
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier: EaHuLZrY17W656TxiVi7mLxdZu/PsycMK8pCHnask7c=
Subject key identifier: BC:F8:04:20:DC:E7:90:8F:DE:0D:8D:82:04:3B:DC:9B:11:1F:E0:65
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number: EE
Signing time: Thu 23 Jul 2026 08:07:58 +0000
Manifest this update: Thu 23 Jul 2026 08:07:58 +0000
Manifest next update: Thu 30 Jul 2026 08:07:58 +0000
Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: KK4EKvxSzVLvpovutzrzoiOjA01aO7eRkcn/NhjtAHk=)
2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Validity
Not Before: Jul 23 08:07:58 2026 GMT
Not After : Jul 30 08:07:58 2026 GMT
Subject: CN=6a61cbde-87d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:66:97:b7:6c:a2:6d:40:54:b0:6a:ef:dd:
57:52:1a:db:b6:2c:2b:2e:2e:9e:e5:24:4f:b1:47:
d9:a3:4e:c3:05:2b:6f:6b:d3:38:1e:f7:bd:b3:91:
80:d6:d0:1d:35:fd:66:55:a3:ab:86:32:be:9d:8d:
c9:db:36:ae:e1:dc:8d:59:ef:da:2b:78:0e:45:19:
2a:df:d2:99:37:6b:7f:a0:8c:40:2d:16:5c:5e:56:
03:26:a1:ab:07:c0:ac:88:69:07:5b:c5:83:12:62:
5c:58:93:44:fa:5f:a6:a8:b4:58:c4:5d:5b:dd:02:
00:26:58:08:6d:73:f2:d4:f1:ab:ff:e6:18:a9:d3:
0d:b5:56:69:38:ca:ff:fc:82:8c:26:27:c1:93:9d:
b2:5d:24:d2:2e:60:c3:4b:84:48:e2:d5:54:18:b4:
74:25:3c:92:8b:dc:2a:60:53:64:5a:f8:e5:46:20:
90:3d:b3:d0:31:b2:46:6b:28:ef:82:10:fc:0f:50:
c1:bb:92:4b:b1:e1:22:b3:bd:e9:f2:a3:35:6a:51:
84:7a:5b:fa:dd:82:fe:5e:36:ea:be:d3:ba:ef:3c:
cf:07:09:47:bd:3c:f5:39:7a:40:11:63:59:ef:4e:
36:9c:65:34:ff:d5:99:37:73:59:8b:36:87:39:ed:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:04:20:DC:E7:90:8F:DE:0D:8D:82:04:3B:DC:9B:11:1F:E0:65
X509v3 Authority Key Identifier:
keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:37:08:78:bb:ca:96:c9:d3:fd:2e:f9:be:bb:b1:d8:0c:
ad:8e:e2:80:60:7a:07:7c:37:e6:43:67:dc:7c:1a:bd:22:a4:
d1:1a:68:bc:6a:5d:bc:b5:dc:58:43:91:2f:9b:1e:46:18:0f:
8d:e1:4e:cb:70:ad:47:0a:df:a3:0f:fa:dd:ea:a9:7c:44:df:
84:cf:12:3f:09:a7:dd:b8:4b:61:f7:b3:ec:16:13:78:33:2e:
99:aa:bb:7d:72:59:81:f6:d9:bf:a3:fb:ca:99:9b:f3:e1:72:
74:16:cc:9d:2a:f7:36:b1:c3:d2:29:f8:aa:d5:5e:a3:86:3c:
85:24:c6:f6:1a:30:4c:52:d8:83:38:c5:b6:f7:bd:40:ea:e8:
ab:13:1b:28:8f:f4:36:de:3e:17:e1:63:c2:41:59:47:f2:5c:
a7:64:9a:8f:bf:5b:b8:f7:64:4b:1d:40:c8:c8:98:ca:b9:b5:
75:ec:34:21:68:98:04:79:43:12:7f:9d:fb:94:ce:c0:d8:85:
e5:44:be:17:75:2d:8e:c3:81:97:af:13:40:a8:45:10:92:61:
e5:19:a1:c9:79:72:86:aa:47:0c:3b:d8:6e:0b:8e:de:84:0c:
b8:ec:6e:49:85:6b:34:c2:32:df:89:44:21:a6:d9:57:27:96:
a4:17:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:36:15 2026 by rpki-client