
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: TqcgeXIE10tAx8l6fzfOOMUps5HhlV1DX69rNi5+cJo=
Subject key identifier: 0C:73:4E:66:A2:DF:0E:B2:26:64:3B:49:5B:C5:C4:54:80:72:8F:28
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 01E2
Signing time: Wed 13 May 2026 03:31:02 +0000
Manifest this update: Wed 13 May 2026 03:31:01 +0000
Manifest next update: Wed 20 May 2026 03:31:01 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: hB13lye1xwctiBKXVXP837cnGYf2F48ZBtrmvYELE5o=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uq1kihQpsHqPtfnJKhqjRrtt4j4NKFgy3qB8nhVLYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: May 13 03:31:01 2026 GMT
Not After : May 20 03:31:01 2026 GMT
Subject: CN=6a03f075-86c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:09:17:60:6b:0c:fa:a9:84:fd:f3:8d:70:
2d:99:d6:53:bc:8f:78:b5:bb:43:d0:9a:63:5e:7a:
fb:cb:d9:27:f3:20:19:1b:c8:0d:db:95:89:7d:24:
df:f3:4e:1e:aa:4a:ce:2d:35:55:92:01:d2:77:8c:
55:9e:f5:f7:88:72:ed:a4:d9:0b:07:1c:38:25:5a:
bc:3d:7e:35:29:e6:bb:f3:e0:fc:6e:ab:28:fa:7a:
a7:9a:b7:ee:9d:90:88:b1:8b:56:bd:34:e0:1f:ff:
83:72:6a:bf:7e:85:7a:0b:9c:70:ad:e0:06:9a:43:
5c:ed:90:dc:8e:df:08:5c:25:cc:57:c2:40:b3:9f:
c1:7c:01:ee:bd:7a:62:fe:b0:5d:77:08:34:7b:37:
84:8a:6a:04:79:d9:a9:c8:d9:0a:fa:a3:1c:1f:8d:
b1:96:ab:b8:51:bb:f0:99:aa:00:77:8c:bb:3e:2e:
3a:1e:17:01:56:7c:de:d4:94:89:8e:cc:ea:d3:3c:
20:df:b7:3a:b9:d4:8d:0c:17:6e:24:ce:df:72:0f:
09:ce:00:64:ec:53:ba:e9:83:ba:96:b8:be:03:0f:
4c:e1:68:f3:1f:be:ea:e3:ac:e8:da:96:8d:77:e4:
b9:ab:e8:87:3a:54:b7:b4:b8:53:52:11:5e:af:98:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:4E:66:A2:DF:0E:B2:26:64:3B:49:5B:C5:C4:54:80:72:8F:28
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:db:30:42:43:03:2f:c3:b1:47:9a:ed:1a:bc:a9:f4:6a:
46:b6:05:1d:3a:61:dd:b8:99:23:11:52:4f:93:d4:e5:8d:90:
8e:e9:a4:6e:62:cd:af:01:41:68:c6:2c:1d:ff:5a:a8:15:eb:
fa:5b:7b:df:35:20:8d:d3:c8:99:6f:a0:c5:c1:e3:63:3d:5e:
88:8a:31:1f:a8:29:be:1f:90:00:5d:fc:23:f6:8a:99:95:e0:
b3:dc:96:1a:87:b4:a1:3b:57:17:a7:59:3d:71:f4:6c:2e:1a:
16:b6:a6:99:7d:f3:1e:92:38:11:cc:ff:a4:dc:bb:64:e9:16:
71:ac:58:19:5a:f7:60:0e:53:26:d2:e8:c5:97:8d:a9:5e:12:
e9:b6:9b:c4:3e:01:50:83:f1:33:94:4f:54:3c:38:0e:77:01:
bf:e8:ff:bc:52:f3:7e:39:c0:ec:98:b7:99:42:4a:63:e8:55:
d7:fc:f6:cd:84:e3:63:7e:8c:cb:ee:f3:6c:af:31:08:fa:72:
8f:2d:d9:7d:3e:d0:b6:e7:1e:8c:a7:3d:d1:78:a1:67:b1:bf:
c9:d2:63:9a:7c:a3:1d:2d:72:1c:ee:f7:8b:c0:21:0c:83:10:
74:dc:50:0c:72:bd:c5:67:6e:2c:d9:64:eb:0f:4e:d0:a2:d2:
a4:5a:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:53 2026 by rpki-client