
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: uq91sDgIu/+fppA6EDJ5WYnuPBSC6TkGfehl7qSrm4s=
Subject key identifier: 1D:2F:05:77:D8:4E:FA:F2:7C:5C:6C:44:D2:8F:AE:23:C6:CF:9E:1B
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 0298
Signing time: Wed 23 Sep 2026 01:32:56 +0000
Manifest this update: Wed 23 Sep 2026 01:32:56 +0000
Manifest next update: Wed 30 Sep 2026 01:32:56 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: OdOuvrpJBKgDYql/2VESVIu07USFlGu8lLHpywlMOqg=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: Sep 23 01:32:56 2026 GMT
Not After : Sep 30 01:32:56 2026 GMT
Subject: CN=6ab32c48-24ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:f7:6f:b6:c1:dd:b3:fc:c9:32:8f:63:b1:
17:a0:88:ae:54:0b:f2:d4:c2:3b:07:32:54:72:e7:
d4:0f:c6:df:06:3f:41:60:84:33:8c:df:cd:56:d4:
5e:14:d2:f7:ce:7b:3c:49:76:f4:cc:a9:27:1d:20:
ec:6a:c0:82:6a:5a:d3:4f:8c:00:0b:3a:3f:2c:b8:
c8:1f:dd:a5:93:93:42:67:1c:c0:7d:35:86:08:e2:
70:59:64:c2:5b:7a:d1:39:5a:81:73:d4:98:7d:fe:
c5:04:bf:23:9e:dc:2e:4b:88:57:49:c6:ae:58:8b:
e7:4d:4e:a3:63:97:78:28:4f:f1:1f:13:5b:a3:c0:
1b:38:4e:24:ee:6d:f4:57:cc:e5:da:d5:95:42:9c:
43:4d:c1:9b:2a:4f:aa:c7:ec:b6:18:c3:b8:98:31:
65:cf:17:3a:5a:cc:9f:eb:ef:f5:64:f3:9c:2f:4e:
1c:cd:c3:b8:64:ee:f9:a1:5a:bf:f9:05:32:d2:09:
1b:d8:d7:2c:d5:13:d6:63:bc:3c:36:d9:07:48:1d:
2a:d4:78:06:88:c9:41:db:9a:fb:c5:95:4d:4a:83:
e9:dc:6c:c6:e0:4e:22:68:ff:71:a7:8d:84:1e:e3:
5d:a6:db:ad:68:26:15:27:46:8e:df:4b:21:1c:c2:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:05:77:D8:4E:FA:F2:7C:5C:6C:44:D2:8F:AE:23:C6:CF:9E:1B
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:87:9c:0c:4e:e2:46:e1:16:06:a4:b1:e5:bc:81:22:a9:45:
1c:b1:d0:c5:e1:e5:c4:0d:72:b3:1a:ec:d9:17:5e:e3:10:44:
6d:03:2b:82:a7:d1:bb:08:d7:54:aa:bf:c3:5b:74:fd:1a:2c:
60:2d:52:d6:14:6c:83:00:74:0a:24:77:60:41:3f:f9:99:6e:
a0:53:96:a4:fd:19:fc:2c:72:33:ca:62:bd:61:6f:65:d6:fa:
92:5f:cd:3a:64:de:e3:3a:08:6b:f3:08:ec:f4:f6:4a:b6:ff:
f0:15:bf:2c:5e:ff:81:57:ea:03:62:d5:d5:3a:87:3e:23:9c:
15:fc:97:95:0c:9d:08:ae:91:c6:5b:a6:57:9f:5c:ad:c2:b6:
6a:07:95:cb:e4:b9:a4:09:2a:6d:86:6a:48:28:55:5b:50:3e:
90:2d:47:35:85:b2:01:18:2b:29:a2:a4:81:70:a5:eb:6e:3b:
a2:be:e2:ea:3a:2a:0c:9a:5d:d8:e1:33:f6:bd:c1:80:0a:c6:
2a:c6:b7:32:90:07:53:55:e5:e5:d2:93:79:9b:d2:7b:b3:b7:
bd:31:12:0e:03:a0:98:b0:b6:d1:d6:f5:cc:4d:e3:15:96:1f:
a2:27:ec:c7:31:7a:2f:ea:4d:d3:98:29:b4:13:a1:53:86:59:
8e:34:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:01:44 2026 by rpki-client