
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier: O+CRFzARF58XgssEqOSqNUOTTpl6DGBR1mZMYMw2iS8=
Subject key identifier: 88:18:89:75:23:04:1E:25:6B:F0:B5:A5:CE:5E:5E:8A:3D:0C:8D:38
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number: 67
Signing time: Mon 11 May 2026 08:04:26 +0000
Manifest this update: Mon 11 May 2026 08:04:26 +0000
Manifest next update: Mon 18 May 2026 08:04:26 +0000
Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: Ie5QiCqhWcLDTBSwReQ7v8JcRMZFiSC3uVvWw/PYxd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Validity
Not Before: May 11 08:04:26 2026 GMT
Not After : May 18 08:04:26 2026 GMT
Subject: CN=6a018d8a-3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:f5:5e:f3:49:2c:3e:fd:68:b2:3e:56:e2:
0c:9f:f5:18:b0:1a:74:c5:9b:6b:a6:69:74:38:a1:
c3:5c:31:e8:a0:bc:be:d5:89:98:d3:b5:14:32:4c:
23:98:fa:d3:43:28:e3:aa:69:57:15:48:ee:ad:f2:
f3:ad:3f:56:a3:0f:8c:76:75:b5:b3:b1:e1:b6:8c:
10:91:d8:de:31:c9:c2:92:2c:b7:07:e4:6f:1b:20:
4f:b5:ef:28:35:11:68:83:c3:44:72:be:79:59:d8:
ac:0c:6f:63:33:47:be:f6:8b:3d:d6:cb:ff:2e:ea:
26:ab:51:e6:7e:12:df:2e:be:16:d4:ac:59:ac:e3:
c9:b7:7c:79:85:99:4c:80:76:c4:7a:b2:8c:99:44:
14:2b:99:48:76:0e:d5:ea:a6:47:83:75:3c:e4:55:
0e:1d:af:34:ca:e4:ea:bc:88:b9:75:6a:ed:65:f9:
77:63:8b:fa:6d:ce:b5:cc:69:19:36:81:f6:6c:b0:
7e:cc:73:55:9e:3e:69:ec:0d:4b:20:a4:03:a9:f8:
c5:3d:5b:72:a5:e4:a9:0c:73:71:2f:73:40:ad:32:
92:ed:e4:c8:32:17:08:73:2f:f4:f5:4d:46:bc:8c:
4b:8a:3a:c4:39:0e:5c:7b:54:44:d4:a5:03:1e:d6:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:89:75:23:04:1E:25:6B:F0:B5:A5:CE:5E:5E:8A:3D:0C:8D:38
X509v3 Authority Key Identifier:
keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:d9:b3:2c:22:fb:33:3d:6e:9d:27:57:5b:33:fb:41:e6:
b2:73:12:98:8e:ff:d9:86:33:8e:c4:ef:66:3c:71:14:10:8c:
d7:0e:18:f6:44:90:cb:0d:79:c0:93:0a:bb:ac:4e:4e:6c:4f:
76:2b:82:ae:9e:e0:3b:75:17:3a:e3:20:fa:a2:fc:ef:b9:f4:
f8:b6:6d:aa:03:5d:43:31:25:8f:db:0a:61:15:e3:b9:ea:77:
0d:e2:c3:fd:97:b0:26:f0:58:b4:61:df:1c:06:78:a1:b7:24:
f1:69:f1:fc:29:2a:83:03:8a:09:14:92:b3:c4:7d:03:96:f4:
97:16:aa:ab:7a:f3:93:e7:26:96:21:6d:f7:00:ba:0a:35:20:
75:a1:f4:76:b7:b2:1d:10:bd:af:10:9b:78:ba:0b:32:5a:56:
88:39:75:ae:6e:1f:88:1f:57:2b:03:c8:54:3d:57:c3:64:e7:
7e:f3:56:19:d3:c7:d3:2d:ac:80:31:ae:3f:41:4d:bf:16:01:
ef:ee:f8:53:88:90:34:0e:6d:84:89:30:a3:74:0a:31:1d:fe:
8a:f3:45:37:62:db:8c:cd:17:85:8a:61:7f:d2:bd:01:07:ee:
0b:db:28:8a:49:dd:0b:ce:5a:a6:21:84:0e:1d:0f:e7:fb:85:
4a:19:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:41 2026 by rpki-client