
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier: X49F1Sv16VH+bVOrkIhql4gsJDOYuYgkEdipz6fY+6M=
Subject key identifier: F9:72:B3:24:39:7E:91:98:A0:E6:07:31:33:FC:81:58:0C:6B:DD:9B
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number: 027D
Signing time: Thu 23 Jul 2026 03:08:52 +0000
Manifest this update: Thu 23 Jul 2026 03:08:52 +0000
Manifest next update: Thu 30 Jul 2026 03:08:52 +0000
Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: /AKupquuXXc9VjO8rmqZFLXKcVxrlGnl5lACHaiPm1c=)
2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: k3WVwtkl6L7ZLGV3P7GhulqncgzNNGVUWm1IeT8xDNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Validity
Not Before: Jul 23 03:08:52 2026 GMT
Not After : Jul 30 03:08:52 2026 GMT
Subject: CN=6a6185c4-8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:e9:52:37:28:e2:fc:df:71:04:a6:d6:a7:
77:73:f0:59:bf:ea:fd:1a:e3:d4:ec:e1:50:57:16:
af:b6:47:bc:ce:ca:17:be:1c:1b:61:97:3b:e4:ca:
74:1e:2a:14:31:32:36:33:25:d5:08:73:da:f8:b6:
a6:bb:b6:49:0b:b2:b8:a2:b9:ca:9c:8b:c2:0d:6b:
1c:51:47:ee:e9:b9:cc:1e:f6:63:92:ae:6a:d7:51:
10:91:22:e4:07:bb:ec:b4:2a:4b:e7:e0:68:dc:c4:
86:35:69:5b:ca:9a:73:22:bb:b7:5e:0c:73:5c:bf:
2f:f7:12:bc:61:72:29:82:b8:bb:cc:1a:19:8d:2e:
9a:a6:b2:f0:55:ff:cc:9f:b0:87:6a:be:c5:bc:b0:
0e:cd:45:8a:ef:c5:1c:3c:c6:df:58:62:d9:00:8f:
28:cd:bb:c8:f5:52:a2:2c:a7:46:00:15:ea:ce:ab:
cf:78:86:ae:72:fb:f1:b3:df:eb:db:9b:d6:c6:47:
b6:02:ae:1c:8f:ec:e1:2d:3f:fa:7d:ee:a4:5c:f3:
fb:80:60:e7:2a:35:48:96:3d:60:66:7f:17:d4:4e:
b6:65:cc:47:e4:48:5d:63:72:7f:ed:fc:ee:ac:e8:
38:0b:72:d9:83:9a:29:99:05:de:7c:b4:19:59:c6:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:B3:24:39:7E:91:98:A0:E6:07:31:33:FC:81:58:0C:6B:DD:9B
X509v3 Authority Key Identifier:
keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:d5:d0:d5:86:cc:97:06:75:2b:d5:07:df:d5:aa:84:75:
0f:74:95:af:58:2e:b4:95:0d:d7:b2:f4:8f:37:37:5a:71:7f:
fe:59:96:a8:32:e4:1b:5f:94:b9:18:03:bf:79:d7:d6:b7:b1:
c4:c6:29:04:77:0b:da:51:b3:32:15:48:6a:a1:5b:5f:68:81:
4c:b0:5c:df:58:b9:49:b6:2d:4b:ae:be:f3:01:68:5c:85:87:
ac:3e:56:8f:bf:4f:17:d1:9e:62:34:7d:39:cf:d3:e6:d2:bd:
4e:64:04:b0:61:8d:12:3b:bf:a6:4a:50:c6:9e:e1:36:01:bd:
1c:cd:48:ef:67:10:2b:42:c5:5d:8f:17:72:6d:1a:a8:a8:b5:
34:3f:f6:7f:d2:a7:6c:e9:eb:46:19:3e:4e:61:70:3a:bc:07:
98:1c:e7:0b:2f:9b:6c:19:83:b1:70:88:80:4a:a4:ef:39:5b:
e3:4f:02:7f:0d:3b:2b:b7:fa:68:ee:ab:56:9d:81:a7:3d:76:
85:e0:61:e8:66:75:b3:98:c0:4a:2d:fb:6a:e1:fe:a5:43:1b:
81:69:4d:11:f5:e7:15:5f:8f:62:b6:75:7c:d6:9c:dc:53:24:
be:e1:d8:ae:73:2c:ad:10:17:71:1a:be:15:92:dc:31:cb:72:
a0:fe:16:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0
OEJCOUUxMjMwHhcNMjYwNzIzMDMwODUyWhcNMjYwNzMwMDMwODUyWjAYMRYwFAYD
VQQDEw02YTYxODVjNC04ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJbpUjco4vzfcQSm1qd3c/BZv+r9GuPU7OFQVxavtke8zsoXvhwbYZc75Mp0
HioUMTI2MyXVCHPa+Lamu7ZJC7K4ornKnIvCDWscUUfu6bnMHvZjkq5q11EQkSLk
B7vstCpL5+Bo3MSGNWlbyppzIru3XgxzXL8v9xK8YXIpgri7zBoZjS6aprLwVf/M
n7CHar7FvLAOzUWK78UcPMbfWGLZAI8ozbvI9VKiLKdGABXqzqvPeIaucvvxs9/r
25vWxke2Aq4cj+zhLT/6fe6kXPP7gGDnKjVIlj1gZn8X1E62ZcxH5EhdY3J/7fzu
rOg4C3LZg5opmQXefLQZWcZ/LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlysyQ5
fpGYoOYHMTP8gVgMa92bMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4
MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx
ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUN7V0NWGzJcGdSvVB9/VqoR1D3SVr1gutJUN17L0jzc3WnF//lmWqDLkG1+U
uRgDv3nX1rexxMYpBHcL2lGzMhVIaqFbX2iBTLBc31i5SbYtS66+8wFoXIWHrD5W
j79PF9GeYjR9Oc/T5tK9TmQEsGGNEju/pkpQxp7hNgG9HM1I72cQK0LFXY8Xcm0a
qKi1ND/2f9KnbOnrRhk+TmFwOrwHmBznCy+bbBmDsXCIgEqk7zlb408Cfw07K7f6
aO6rVp2Bpz12heBh6GZ1s5jASi37auH+pUMbgWlNEfXnFV+PYrZ1fNac3FMkvuHY
rnMsrRAXcRq+FZLcMctyoP4WHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:06 2026 by rpki-client