
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier: +x7Vos8YaF6hOG+Totwow0L8oims73qZn/OgUc+jL+M=
Subject key identifier: B0:5F:69:74:D1:B7:71:2E:D4:4B:1A:C8:6A:91:3B:B0:33:F1:0E:26
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number: CA
Signing time: Mon 11 May 2026 06:57:02 +0000
Manifest this update: Mon 11 May 2026 06:57:01 +0000
Manifest next update: Mon 18 May 2026 06:57:01 +0000
Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: J1DUpv2Ge4uS3QY+ED3iJUhUEakhqglLTOwcJUFqtWA=)
2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Validity
Not Before: May 11 06:57:01 2026 GMT
Not After : May 18 06:57:01 2026 GMT
Subject: CN=6a017dbe-1f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:5a:12:a9:e2:b0:b5:86:07:53:d8:a3:0a:
18:12:39:a6:5b:5b:ef:09:c1:93:cb:73:3d:e9:7a:
30:25:67:f7:cb:f3:cb:cc:ce:23:90:c2:61:00:6f:
b0:97:f5:83:62:04:9a:f9:50:4e:68:8b:cd:55:50:
65:fc:84:c6:3f:d3:b4:c5:87:d9:66:85:4f:d1:62:
fa:d9:5f:49:fe:ec:44:2e:20:3e:ce:a1:d1:80:d4:
2a:9d:e4:3d:7d:9c:4d:e4:01:14:96:a1:e8:b0:27:
f6:dc:11:ab:10:f7:e2:05:e6:b8:3d:5b:90:f8:4f:
1f:0c:23:54:e4:35:83:bc:a1:ef:8f:4a:d5:ec:0b:
03:21:47:b0:1e:26:e2:77:e4:98:59:86:90:81:ce:
51:59:6c:80:01:3c:e9:37:0c:fa:8a:08:2e:fb:34:
26:c2:50:66:87:67:77:b1:24:cd:d7:06:47:32:85:
bc:d7:77:8d:e4:2b:c8:2f:45:73:69:96:aa:3e:4a:
bd:a8:a2:3d:42:6d:06:cf:4f:9e:d0:3b:28:b6:43:
86:42:f0:4b:29:d0:96:8e:cb:a5:18:e9:a3:2d:c0:
1e:63:0a:dd:e9:f9:8d:1f:71:12:b2:5f:8c:c6:21:
22:e9:f3:a2:41:31:41:bd:a1:f9:f6:1d:44:e8:02:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5F:69:74:D1:B7:71:2E:D4:4B:1A:C8:6A:91:3B:B0:33:F1:0E:26
X509v3 Authority Key Identifier:
keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:32:1b:63:39:26:4f:30:78:02:75:64:bf:a9:ee:70:68:8c:
e6:75:5e:08:fe:63:4b:ed:7a:bc:ab:20:72:27:25:e8:a5:68:
3a:53:3f:a8:8d:6d:a6:a6:58:71:43:f6:0a:2d:97:e5:fa:f5:
8a:2a:42:a3:30:ed:76:d2:88:b8:07:01:48:c7:83:4c:23:b6:
b5:cb:4d:7b:76:52:2d:45:fe:39:96:29:db:29:07:e7:5a:88:
7d:74:15:ec:39:85:55:f7:dc:0c:c2:e6:dd:ba:d8:fb:d5:f0:
5d:ab:c7:a6:87:e7:fa:65:27:a2:c4:a3:52:b2:cc:91:2f:f1:
c9:b8:51:a3:55:f5:f0:79:3b:ee:7f:19:4a:f6:bb:dc:03:f0:
47:92:20:4d:a8:83:15:dd:ad:28:1f:1b:9c:78:84:6a:86:21:
93:e9:fa:65:5b:2b:87:8a:31:2e:b4:b5:15:d5:dc:49:64:13:
23:53:25:7a:eb:b5:fd:7a:ce:92:88:f3:f4:6b:a6:46:4c:f8:
fc:4f:ad:1a:78:47:84:fb:b8:11:fd:bf:bd:aa:9a:db:b8:78:
ba:e9:bf:62:e9:bd:3b:e4:8b:5b:a2:2a:24:53:9c:99:c0:86:
42:58:8f:1f:02:90:b8:9f:0b:0f:5d:29:aa:59:45:11:5d:1c:
dc:4b:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:25:27 2026 by rpki-client