
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json)
Hash identifier: YYpjBWzH4896ElKB94CFTaZ91pHFZayHTHE4b8tGhIw=
Subject key identifier: B0:8B:63:91:61:2C:C2:71:87:35:2C:28:E2:A7:D8:31:80:12:67:EC
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
Manifest number: F2
Signing time: Thu 23 Jul 2026 08:11:41 +0000
Manifest this update: Thu 23 Jul 2026 08:11:41 +0000
Manifest next update: Thu 30 Jul 2026 08:11:41 +0000
Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: osthAlEZDTmy7Y8s9tXzjkPNdU2Y8sZw5fdYrx2D4vQ=)
2: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=)
3: E31A926E6EAF11F088699976C4F9AE02.roa (hash: FKzaSN7wk2dTCiUFf01WiFdCMnfThuKnhdLTnhYbGgM=)
4: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: vNh/5KqyGcLBgRea4GEaf1GiSDPNGV2ayLMJqKrT05s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Validity
Not Before: Jul 23 08:11:41 2026 GMT
Not After : Jul 30 08:11:41 2026 GMT
Subject: CN=6a61ccbd-9d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:6d:72:36:15:a4:7c:fd:f1:17:cf:16:31:
92:8c:34:a4:1a:86:a3:93:4d:0b:65:35:5f:81:4d:
31:42:6c:98:01:80:d5:66:19:66:d9:23:62:95:11:
3d:26:38:34:a1:67:2e:0b:28:fc:07:eb:f0:4f:44:
60:e4:df:78:b4:80:5c:40:ac:a9:54:b1:d9:55:f9:
55:e4:a9:cb:21:c6:d1:b0:6a:5f:14:5b:0d:3f:3e:
78:d0:71:90:47:b8:fc:72:27:b6:07:7b:16:b8:cb:
d9:d1:d0:94:e2:e1:5c:01:61:90:3c:fe:50:e0:db:
9d:3e:96:5a:17:21:8e:5b:5b:cb:e5:06:12:17:9d:
d7:7b:14:74:1c:c1:f0:52:3b:6c:f0:d2:e9:10:b1:
6f:8a:ea:b3:2a:c8:fc:09:5e:02:cf:ef:58:8c:9d:
99:2d:58:d0:03:87:53:32:22:29:57:86:8f:f2:25:
ee:26:5b:80:b5:27:65:c5:95:91:72:e1:47:de:11:
06:ef:b4:f2:27:d2:0a:df:fd:a4:42:fb:87:48:a3:
19:87:d5:c2:33:87:ab:9a:8f:bd:89:bb:7e:a9:61:
c1:84:af:dc:90:54:69:c8:7b:b5:06:06:fd:30:37:
d2:cc:91:59:c0:ed:4a:89:93:39:5d:00:5e:58:a2:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:63:91:61:2C:C2:71:87:35:2C:28:E2:A7:D8:31:80:12:67:EC
X509v3 Authority Key Identifier:
keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:53:d3:e9:6a:4a:a8:ac:7f:19:8e:bf:c6:d1:c2:92:d0:b5:
39:c7:18:aa:2c:38:f5:c3:8e:89:5e:fc:16:ce:3c:f0:31:f7:
4c:d0:66:bc:68:cc:6c:66:08:58:f1:f6:ed:29:17:1b:96:76:
57:5c:4c:05:1a:60:6c:3a:62:f3:3b:67:b5:16:fd:72:81:bf:
a5:c4:16:e7:7c:b3:e3:24:30:90:4f:26:12:fd:03:8e:3e:1d:
69:2c:9f:b3:6c:ca:99:e2:59:29:c8:66:92:76:8f:e4:22:43:
08:85:fa:9c:68:f3:a5:87:83:0b:fe:01:ef:44:bb:4c:1d:79:
8f:3a:dd:15:5b:de:d6:53:81:d7:04:15:ee:f4:aa:87:1d:82:
03:a7:ba:35:cb:d0:29:f3:91:5d:b2:e2:9f:24:36:1b:b6:ee:
3c:9a:84:3c:8e:2e:98:9d:cb:6b:31:1a:75:aa:37:b1:08:df:
f5:21:06:36:fc:b7:10:16:ba:89:d1:06:d1:87:e6:47:d2:85:
03:e0:b0:ab:3c:a8:2e:05:d1:ca:10:94:ee:72:7f:da:c7:0b:
6b:0f:3f:c4:c1:26:97:28:d6:e9:9f:9c:f7:1b:ae:cd:72:04:
80:c9:e0:90:13:f9:9c:26:1f:a0:72:96:ae:7d:77:e7:b7:08:
14:14:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:53 2026 by rpki-client