
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json)
Hash identifier: wNlO7TNHGwTZ1TXOvezisx96kehdtpg+u2LzaPHYV+o=
Subject key identifier: 0F:92:EA:0D:33:22:4D:6F:85:A7:6B:D3:30:66:07:A2:8D:0A:F4:3C
Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Certificate serial: 0541
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
Manifest number: 0539
Signing time: Tue 12 May 2026 23:36:24 +0000
Manifest this update: Tue 12 May 2026 23:36:23 +0000
Manifest next update: Tue 19 May 2026 23:36:23 +0000
Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: XcAtXPvL0X51xjzcZrXtoqarXXl5mvIghbPqjARUtvg=)
2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Validity
Not Before: May 12 23:36:23 2026 GMT
Not After : May 19 23:36:23 2026 GMT
Subject: CN=6a03b978-9b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:e8:01:18:1b:1e:0c:fb:e1:0c:63:15:eb:
ec:47:45:9f:05:0a:02:d1:20:27:b1:14:54:96:42:
92:07:2c:67:ba:f1:d0:17:f3:a0:c9:e3:5a:a5:16:
ff:1c:b9:99:c4:bb:bf:ba:66:49:2d:c3:23:a4:f1:
2a:43:07:51:f5:0b:82:a3:bd:75:a9:ce:c9:d2:bc:
ca:48:4b:c8:1f:99:70:4b:52:6d:8f:c8:75:db:0a:
d0:a3:e5:29:9c:92:c0:31:23:32:ea:96:cf:a2:a4:
11:9d:32:02:26:e3:1d:c7:49:d0:f2:55:cd:95:48:
7b:05:21:9c:4d:39:34:2b:bb:e9:70:df:54:16:4c:
44:9b:1a:d5:b5:41:24:ac:6f:23:db:a0:d0:72:3d:
02:72:70:1d:60:53:82:87:e6:5d:b0:40:db:45:f1:
94:ed:da:b8:83:7c:af:07:3a:ba:f6:18:e2:9f:a0:
ee:5a:73:ec:99:ef:0f:15:c1:77:a8:fa:9b:0e:26:
c8:8f:ae:97:2b:bf:61:7e:8b:34:cd:22:5f:51:b8:
78:27:aa:7b:01:97:3c:5d:2c:20:8c:5d:3c:43:77:
a3:21:c5:dd:e6:6b:6f:71:52:07:d9:18:67:25:da:
f9:bf:1d:8b:d8:3c:b2:06:15:4b:71:a7:c1:c7:b4:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:EA:0D:33:22:4D:6F:85:A7:6B:D3:30:66:07:A2:8D:0A:F4:3C
X509v3 Authority Key Identifier:
keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fb:df:7f:d8:03:48:29:cb:9d:24:fd:8c:6c:c0:02:df:2f:
2e:6c:5b:37:c1:ac:bb:b2:94:46:45:ff:a1:69:04:d7:8e:67:
d4:55:b0:5d:cd:e1:ab:db:48:8e:02:8b:c3:f3:89:0b:41:49:
8f:d0:f3:b3:0b:c8:6a:43:d7:c5:ce:bc:54:1e:f4:21:a8:7a:
3d:9c:7f:3c:7a:ca:e0:cc:6c:b8:91:ca:03:6c:72:06:6b:34:
a4:7c:61:0c:cb:72:2c:e2:bd:4e:c3:46:ca:b4:f9:f4:25:a6:
9f:7a:b8:e5:e2:72:9b:85:b3:0a:1b:56:e5:a1:fa:78:80:05:
16:54:d0:2e:c9:40:2b:a2:2d:91:34:d1:c9:26:9b:21:bc:f8:
65:5d:8c:7e:b9:55:f4:02:2c:00:d1:06:1f:2b:4b:45:11:ad:
dd:ca:cf:99:46:13:43:fc:2d:f7:5f:af:b5:d3:30:af:74:85:
61:02:60:10:4f:48:fb:99:bd:78:8e:4e:9f:0b:76:27:29:3f:
10:42:30:b1:05:4c:b0:9c:56:04:2e:05:17:af:f5:65:14:38:
60:d1:ef:44:95:c0:66:6f:5e:fc:7f:06:78:61:79:8c:f8:ee:
bd:32:58:e0:ea:04:19:80:a2:5d:13:be:d8:b3:60:ce:07:64:
db:c3:70:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5
Rjg4QzFCMkIwHhcNMjYwNTEyMjMzNjIzWhcNMjYwNTE5MjMzNjIzWjAYMRYwFAYD
VQQDEw02YTAzYjk3OC05YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruzoARgbHgz74QxjFevsR0WfBQoC0SAnsRRUlkKSByxnuvHQF/OgyeNapRb/
HLmZxLu/umZJLcMjpPEqQwdR9QuCo711qc7J0rzKSEvIH5lwS1Jtj8h12wrQo+Up
nJLAMSMy6pbPoqQRnTICJuMdx0nQ8lXNlUh7BSGcTTk0K7vpcN9UFkxEmxrVtUEk
rG8j26DQcj0CcnAdYFOCh+ZdsEDbRfGU7dq4g3yvBzq69hjin6DuWnPsme8PFcF3
qPqbDibIj66XK79hfos0zSJfUbh4J6p7AZc8XSwgjF08Q3ejIcXd5mtvcVIH2Rhn
Jdr5vx2L2DyyBhVLcafBx7TekwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+S6g0z
Ik1vhadr0zBmB6KNCvQ8MB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx
MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M
Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtfvff9gDSCnLnST9jGzAAt8vLmxbN8Gsu7KURkX/oWkE145n1FWwXc3hq9tI
jgKLw/OJC0FJj9DzswvIakPXxc68VB70Iah6PZx/PHrK4MxsuJHKA2xyBms0pHxh
DMtyLOK9TsNGyrT59CWmn3q45eJym4WzChtW5aH6eIAFFlTQLslAK6ItkTTRySab
Ibz4ZV2MfrlV9AIsANEGHytLRRGt3crPmUYTQ/wt91+vtdMwr3SFYQJgEE9I+5m9
eI5Onwt2Jyk/EEIwsQVMsJxWBC4FF6/1ZRQ4YNHvRJXAZm9e/H8GeGF5jPjuvTJY
4OoEGYCiXRO+2LNgzgdk28Nwhg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:20:16 2026 by rpki-client