
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier: d8HnZp+kSzpG4k7yVwAUIlXldBcUIz8zMKD7QenOmdw=
Subject key identifier: 31:85:DF:EB:3D:45:03:89:AE:3E:D2:ED:D5:D3:1B:C3:52:F4:EE:FB
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number: 0227
Signing time: Fri 25 Sep 2026 02:52:41 +0000
Manifest this update: Fri 25 Sep 2026 02:52:41 +0000
Manifest next update: Fri 02 Oct 2026 02:52:41 +0000
Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: k3EuV41t8XUPcRyzKB6RoXAg6orfhlrS0kCc9xJ5nMc=)
2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: 55QHoYjeQW2YY84IgZmrw7Bp3j4BU5OniNwUyuBN8Es=)
3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Validity
Not Before: Sep 25 02:52:41 2026 GMT
Not After : Oct 2 02:52:41 2026 GMT
Subject: CN=6ab5e1f9-6174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:4f:9c:04:70:2f:b2:bf:80:68:91:fd:9b:
25:d3:32:c7:83:28:0d:3e:e1:d4:dd:19:b5:f8:76:
bc:ec:da:47:34:4f:5d:83:95:5e:05:d4:0f:f8:af:
4a:11:a4:89:16:2f:28:79:16:2a:2a:27:3b:15:70:
f9:19:d0:a3:84:3c:03:97:22:66:2c:27:b9:c3:dc:
5d:9d:b8:34:a6:1b:d7:73:52:f7:f0:67:1e:cb:49:
6f:b5:c9:65:33:69:16:01:15:b7:05:d4:f2:43:f8:
a0:8b:ca:e8:0e:a5:6a:95:6d:bd:a1:08:95:ee:12:
01:a4:53:c1:75:7b:1a:33:e4:07:87:74:14:90:bf:
86:61:4a:f3:ae:9b:2c:25:ac:ff:cc:07:12:77:48:
aa:4e:8c:0b:3a:c1:0f:c2:70:9e:4e:42:ed:22:ed:
c4:8a:f8:05:22:27:1e:75:5d:7a:25:61:2f:e1:31:
ec:3e:44:7d:c4:f2:29:3d:db:c3:dd:3d:55:f6:59:
d6:7d:4e:a7:6e:3a:01:ce:b0:78:9c:f6:14:1c:ef:
68:f5:c0:8c:c2:53:24:70:3f:82:a4:1e:f8:44:9f:
be:4f:db:6c:4b:e1:cc:7a:6a:9b:eb:5a:53:e7:65:
ff:cf:2e:a0:45:ca:d2:3b:ea:ea:8b:d2:1b:b8:2c:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:DF:EB:3D:45:03:89:AE:3E:D2:ED:D5:D3:1B:C3:52:F4:EE:FB
X509v3 Authority Key Identifier:
keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d0:9a:bf:be:d7:bf:13:d4:fc:16:68:e3:27:12:ab:21:d3:
1e:c8:e1:07:c1:c5:e7:81:82:de:ba:54:e1:2e:74:30:04:69:
1a:2c:c5:f1:e2:d2:05:78:56:69:e5:70:08:a6:ee:4d:35:9d:
0b:f9:97:d2:d1:32:e7:27:e7:c3:64:28:f5:1d:89:fe:40:32:
52:fd:8e:ce:b4:28:d3:67:6c:df:7e:58:89:3d:d7:9c:59:95:
32:13:11:5d:c3:0a:db:b8:a0:ef:0c:47:da:f9:7b:6b:1a:d0:
e5:aa:4e:e9:61:ce:49:ca:96:65:a4:50:ad:fb:b7:28:5e:1e:
9d:95:c2:82:01:38:16:5f:d2:b9:86:b2:4a:a3:7d:cc:dc:b1:
a6:6e:1c:1f:3e:47:a3:79:04:58:65:bd:55:86:10:95:68:74:
ff:36:a5:7f:05:b9:71:10:61:52:b7:b1:f8:f9:f2:74:b9:ec:
94:4d:7c:01:21:78:01:dc:c1:16:62:4c:93:ca:ad:86:95:3d:
2f:0d:00:ba:71:ea:ac:79:8f:b9:f4:63:48:dd:d5:60:ef:f0:
df:c6:41:e9:b7:47:f7:5a:c7:60:c7:66:e7:9d:26:e3:7f:b5:
4a:42:1f:7b:17:ba:ab:36:cf:4e:d6:77:da:88:7b:df:9e:ab:
60:3d:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:17 2026 by rpki-client