
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier: G6SB3Ug9BTsXpHT4gDTnzzX9H8FygTsdw+QPm8MAXPI=
Subject key identifier: AC:E8:05:41:59:89:15:37:12:09:8D:6A:A0:51:E0:63:E9:5D:EE:2E
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer: /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number: 3E
Signing time: Mon 27 Jul 2026 10:51:58 +0000
Manifest this update: Mon 27 Jul 2026 10:51:57 +0000
Manifest next update: Mon 03 Aug 2026 10:51:57 +0000
Files and hashes: 1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: EsUud8ZeSsn1t2EX8bKQTndmutr7olujboEtQolnLXM=)
2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Validity
Not Before: Jul 27 10:51:57 2026 GMT
Not After : Aug 3 10:51:57 2026 GMT
Subject: CN=6a67384d-53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:1a:4b:1d:41:e1:a3:78:3d:5d:49:d3:50:
7d:fa:23:42:74:65:53:03:21:8c:de:b1:0b:55:02:
39:6d:96:d6:6d:17:bd:90:22:3a:54:7f:ca:e6:f8:
86:c4:1b:d7:49:4b:ce:98:08:90:5f:79:81:0d:28:
0b:a9:bf:aa:28:ce:ea:10:51:6b:c4:26:fd:7c:db:
34:ef:e3:59:20:c1:e0:aa:c9:5f:81:1d:c6:85:98:
df:91:26:89:42:97:d3:85:93:e7:6d:74:00:17:08:
8f:1e:1d:43:a3:6f:b0:86:d8:9e:29:ae:38:97:35:
89:42:e9:67:55:b8:58:55:2f:c7:b7:bc:8b:4e:e9:
d8:02:16:70:fc:c4:12:db:2e:e5:84:9d:b0:6f:f0:
40:ea:b9:3d:64:11:ac:5c:02:77:d3:a7:08:58:6a:
f6:38:47:c2:62:92:12:ba:ab:39:ba:36:97:b0:80:
3d:e9:aa:b6:23:bb:ff:20:54:4c:3c:6e:f9:6d:eb:
95:67:7f:af:5e:a7:a0:5b:66:e9:13:bd:e0:4f:75:
60:ba:ce:84:86:e3:45:1e:61:94:39:14:75:6b:02:
9e:ae:d0:59:5a:30:54:75:91:73:05:22:db:6c:6f:
d3:3d:0d:61:03:f9:68:39:14:e9:f4:40:80:68:56:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:05:41:59:89:15:37:12:09:8D:6A:A0:51:E0:63:E9:5D:EE:2E
X509v3 Authority Key Identifier:
keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:82:9c:f8:4d:b0:16:cf:15:1a:c2:d7:a5:35:3b:c6:78:26:
07:2f:fe:ad:26:3a:3f:bf:d5:93:c2:48:86:27:47:7f:c0:f3:
67:36:26:07:44:67:98:cd:60:e6:30:9b:44:ee:89:c1:ba:f7:
46:d7:be:62:f0:2f:af:f4:95:3b:31:18:c0:5c:27:06:59:14:
f8:f4:44:ca:dc:df:88:02:67:02:8b:47:54:5f:fa:6b:79:8a:
68:65:05:4c:f7:9a:aa:e6:f9:a6:9f:17:06:bf:2f:34:4f:b3:
1b:6b:25:d5:19:63:a7:84:50:62:9c:0a:c5:b9:99:9a:2b:50:
8d:88:f1:40:59:a1:58:9d:36:bf:57:fb:e0:7f:a9:4e:20:79:
cd:74:32:7a:08:96:ab:07:b1:2d:a6:d3:12:ab:39:c2:67:36:
41:53:d7:e3:0a:48:38:6a:6e:20:7d:df:f2:a4:f6:f6:7d:d4:
b6:91:a1:9a:20:31:7a:73:35:11:c9:61:02:57:70:91:af:67:
c5:87:be:9b:11:0a:7d:f8:69:96:e1:6e:16:24:c2:b4:56:ad:
e7:d5:08:88:11:d1:d8:a9:ec:fa:75:91:0a:44:7e:c2:07:97:
d1:1e:5f:3d:be:42:44:b5:b9:fd:0b:6b:73:8c:c1:a4:10:6e:
3f:10:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:02 2026 by rpki-client