
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json)
Hash identifier: blPmTUDvgjhDdZAwVC/ixg+6aikPXlwLiprqQbAYEGQ=
Subject key identifier: D9:D2:B7:AC:24:FE:C4:BB:9B:1D:44:3C:62:B9:43:B5:E0:BB:0C:7F
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial: 086A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
Manifest number: 085E
Signing time: Wed 22 Jul 2026 21:24:14 +0000
Manifest this update: Wed 22 Jul 2026 21:24:13 +0000
Manifest next update: Wed 29 Jul 2026 21:24:13 +0000
Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: Ws0Lpg7r1t4OQJFhojT2e59+4dOnWUOsWDLHvfAj5Ps=)
2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iKOlmepNJ2Cs3U5hWGbf9IJf0JMlwqn81QfKtYqpKgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Validity
Not Before: Jul 22 21:24:13 2026 GMT
Not After : Jul 29 21:24:13 2026 GMT
Subject: CN=6a6134fe-f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:e8:3b:73:20:27:7d:db:fe:ae:02:4f:48:
af:60:e7:49:66:cf:3c:2e:c8:54:51:b6:62:31:8d:
88:34:c2:e4:8e:91:80:7f:28:0b:2b:01:45:14:08:
79:c1:4e:0e:fd:5d:0e:8b:0b:15:51:eb:7f:39:63:
0a:24:b8:f6:13:48:39:e3:33:af:54:a5:85:db:6a:
29:e7:50:43:80:0d:ed:ca:6b:3b:4e:91:12:77:c6:
f9:18:bf:34:cd:89:81:af:d7:51:08:b2:14:f9:b5:
c5:72:44:0b:e4:2f:35:27:88:1c:5d:02:57:7c:7e:
b1:92:2f:16:c7:f7:55:b1:b7:85:11:1c:11:26:80:
0f:16:64:e0:69:f9:7f:da:99:0d:25:d7:25:72:e0:
22:da:f0:e6:b7:9c:62:31:34:49:eb:d1:99:6c:7b:
61:ca:d7:57:55:0c:40:17:76:03:84:4f:59:b6:4a:
26:70:86:c3:8d:f8:28:d4:89:15:63:fd:3b:a5:ba:
77:24:b2:55:7d:e2:95:7f:c5:34:9e:22:6d:fd:24:
20:53:e4:53:32:f3:d4:00:73:7e:98:e3:50:89:4b:
47:a0:be:15:38:cb:d7:d2:99:34:8d:45:41:1e:96:
7d:ab:d3:e2:8d:5a:3a:67:b8:a3:35:f7:22:c6:50:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:B7:AC:24:FE:C4:BB:9B:1D:44:3C:62:B9:43:B5:E0:BB:0C:7F
X509v3 Authority Key Identifier:
keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:e7:91:c3:20:01:8a:0a:38:6c:1d:2c:bb:14:7d:8f:aa:
d6:e0:39:73:38:45:1a:4e:71:38:3e:57:26:20:35:2e:f6:69:
38:3c:47:f4:e6:9c:3b:1d:bc:9c:4f:08:5b:c1:9c:66:23:75:
4a:75:a1:88:73:a2:fb:1c:08:20:91:dc:41:fc:f4:ef:ca:15:
86:49:62:71:8d:2c:7a:66:7f:7d:83:47:b0:e2:cc:9b:04:25:
09:ee:86:f8:bc:d7:26:4b:12:d3:7e:08:eb:e9:e1:10:ab:13:
99:54:5e:6c:c2:6b:b2:e9:33:7f:b0:de:55:55:79:8a:7f:9b:
0b:40:56:0b:a8:4a:d5:ed:c6:36:e6:b9:a0:e4:6c:5e:6f:38:
1f:2d:2b:19:e0:9f:7e:53:78:2e:9b:7a:30:eb:d7:fa:f3:50:
0c:08:00:04:01:28:9a:2b:b0:dc:06:30:32:9c:f1:dc:ef:97:
85:d4:09:c3:c9:d1:c2:3b:65:02:84:fa:c6:cd:f0:0f:3f:d6:
c6:cc:73:e4:f0:ba:d1:d7:e5:af:5d:9b:93:cc:df:be:cf:14:
cc:8a:77:9d:9c:0d:55:8b:86:f8:6a:32:a9:e0:42:a6:21:f9:
92:35:d5:57:97:32:60:be:ad:04:f7:26:e6:c7:60:07:31:cf:
ed:c9:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:10 2026 by rpki-client