
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft
File: 2H4ClpVGrcVaesygjK2yh5vGmck.mft (raw, json)
Hash identifier: NvgNO76AD5Rpyh8Gkd3Vtha6KJdzHzC/mmUlziQXrrU=
Subject key identifier: A8:59:A9:FE:7D:6E:EC:2B:F4:53:D4:6A:9F:53:09:E4:C1:50:21:EC
Authority key identifier: D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9
Certificate issuer: /CN=A9185B5F/serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft
Manifest number: 025C
Signing time: Mon 27 Jul 2026 03:41:30 +0000
Manifest this update: Mon 27 Jul 2026 03:41:29 +0000
Manifest next update: Mon 03 Aug 2026 03:41:29 +0000
Files and hashes: 1: 2H4ClpVGrcVaesygjK2yh5vGmck.crl (hash: HSMslvbk2rM9ukq66MhxaLsCXvlHC5fPMr8O/PjlNI0=)
2: A4B0D326F0A311ED99A1471CC4F9AE02.roa (hash: 96xubeejwotb/hrUfi/Ps7KKGla8pOPnZEA9PFgwYCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl
rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B5F, serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9
Validity
Not Before: Jul 27 03:41:29 2026 GMT
Not After : Aug 3 03:41:29 2026 GMT
Subject: CN=6a66d36a-e069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:26:21:29:df:93:1b:64:74:e3:cb:b2:b5:
b1:df:f7:30:40:41:aa:b2:f9:73:ec:06:57:65:5b:
4f:d6:14:f7:a7:6c:b1:7f:e0:c3:fc:3e:cd:2a:be:
21:98:6d:60:98:05:0c:2c:c7:7d:5c:84:fc:cf:fa:
cb:45:3a:67:1b:de:50:b4:36:b1:d6:22:fb:61:9f:
e6:eb:48:47:79:31:b3:9e:3b:89:a6:be:47:07:7a:
1d:89:fa:fc:4a:66:ab:de:78:3d:6a:ed:eb:0e:47:
5d:ed:1d:bd:12:34:76:fe:8f:60:11:fc:01:d0:2f:
b1:10:50:fa:00:4b:e4:04:75:1a:3e:59:1f:50:cc:
03:14:ae:7e:f8:48:7b:e7:29:5a:3f:64:60:da:df:
fb:d3:98:ea:af:66:57:e5:f8:79:8a:77:1a:88:60:
e5:d4:4f:9f:72:ef:88:a1:d4:f6:86:d4:80:08:57:
28:1a:52:94:34:af:db:bc:6f:d5:0c:0e:6f:79:7c:
e3:3c:f5:6b:68:b7:58:de:4f:90:54:6e:98:46:09:
f8:bc:64:d7:77:b3:ec:39:c1:fe:ea:10:a5:81:8e:
c7:f5:1e:84:1e:d1:90:65:ca:a1:f8:c3:50:7e:09:
2f:e1:f7:23:a6:01:6d:05:42:30:3f:a9:8b:83:0b:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:A9:FE:7D:6E:EC:2B:F4:53:D4:6A:9F:53:09:E4:C1:50:21:EC
X509v3 Authority Key Identifier:
keyid:D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:49:e3:7b:89:09:06:a7:81:6a:3b:94:9d:26:f7:12:3b:a2:
1f:75:22:2c:7d:54:ee:4d:4b:e9:31:94:a8:2e:59:9f:71:6b:
19:81:ee:3f:5c:1a:21:0d:7d:b0:b5:3f:cb:03:f6:5d:a4:bd:
c3:2d:4b:e1:96:f2:e1:8c:60:79:d8:34:6c:5f:2e:af:ab:7a:
af:af:c1:d4:20:5d:07:67:b2:32:30:8c:75:ad:b2:a0:5e:75:
64:b1:71:c6:bc:7d:4e:b2:51:50:73:0e:ba:75:e6:2b:63:16:
48:01:79:b4:7f:76:6c:e2:76:ed:a6:60:5d:cf:d5:2c:5b:cf:
76:9f:9b:3e:30:e8:54:50:13:3b:ed:5a:00:27:2c:a9:eb:02:
6a:94:32:8a:8c:76:88:dc:9e:06:03:5d:79:99:ba:07:b9:1e:
b6:9e:26:61:15:a1:db:36:fa:9c:20:41:fb:d8:d8:48:dc:e2:
6f:9f:6d:0d:38:e9:0d:dd:60:15:2d:3a:34:f3:33:ae:99:40:
4a:76:47:6d:30:55:9f:27:30:94:ad:af:95:a2:91:bf:38:a7:
f5:99:e2:30:29:0e:54:e5:2c:47:11:11:a7:af:1a:8e:1e:0b:
34:67:1f:3d:1e:75:71:0e:4d:2e:40:41:17:32:1a:46:88:3a:
71:10:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:09 2026 by rpki-client