
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier: f5vtHPKaauVKXYm4OMNeZKKRabfAEwGW73+x1p3Slkk=
Subject key identifier: 26:5B:AF:A0:C4:D3:B4:DB:20:59:D1:08:70:7D:62:86:51:33:26:3E
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number: 61
Signing time: Sat 13 Jun 2026 08:13:31 +0000
Manifest this update: Sat 13 Jun 2026 08:13:30 +0000
Manifest next update: Sat 20 Jun 2026 08:13:30 +0000
Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: KindFAB80rJAxUpVkKLlmQAqHk4KT6lyEzonAyN2s+o=)
2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=)
3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Validity
Not Before: Jun 13 08:13:30 2026 GMT
Not After : Jun 20 08:13:30 2026 GMT
Subject: CN=6a2d112b-359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:2c:0d:1b:a1:c6:a8:47:93:f9:d9:a1:b4:
87:c5:66:49:e2:42:c4:01:51:36:dc:6c:ac:f0:05:
e1:9e:3d:e7:09:d1:a8:9a:96:80:04:4f:5c:47:87:
c3:c6:62:08:2f:1e:73:9c:fa:8b:e0:d9:59:ad:a5:
0d:4c:6c:e4:de:3a:93:60:0e:b7:7c:31:59:24:8c:
70:26:0b:b5:de:b2:dd:8e:e3:af:75:6c:12:21:00:
2e:d5:51:cf:36:29:c5:c8:e6:f1:72:a2:a7:11:78:
d2:09:c1:45:a8:74:bc:ef:d2:c4:5a:62:70:d3:57:
93:d3:bc:d4:5e:d5:83:ae:90:3a:46:a8:af:ad:37:
53:c1:95:b9:42:c0:04:56:b4:c9:ad:f3:de:af:3e:
06:d9:89:ed:bc:70:70:ca:35:f3:f7:6f:a2:e5:b3:
05:84:5a:0e:11:d1:8a:0c:d3:fe:15:36:68:e6:16:
5e:6a:fd:9f:8d:e2:ae:06:9c:11:c2:a9:da:21:ec:
60:54:5d:9f:61:50:d7:cf:34:05:cb:a0:8d:63:53:
29:a4:22:64:73:80:3b:30:4b:05:78:e3:fa:a3:a0:
73:79:7d:8f:2d:28:e7:e8:27:8b:70:3b:7d:3b:f4:
8b:f6:a3:7f:76:4c:81:79:09:b9:34:ec:71:d4:9d:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:AF:A0:C4:D3:B4:DB:20:59:D1:08:70:7D:62:86:51:33:26:3E
X509v3 Authority Key Identifier:
keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:e1:5b:30:f7:bf:c9:4c:a9:bc:19:21:86:0c:16:3a:dd:
4f:37:9e:63:a9:6d:3b:a6:3e:0c:b8:ec:40:9c:b2:7c:cb:7f:
43:e5:c4:5b:4c:ca:9a:eb:cf:e0:8e:2d:cd:e3:40:c8:a4:4e:
aa:90:7a:12:eb:e7:95:56:72:c3:07:cf:3a:5d:17:2b:1e:fc:
ac:d4:c2:48:24:bc:cd:f7:2e:8b:ab:15:5e:ff:35:99:82:2e:
af:64:9b:7d:ee:0d:24:5e:71:2e:59:80:11:9f:41:6e:fe:eb:
9a:bd:a9:f8:55:d4:75:6d:08:a0:39:1c:34:87:c3:37:65:a2:
91:4d:d4:68:c0:25:e6:83:1d:08:ca:95:26:45:1d:d2:d6:ed:
69:c3:08:fa:55:57:74:fb:fc:6e:90:3e:f7:37:d4:4f:4f:e5:
08:3f:83:00:65:72:61:4a:ec:c1:74:b6:c6:2f:14:7d:bc:13:
d8:c0:ed:78:e1:ee:c1:72:89:d8:d0:1f:44:cc:9c:50:50:d3:
f9:72:7e:55:3e:34:b7:df:36:43:30:72:9a:59:4b:0c:d5:04:
0a:7e:e4:c8:a2:4e:4d:77:40:57:3b:60:22:e8:70:48:9f:7e:
d9:f8:8e:e9:e3:85:7a:bc:c0:5a:b6:cb:19:b6:25:9d:05:d5:
3d:d1:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:07 2026 by rpki-client