
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier: gpLz7b/rn1BJaszd+1DcAzULY6v3DL2nstS2oinQqhk=
Subject key identifier: 4A:6A:BA:DC:56:42:DB:98:48:41:1A:0F:94:DD:A4:51:96:24:16:22
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number: 0300
Signing time: Thu 23 Jul 2026 02:09:38 +0000
Manifest this update: Thu 23 Jul 2026 02:09:38 +0000
Manifest next update: Thu 30 Jul 2026 02:09:38 +0000
Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: UpkhSYGm4sZJwii0KJx3SAM4wF96879nky4x6CDRxmo=)
2: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=)
3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=)
4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Validity
Not Before: Jul 23 02:09:38 2026 GMT
Not After : Jul 30 02:09:38 2026 GMT
Subject: CN=6a6177e2-6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:db:78:46:05:5e:6f:5a:69:20:2f:84:07:
f4:82:7c:c8:79:66:e0:d1:16:a9:20:38:0c:ea:99:
cc:ba:a3:18:e9:7f:a6:d9:a0:94:a3:2c:07:15:8c:
f1:df:79:a3:57:40:c5:87:81:16:d8:0f:b6:94:3d:
63:e6:71:08:1b:36:d5:93:ec:a9:59:24:54:ca:8e:
47:ef:31:c3:d3:92:bb:05:6d:c7:27:2c:1a:fe:26:
0f:2e:63:27:7c:65:e8:53:d5:99:27:25:62:65:69:
fd:14:7f:be:f3:24:ef:d9:b5:69:45:eb:21:d1:d4:
b4:c2:34:4c:41:99:a9:44:c9:7e:d2:1f:7c:dd:e9:
b4:fe:3b:a1:68:c6:a1:45:07:d0:6b:3f:5d:fc:a4:
fc:88:42:b5:28:1d:0f:7c:76:54:18:5a:3b:e2:b5:
78:5d:d6:c8:b8:75:96:1f:32:8c:13:48:4e:cd:da:
5a:85:bf:c7:c0:a7:b0:61:1f:6b:00:86:77:e6:96:
fe:ec:8a:0e:ce:15:83:e6:e0:80:24:87:ff:e3:70:
2a:a8:c4:c8:e2:ad:5f:87:74:55:66:05:9a:3a:92:
e5:b7:b9:36:6a:fc:7c:1d:a4:8a:11:dd:6b:af:50:
87:21:23:89:ca:2e:20:fe:ad:88:d3:c9:02:e0:cd:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:BA:DC:56:42:DB:98:48:41:1A:0F:94:DD:A4:51:96:24:16:22
X509v3 Authority Key Identifier:
keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:d8:33:94:58:f3:af:9e:b6:82:78:8b:e5:c6:70:f9:0a:
21:cd:79:c1:2d:99:a5:03:0c:b2:08:95:95:85:3c:96:67:08:
d6:2a:8e:d9:da:7b:9c:ea:eb:9b:85:a9:47:76:79:32:9c:af:
89:1d:2d:c4:3f:23:7b:c1:f0:4b:17:0f:d1:49:99:ec:f9:2b:
57:1c:00:7c:5e:cb:04:d9:93:58:c3:7a:9b:a6:c0:0c:4a:dd:
cd:45:aa:7d:63:13:39:87:85:fa:95:e7:0f:25:0c:68:da:73:
73:f4:82:31:c3:b5:0a:ad:f4:3a:f2:b9:06:c8:3a:1e:59:c0:
f0:05:22:2f:88:29:55:7e:51:b1:08:b8:b7:0b:fd:06:30:66:
73:e5:b1:97:9f:ac:19:c3:16:1b:01:23:13:3f:c5:ff:ac:6b:
58:2e:99:e5:41:dc:ac:87:f3:d0:34:f3:58:25:a8:1b:5c:cb:
df:40:50:83:4d:4f:b5:7f:63:f8:e2:09:23:6d:d6:b9:2d:f9:
cf:21:32:7e:53:30:3e:65:cc:01:a6:ec:f7:33:e3:7e:2a:c2:
f7:32:8c:d6:f6:39:46:91:0d:29:c7:8a:63:a5:88:51:b0:d5:
7a:cd:33:8e:93:96:35:5e:54:08:b4:54:d2:23:f2:ce:e5:61:
7b:a5:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:18 2026 by rpki-client