:f6:
c8:5c:0a:07:f7:41:51:26:6a:8b:9a:d1:e7:15:df:
3e:fd:c6:ab:4c:19:39:bb:b4:c2:b2:ae:9d:cd:3b:
c4:ac:63:79:88:0a:9f:68:f6:aa:dd:04:51:7d:4b:
ab:16:fb:b0:b3:31:72:83:de:d5:82:a8:60:ec:52:
e8:f5:9f:53:ff:e5:88:98:99:7a:c1:2b:80:0d:25:
76:ce:c9:87:bd:49:f2:78:f2:31:79:32:75:98:0c:
17:3c:0b:07:c4:e3:03:83:6a:fa:e6:43:7d:bd:11:
fe:c6:7c:31:e6:e0:ec:e5:c1:52:71:ac:81:bf:fa:
8b:92:63:0d:ef:c5:fa:a8:6e:08:9f:76:be:08:83:
dd:02:11:9c:b2:d0:8b:06:9c:dd:20:a8:1d:2e:a3:
f7:43:25:22:ee:46:30:74:28:74:91:90:3b:5a:4f:
95:5b:ac:47:c9:d6:bb:22:c9:88:46:92:9a:2a:de:
72:88:70:17:34:12:46:d3:bc:8e:ca:fd:83:a8:80:
14:27:ff:62:57:97:85:ce:f9:49:79:4a:e6:b1:87:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:0E:3B:18:07:19:9E:03:1F:E5:46:C4:40:E5:FA:22:16:08:C2
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5d:0a:fd:52:2a:25:78:31:41:ba:97:aa:4b:d3:f2:f6:9d:
bd:d5:2f:6e:87:c1:49:56:87:f9:24:0e:67:56:54:f2:a4:f8:
ca:d3:c6:a8:e4:d2:c2:df:cf:f7:15:cd:01:e6:64:00:8c:85:
48:ac:e8:aa:fc:3b:47:a1:76:61:bd:60:01:ae:57:ef:ca:cb:
e7:11:5f:58:66:8a:a5:1e:61:bc:d7:65:f5:f4:d4:bc:5e:67:
b5:51:4d:db:ff:f1:88:d8:a5:fb:cd:ea:8a:8d:4d:f6:97:05:
a2:4c:eb:4b:6c:b2:25:ad:b2:38:d3:56:8a:ae:1f:69:ba:79:
ce:5a:3f:af:19:c2:ab:2e:dd:88:9d:79:6b:c8:0a:74:56:75:
fa:ff:f8:6e:20:65:af:4d:8a:f9:52:95:bb:4e:7d:80:0a:af:
4e:15:c0:e1:b8:eb:e7:45:62:60:0f:eb:e9:fd:ac:14:1b:93:
5d:69:04:e9:25:ae:67:9f:d2:d0:0b:25:ac:ec:5a:b8:44:7c:
8f:3a:45:2a:36:02:d9:2b:e9:46:42:a8:ec:8a:6e:f3:d9:93:
f9:11:6c:07:36:c5:e1:3b:92:93:aa:30:5f:88:2e:31:bb:9d:
84:f5:2c:0e:35:30:9d:f7:c7:7a:af:7c:86:eb:6f:7e:21:1f:
f8:f9:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:43 2026 by rpki-client