
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json)
Hash identifier: 4JlukePhLD2zzSSM725DIg8u/02Sz4pg03bJxIZvNwc=
Subject key identifier: 49:B7:D5:D3:99:D4:BC:9D:E1:29:0B:99:2A:E6:CC:8C:55:94:65:DB
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial: 05A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
Manifest number: 0592
Signing time: Tue 28 Jul 2026 23:51:04 +0000
Manifest this update: Tue 28 Jul 2026 23:51:04 +0000
Manifest next update: Tue 04 Aug 2026 23:51:04 +0000
Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: qAbFdaNlqvgFMiclJVn1EQvIGMBPKBg3jg8K/HXzous=)
2: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: 5f9ml2EUZAGAD2c6U/Z9/PW0M3VyIhaGC3vHQZLyq8I=)
3: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Validity
Not Before: Jul 28 23:51:04 2026 GMT
Not After : Aug 4 23:51:04 2026 GMT
Subject: CN=6a694068-abc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:b8:c3:7c:0e:06:2e:64:80:45:54:93:42:
49:5b:18:2d:02:29:02:60:67:f0:2a:a5:3f:c7:47:
a1:24:da:41:9f:0d:43:be:f8:da:75:79:da:7e:26:
87:f9:d5:af:38:2f:b9:4f:a3:16:ff:d6:03:7a:f0:
78:14:b0:a6:18:06:ec:08:4b:c2:c4:3d:0c:8f:b7:
4a:62:cc:3e:ab:34:50:6e:f7:ab:b6:1d:6a:89:39:
53:a4:91:21:39:86:4b:cd:a0:f8:67:de:f8:ba:79:
0b:d6:97:98:c7:30:a9:02:93:6e:ae:e5:61:3a:ea:
84:10:d7:a5:3b:f0:0b:58:34:09:58:0e:6a:43:ff:
f5:25:a3:21:de:c6:e9:95:5a:16:95:34:08:4c:44:
0f:cf:29:82:c6:ad:e6:9a:b3:78:d0:1b:ef:c8:12:
9a:75:b5:48:05:cd:a4:e1:45:ce:8e:28:54:26:ee:
ab:b2:fd:c3:f1:63:be:98:92:8e:e6:53:22:a4:9f:
c5:35:1c:15:41:26:2f:57:de:e7:fe:cd:3d:72:19:
b3:e7:10:52:8b:a2:5d:20:14:02:a0:c7:87:d4:88:
64:78:9f:a7:48:3e:8d:a4:71:25:f7:68:cd:40:75:
07:be:58:65:96:5e:38:f5:c3:13:a1:2e:47:17:ac:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:D5:D3:99:D4:BC:9D:E1:29:0B:99:2A:E6:CC:8C:55:94:65:DB
X509v3 Authority Key Identifier:
keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:48:db:90:a5:39:2d:68:57:43:3f:75:62:10:59:5e:12:
62:f0:03:54:95:2f:92:c8:e2:12:15:c0:67:d6:ed:d9:fe:92:
ef:f1:d7:9a:a8:ba:49:37:9a:b8:a9:b4:46:ee:c6:9b:90:c5:
d8:47:b6:e3:db:54:82:a4:1e:c4:1b:fb:5f:cb:da:61:1f:7c:
87:61:61:75:cd:5d:2d:fc:51:95:c4:4b:86:84:f2:19:74:ed:
f4:13:dd:d3:77:44:89:21:b5:eb:89:33:27:56:28:d4:56:9c:
20:75:ba:d2:0a:43:da:dd:ab:f8:78:0a:40:9a:fb:38:ed:78:
43:3d:19:b9:bd:e6:58:14:97:49:ac:4b:b7:8b:22:35:b2:3f:
67:6f:c0:fb:1f:72:ed:ad:a3:34:3d:a2:e9:e7:80:73:4d:d5:
a8:1c:8b:39:d2:81:3b:5f:a6:e4:ef:07:11:95:fc:27:e0:97:
e8:62:a3:17:87:ff:60:70:18:14:95:f4:01:bc:b2:f3:ee:b7:
32:71:0e:36:10:18:02:a7:a0:6c:b1:2d:3f:24:2a:6d:a6:8a:
4d:69:bf:2d:f7:b2:8b:a0:64:7f:6b:b2:14:1e:ee:d4:99:a0:
69:f1:7a:79:60:44:6f:1f:d2:95:97:93:d1:95:45:33:b0:97:
40:32:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:08:36 2026 by rpki-client