
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier: 3UeHlNbCu05/C0IuphQy6jdzEj2aWKBHPS30NlHsb6c=
Subject key identifier: 89:3C:B2:02:D6:88:67:EE:F9:4C:C2:F8:A7:3E:66:81:1B:A2:02:FC
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number: 0222
Signing time: Thu 23 Jul 2026 04:12:48 +0000
Manifest this update: Thu 23 Jul 2026 04:12:48 +0000
Manifest next update: Thu 30 Jul 2026 04:12:48 +0000
Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: jndIOIla+UsfwmNXJZazrkQJYggi9GbAuhWGqjxJtCU=)
2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
3: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Jul 23 04:12:48 2026 GMT
Not After : Jul 30 04:12:48 2026 GMT
Subject: CN=6a6194c0-847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:de:d4:6a:82:2d:ad:bc:5f:49:dd:57:3e:
29:20:0a:b1:07:57:58:80:60:bf:29:68:be:14:3e:
1e:55:2d:13:fd:7b:cc:c9:e0:aa:d2:1a:65:9e:15:
7d:6e:c9:db:c5:35:2a:93:c1:a2:9e:e0:38:5f:fb:
d5:ec:7f:b5:35:4f:58:3b:c0:df:36:bd:38:dd:31:
d6:49:db:1e:d0:5f:8b:00:2f:21:db:b0:81:dd:e0:
ef:28:1f:01:e2:21:87:31:64:e9:35:85:10:38:c4:
95:c4:88:5a:1d:fe:df:37:49:5c:84:ce:db:b1:30:
5b:a8:25:b9:31:bd:b6:f6:95:6f:dd:74:e8:57:5d:
ca:6a:bc:ba:81:6f:ae:ba:e5:39:0d:9b:47:11:86:
8a:22:18:32:f9:25:41:bc:3e:b5:48:b5:0b:c7:64:
76:70:d0:4e:07:6e:30:39:d0:19:bf:09:d2:b4:1f:
f6:cc:8a:40:01:1e:b6:8a:ef:41:82:a2:42:84:fe:
c1:96:42:42:ef:c5:30:af:ee:4e:d1:27:7a:a8:b0:
64:27:8c:b8:f4:a4:07:bd:ad:92:b0:c8:ad:0f:13:
88:df:34:01:68:d4:c9:b0:32:88:cd:53:fe:a0:54:
4e:7d:34:b7:e2:ac:4c:74:4f:aa:a6:cf:db:2b:c5:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:B2:02:D6:88:67:EE:F9:4C:C2:F8:A7:3E:66:81:1B:A2:02:FC
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:76:97:92:0f:4b:95:68:ff:70:5d:4c:d6:3a:67:bc:98:
e9:d5:ef:65:04:7b:80:9f:18:91:94:ed:63:b9:2d:45:c5:ea:
db:34:40:50:b9:5c:c1:f3:d1:68:8d:85:c1:16:e1:e7:fc:98:
ae:82:cb:6c:dd:e5:52:c6:b2:c3:d6:23:4c:5b:91:43:79:de:
4d:35:e5:41:f2:1f:ab:d2:c8:82:4d:ab:af:03:7c:12:94:9f:
e3:4b:0f:3f:b6:e5:0b:4d:11:21:28:ea:25:58:79:2f:de:e5:
6a:34:f3:7a:03:24:4f:b0:ce:2d:ee:12:11:50:86:50:2a:a3:
ec:f6:75:b1:35:a4:3a:58:91:13:8a:a7:a0:7a:16:cc:d3:81:
11:32:34:1b:8c:cb:55:dd:44:84:ee:21:f6:2a:ea:55:67:3e:
6f:ec:01:81:76:14:5d:b0:20:00:53:03:66:94:b7:b5:fa:ab:
ec:57:5e:91:43:f7:74:3f:3f:d5:a8:6f:c9:6c:7a:9f:80:bb:
9f:03:a3:6f:1a:db:23:02:8b:33:63:f2:c3:4a:8d:8d:84:01:
34:ca:e2:84:64:36:42:b1:be:63:70:6c:99:6d:2f:89:49:ae:
f1:b4:f3:d1:11:65:93:6b:24:04:0e:02:c1:52:43:8e:2d:85:
d0:a9:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:28 2026 by rpki-client