
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json)
Hash identifier: Tw2RlaQK1B7c8mN5Rw18keuop8mLjy5D7S0HrRhiUrI=
Subject key identifier: 75:08:36:CD:C8:CF:D0:45:D2:CE:BE:23:6D:42:27:C4:18:40:F6:18
Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
Manifest number: DE
Signing time: Mon 11 May 2026 06:45:07 +0000
Manifest this update: Mon 11 May 2026 06:45:06 +0000
Manifest next update: Mon 18 May 2026 06:45:06 +0000
Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: /sJ0Ia/JkN9FFiGGPgiHSgGlGdrMtUUH8IbDiPuv2RE=)
2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: IQs2mgIIn1eSW55HIZcwfqfurLI2M7cs6R03kQuYr9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Validity
Not Before: May 11 06:45:06 2026 GMT
Not After : May 18 06:45:06 2026 GMT
Subject: CN=6a017af2-2e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:6a:f3:db:3b:dd:e2:e5:31:1b:b4:b9:95:
49:e0:4d:32:c1:b2:27:a7:4f:55:28:76:76:d0:9c:
a9:9d:42:e5:77:2d:0e:89:a1:a4:5d:90:d4:00:c4:
0e:11:c1:34:22:30:48:12:7f:2b:13:69:0b:dc:6c:
b4:dc:32:5e:37:09:f0:9a:43:dc:8a:27:10:08:d0:
b5:6f:44:ee:0b:63:88:70:c6:17:e3:b4:31:5f:80:
3d:02:b7:5e:34:49:5a:d4:f3:93:17:a6:b8:ef:84:
21:7b:81:2a:a7:30:d0:f6:69:9f:8c:39:f0:c0:bd:
6e:60:21:c6:4b:bd:e3:ec:d1:22:9b:3e:97:1a:89:
60:8f:35:76:35:b9:7a:98:14:b0:c1:d7:a7:d7:24:
90:65:9d:d5:f2:47:54:c7:73:bc:cf:90:b9:f0:65:
9a:99:21:09:04:f9:01:0b:67:b9:c4:6f:f9:e8:be:
de:12:3d:70:fa:84:c6:10:8b:79:7b:e1:0b:65:c7:
4f:12:6a:75:6b:62:79:35:5f:fa:71:ec:b4:f0:28:
cc:ae:b5:d9:ff:12:67:67:5e:60:bd:61:33:6e:c0:
1d:5c:e6:11:96:0d:52:8c:87:c7:75:1c:e3:89:9c:
29:bd:63:3a:ed:22:7c:e5:3f:11:f2:73:29:4b:8b:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:36:CD:C8:CF:D0:45:D2:CE:BE:23:6D:42:27:C4:18:40:F6:18
X509v3 Authority Key Identifier:
keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:11:1b:1c:a6:43:3e:2c:fc:c5:96:6e:77:31:ab:f5:93:da:
db:1b:8b:7c:36:ba:3f:64:31:d1:14:01:a7:02:74:2e:6a:33:
e5:d5:ce:9d:73:c2:82:31:c2:57:9a:bc:12:e5:30:3a:67:ec:
5b:3c:e2:3c:66:b2:96:79:74:ab:c3:d8:7a:a0:3a:7d:19:01:
29:bd:71:c3:6d:8e:39:2b:9c:7b:35:4b:aa:9f:e6:f4:97:85:
a8:c2:aa:c0:a8:ac:89:2d:7a:8a:4a:65:d4:1d:3e:84:90:12:
ec:ce:88:14:3c:6d:7b:cd:a0:b2:53:c0:64:1a:36:9e:66:b0:
68:31:b2:4a:e4:68:a1:bd:47:4a:7a:ec:d3:95:c8:6f:20:dc:
b8:55:f2:b6:39:6f:e4:f2:b3:0d:88:ea:8e:8c:d6:01:83:ea:
15:54:15:a1:fc:44:af:91:dd:15:df:aa:e8:e1:25:69:34:47:
7d:62:4c:de:24:29:db:37:01:80:d7:7b:4d:a2:75:41:ae:f3:
d1:3c:05:43:01:92:fd:24:20:69:7a:1f:7b:b5:fe:64:c8:5c:
e1:ce:9b:5e:09:6f:74:e2:43:a7:e9:c9:bd:6f:91:91:37:a2:
46:2b:ee:1a:b6:c4:88:62:af:83:54:2a:7b:2b:d9:d2:cb:8c:
ed:b5:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:10 2026 by rpki-client