
$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier: SVIPbixYqilIWfoCIr10ecVIbQ/nFPbCzLIEnYCRwE0=
Subject key identifier: 76:34:F0:8C:16:3E:4E:90:C1:98:B2:D3:6C:8A:44:61:BA:7C:FE:12
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial: 06F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number: 06E7
Signing time: Sun 26 Jul 2026 23:01:44 +0000
Manifest this update: Sun 26 Jul 2026 23:01:43 +0000
Manifest next update: Sun 02 Aug 2026 23:01:43 +0000
Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: BTJUQiPK00zIG21SPZpPj2zLTPrpadlhEQtw8DuzXcQ=)
2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: +i5uHJyJF9AnTEDT4nux2xnB0e7UDjY1PtVm2KqOSJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Validity
Not Before: Jul 26 23:01:43 2026 GMT
Not After : Aug 2 23:01:43 2026 GMT
Subject: CN=6a6691d7-6e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:3c:2a:1b:49:0c:ce:e0:42:4f:3f:6f:3c:
1d:d4:06:10:b0:8a:53:38:1e:5b:c8:27:b0:5b:da:
fa:9e:04:d2:d8:e4:77:38:27:98:9d:0f:bd:c2:bc:
7e:c9:b9:52:99:62:fc:b5:7e:f4:98:1c:8a:0d:f5:
fa:a2:7d:e0:f0:ae:58:ae:43:70:83:f9:ed:3e:8a:
d1:e4:82:84:24:06:9f:91:b2:b4:3b:39:fd:33:6d:
b5:a7:57:8e:1c:d1:10:aa:81:82:22:0f:0a:81:fb:
b6:3a:56:a6:62:bc:32:b1:35:82:93:ab:0a:b3:0d:
3d:f1:f6:b4:0f:20:fa:52:60:65:14:58:2b:57:2f:
1a:b3:18:89:b2:44:36:91:ea:9b:6d:ec:bd:1b:df:
69:67:c4:b5:04:bc:2a:fc:a8:81:8f:32:e7:7a:bb:
74:a9:39:e0:96:0e:cf:fa:d5:ad:10:3e:de:35:d9:
00:95:3b:58:12:67:3e:15:e4:9f:7d:c3:bc:92:29:
12:d7:da:88:7b:2e:1e:f5:40:6f:31:97:29:ca:c0:
21:56:f6:80:75:d7:37:44:64:5a:43:92:1d:6e:32:
e2:bf:95:59:39:7b:bd:2c:1a:be:07:ab:3f:47:b8:
8d:a9:b8:d7:65:3a:39:96:30:c0:2b:06:a5:13:2c:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:F0:8C:16:3E:4E:90:C1:98:B2:D3:6C:8A:44:61:BA:7C:FE:12
X509v3 Authority Key Identifier:
keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:bb:1c:42:91:fa:e7:00:a3:50:df:65:1d:39:7f:65:c1:
bc:20:cb:2f:76:4a:13:5f:5f:4d:b8:6c:99:96:4e:84:38:c8:
00:08:1d:3c:12:6f:a7:0a:74:da:8b:c5:70:bf:10:a4:c6:a3:
c3:6b:f8:a5:1a:91:ba:84:fe:24:60:8d:f1:d6:72:f3:19:90:
35:f9:f9:0f:8b:30:3d:05:44:c6:88:4c:1a:4b:59:7e:eb:b1:
f6:73:b5:e7:1f:ae:fc:a9:e7:01:9e:95:24:50:a6:24:bc:69:
2d:09:77:b8:a2:c0:6c:0d:93:2f:f4:b6:0a:8c:9d:3b:24:48:
2f:cc:97:dd:f2:1b:e2:2c:b0:fa:62:46:db:95:80:d4:28:99:
90:29:1a:6e:d6:bc:66:c2:ff:41:a6:14:fc:72:40:45:40:ad:
61:3a:59:aa:b6:22:ca:72:29:b5:13:d7:5a:35:54:76:87:32:
ab:23:83:4d:3d:3a:b6:c5:06:72:b8:89:a5:81:79:b3:08:e2:
43:ff:be:f8:82:cd:1d:aa:29:b8:bf:16:b4:f5:f3:3b:53:04:
bd:ca:8d:f1:4e:74:b8:52:9c:75:d6:6a:81:af:91:81:dc:59:
31:e8:25:66:25:20:5a:0f:01:3f:bc:88:5b:21:cf:1e:7f:32:
49:0f:f1:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC
OUEwM0RBQUEwHhcNMjYwNzI2MjMwMTQzWhcNMjYwODAyMjMwMTQzWjAYMRYwFAYD
VQQDEw02YTY2OTFkNy02ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8vE8KhtJDM7gQk8/bzwd1AYQsIpTOB5byCewW9r6ngTS2OR3OCeYnQ+9wrx+
yblSmWL8tX70mByKDfX6on3g8K5YrkNwg/ntPorR5IKEJAafkbK0Ozn9M221p1eO
HNEQqoGCIg8Kgfu2OlamYrwysTWCk6sKsw098fa0DyD6UmBlFFgrVy8asxiJskQ2
keqbbey9G99pZ8S1BLwq/KiBjzLnert0qTnglg7P+tWtED7eNdkAlTtYEmc+FeSf
fcO8kikS19qIey4e9UBvMZcpysAhVvaAddc3RGRaQ5IdbjLiv5VZOXu9LBq+B6s/
R7iNqbjXZTo5ljDAKwalEyyqCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHY08IwW
Pk6QwZiy02yKRGG6fP4SMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1
QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB
alhPbVhXZ2lTa2U1b0QycW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARI+7HEKR+ucAo1DfZR05f2XBvCDLL3ZKE19fTbhsmZZOhDjIAAgdPBJvpwp0
2ovFcL8QpMajw2v4pRqRuoT+JGCN8dZy8xmQNfn5D4swPQVExohMGktZfuux9nO1
5x+u/KnnAZ6VJFCmJLxpLQl3uKLAbA2TL/S2CoydOyRIL8yX3fIb4iyw+mJG25WA
1CiZkCkabta8ZsL/QaYU/HJARUCtYTpZqrYiynIptRPXWjVUdocyqyODTT06tsUG
criJpYF5swjiQ/+++ILNHaopuL8WtPXzO1MEvcqN8U50uFKcddZqga+RgdxZMegl
ZiUgWg8BP7yIWyHPHn8ySQ/x+g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:48 2026 by rpki-client