
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json)
Hash identifier: zjHjCfWfy8rvwqmspfAmI9nbO6vDPLzdQUnQmP+hTpA=
Subject key identifier: 68:C1:EB:62:FA:4B:75:04:56:3B:BC:C6:92:4E:F3:4D:01:E2:9E:D8
Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Certificate serial: 0D7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
Manifest number: 0D6A
Signing time: Sat 10 Oct 2026 18:02:58 +0000
Manifest this update: Sat 10 Oct 2026 18:02:57 +0000
Manifest next update: Sat 17 Oct 2026 18:02:57 +0000
Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: YytOjGIvKDrQKUj+aUiZHSN5WdYTTU88LV757/bMG0I=)
2: 46CgcRR4DtfIkR4DTwxb5V4Ohl4.asa (hash: uaPGZE5Nz6Vu7GjF6pLPhtfgWBIaRaOrHDLiVX6Lp4s=)
3: 44FEC394589711F0B981A181C4F9AE02.roa (hash: wWWoExLKhdXKo+c07T6lvKy7CHheLkRqNVGs3DlMLvo=)
4: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: XGpY3RP8rp7DjJ1Txu21meaiyAARXZvjCzho1tEWn3o=)
5: dx16kGG5nXP6JvuYobcTzIl0Ks8.asa (hash: WkMTszBWx8Ph9ZmhzRyQOiAiiRb3PJxxZo/Xe6A6nmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3450 (0xd7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Validity
Not Before: Oct 10 18:02:57 2026 GMT
Not After : Oct 17 18:02:57 2026 GMT
Subject: CN=6aca7dd2-babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:f8:97:11:8f:28:4d:f6:72:6e:29:e4:7b:
88:2d:93:e3:4d:a1:26:31:9c:7c:88:47:a1:ed:5a:
78:75:92:78:6c:4c:cc:22:21:c8:40:06:c6:a6:15:
4a:df:28:a2:13:74:35:f6:84:0c:ba:d5:2a:57:5c:
37:2a:54:fe:9a:90:cc:e2:ef:97:71:90:66:82:ae:
93:44:73:32:9d:e0:2d:d4:cf:eb:8f:04:3c:b7:8e:
22:dc:01:11:e0:85:60:fd:a6:15:e8:0c:35:9f:df:
43:5a:8c:12:b8:d3:ee:23:68:a4:7a:59:47:37:0a:
4e:22:64:64:93:03:8f:92:27:ee:b9:b6:13:08:d2:
44:e8:5f:2e:20:5d:1c:18:3b:d0:cb:71:e1:50:cc:
6f:27:c7:26:b4:ff:69:aa:ba:f4:55:b9:2e:a4:99:
8f:99:6f:c6:25:61:5d:64:10:30:11:0b:be:e6:da:
e6:87:dc:1c:88:57:8e:b7:57:41:5d:02:2a:5d:31:
5f:ae:af:8a:6f:33:e5:d8:86:bf:22:f5:a4:bb:93:
c9:01:b5:4a:37:b0:0b:31:d9:2a:c5:4a:98:fc:39:
2b:69:73:92:a0:ba:36:3c:1d:63:35:d1:53:d2:ec:
c8:04:b0:91:74:37:8f:c7:1d:73:fc:53:f4:a9:67:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:EB:62:FA:4B:75:04:56:3B:BC:C6:92:4E:F3:4D:01:E2:9E:D8
X509v3 Authority Key Identifier:
keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1e:01:59:37:3c:20:e0:2c:39:f2:ce:c9:e2:c4:29:36:0e:
64:3a:16:f8:60:4e:9a:78:7b:e5:14:77:4c:5f:e4:e3:9c:74:
15:83:a4:3b:67:bf:17:28:6c:93:d0:cd:32:18:c8:1d:83:ad:
d1:76:4f:6f:a4:59:db:eb:0a:2e:e7:82:42:0f:be:8b:c5:ae:
c1:c5:fa:41:e0:73:1c:2a:ae:5d:39:7f:be:21:58:75:78:cb:
d8:f8:91:80:28:cd:97:09:2b:b1:95:93:3b:2a:f6:aa:f5:02:
c2:d6:ab:47:f0:cc:96:a5:76:f8:09:e8:ae:3c:d0:ee:e7:89:
de:d3:ae:d6:b0:c9:e9:7c:27:6b:57:59:07:b8:a4:11:a4:d4:
2c:de:7f:8c:2b:5c:74:13:5d:ac:ed:71:14:1f:1f:d0:aa:28:
ae:06:1e:f7:53:20:72:63:f9:b4:97:ee:b5:e0:34:0a:f4:61:
8f:d7:58:60:5b:7d:69:e6:4d:32:ff:2d:9f:95:4c:8f:43:9d:
45:50:8f:e9:dc:48:f5:d3:57:61:ab:38:77:99:2d:96:70:61:
8c:bd:79:c4:f9:4e:6b:4a:98:87:d2:0e:ac:68:e5:d9:99:1b:
d1:1e:2c:cb:c5:aa:e4:25:62:9d:99:1a:8f:db:83:f9:37:7b:
73:aa:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:00:01 2026 by rpki-client