
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: Ph7mKthh53RH3nB3FALtKcRW4hp7OxZKoQAUW4jKTL8=
Subject key identifier: 78:F9:80:14:1F:04:FB:51:14:08:06:A7:85:2A:AF:CB:23:8E:27:3E
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 356D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 3564
Signing time: Wed 22 Jul 2026 14:56:18 +0000
Manifest this update: Wed 22 Jul 2026 14:56:18 +0000
Manifest next update: Wed 29 Jul 2026 14:56:18 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: b1ze9VZ6fA3ypjdM4VSzRP7j46zajEw6SUFJiDkl74A=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Jul 22 14:56:18 2026 GMT
Not After : Jul 29 14:56:18 2026 GMT
Subject: CN=6a60da12-999a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:ae:c4:5f:cf:87:95:f2:90:96:9e:bf:e8:
3a:f6:3c:80:86:a2:b8:83:9e:4a:56:d6:82:10:06:
d6:53:2e:4e:68:43:b4:3d:92:f7:ca:f2:2c:44:00:
c7:9a:0f:ea:32:90:ef:aa:11:8a:f9:3d:a4:c3:68:
89:e5:aa:b2:ab:db:8c:71:92:e4:f4:f9:67:91:60:
26:c5:94:c8:b4:a3:80:10:f7:da:0e:5f:8d:e2:d3:
c0:f9:1b:66:73:ac:f0:10:57:d8:07:23:ef:1c:f5:
28:a6:b0:0e:b3:45:15:1b:44:45:4b:07:36:32:92:
1a:bc:be:da:4a:8f:15:96:04:ac:6f:9d:99:85:69:
3d:8d:03:38:f4:fc:e1:38:9f:c6:d7:b0:52:f5:ca:
16:de:74:40:0c:ef:b9:a2:0a:cf:8d:02:cc:4d:3a:
9d:2b:98:5a:ef:ec:0e:73:0a:22:6e:e7:e4:b8:c5:
8a:e6:cd:17:0b:07:bd:62:46:30:c2:ed:6d:69:f9:
8b:b5:61:7a:1a:9f:b7:c0:0e:b5:ff:a3:fb:9b:68:
38:ce:09:47:c0:bc:4d:62:4d:2f:33:65:de:32:b7:
38:1a:6f:70:f7:14:bc:6d:9f:41:2a:87:eb:97:d3:
6b:e1:c4:5c:3a:01:86:08:39:d4:27:50:87:43:45:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F9:80:14:1F:04:FB:51:14:08:06:A7:85:2A:AF:CB:23:8E:27:3E
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bc:01:a5:02:e6:b0:ee:f7:c9:a3:be:24:2a:06:10:a4:43:
6d:cf:91:ed:b2:57:4c:e4:c9:4b:67:b9:4f:24:2a:bf:88:a4:
0f:e3:cc:ff:0e:de:89:1b:f5:36:28:5b:c4:83:e8:be:ce:83:
be:7b:e8:42:ae:80:54:57:66:b6:37:56:4d:a7:93:98:74:5b:
de:86:ad:05:40:5c:a3:5c:41:87:7f:92:eb:d8:cf:1e:fc:e3:
f8:7c:e2:b1:4e:cc:8f:8e:cf:70:1a:4d:3a:66:aa:3a:08:68:
2a:ed:f8:c9:e4:9d:db:67:98:63:8e:ab:e5:61:dc:cf:c9:ee:
02:40:0f:1c:f8:3f:5f:e4:7d:6e:e0:f2:16:0c:f5:66:22:25:
e2:56:ab:6a:84:da:87:60:3d:48:6b:61:27:e8:7a:2c:4d:15:
60:8c:59:00:08:90:13:47:0c:42:be:41:90:f0:72:83:13:af:
2a:c5:71:6d:7c:8d:02:63:93:03:c1:be:27:77:0c:dc:85:08:
c6:f5:75:bb:2e:57:1d:1a:7b:dd:8c:c2:fb:22:7a:dd:23:f4:
45:db:45:11:55:e8:6b:32:3c:ce:06:68:f4:00:5c:2a:aa:00:
54:9a:b5:12:6f:ff:91:71:0f:65:6c:27:34:c5:f3:16:2f:6b:
e5:03:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:13 2026 by rpki-client