
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json)
Hash identifier: KaSlsnG7Ai7472ra+FilvEd3imc8RxDrzpukq9ExTwg=
Subject key identifier: 8F:06:E5:7E:39:73:7F:71:92:3E:E5:FE:CE:34:19:8C:AD:AB:28:0E
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial: 0856
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
Manifest number: 084A
Signing time: Fri 12 Jun 2026 20:57:05 +0000
Manifest this update: Fri 12 Jun 2026 20:57:04 +0000
Manifest next update: Fri 19 Jun 2026 20:57:04 +0000
Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: /bVNChFWIGrZKPCQDrCZFRaLICMG4wbJ4lwJKkF7DkE=)
2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iKOlmepNJ2Cs3U5hWGbf9IJf0JMlwqn81QfKtYqpKgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Validity
Not Before: Jun 12 20:57:04 2026 GMT
Not After : Jun 19 20:57:04 2026 GMT
Subject: CN=6a2c72a1-715d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:03:e8:e7:ab:24:68:d7:14:f6:4b:2b:ac:
0d:1b:8b:be:4e:8b:8b:06:71:e7:1f:a6:03:53:2c:
79:3a:ee:30:8d:c8:9b:ac:0f:4c:59:c4:a7:83:77:
87:bc:b0:c9:dc:ba:d6:ea:11:0e:3a:39:5a:cd:c0:
65:f9:89:15:53:b6:aa:cd:e6:4c:f3:18:86:c0:67:
ff:e3:c8:9a:6b:d8:12:24:de:66:6a:1c:62:b6:44:
7f:94:29:a4:c4:de:b4:a9:3a:ae:f3:61:58:29:a8:
6f:6a:d1:ec:c4:b9:33:18:1e:b8:1d:a8:6d:39:8d:
c0:af:5e:4a:14:48:f1:11:6e:14:89:72:39:1e:f1:
7f:8a:e1:db:72:c9:88:90:0c:bd:0c:55:75:f9:9e:
d0:36:8f:fc:3c:ff:c8:3e:29:26:9e:95:a9:97:c2:
cb:42:45:9d:36:f0:9b:d9:52:ad:18:21:24:6c:32:
80:9a:2c:26:b2:b4:ab:7d:71:cb:27:7f:19:3b:c8:
c1:1a:a1:e9:a8:e0:f6:67:0d:e9:ff:0e:03:f8:4a:
10:45:d7:fb:46:c5:66:f0:08:59:2b:6f:f5:e9:f2:
1c:c0:a2:e9:6b:7e:a2:ea:6e:1f:16:03:4a:e5:b1:
08:b6:94:af:21:3a:08:69:09:96:84:c8:41:cb:f7:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:E5:7E:39:73:7F:71:92:3E:E5:FE:CE:34:19:8C:AD:AB:28:0E
X509v3 Authority Key Identifier:
keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:85:6a:ac:8d:e5:6b:95:b0:2c:46:f4:91:e6:63:a8:b7:66:
7e:e5:d1:cd:c6:99:65:2e:40:d8:e4:5f:14:98:44:f1:b1:ff:
61:a9:bd:c4:8d:a5:ea:f8:1b:6a:1c:fb:53:28:3f:70:3c:c4:
4d:44:9f:dd:23:cd:ad:27:65:11:18:2f:39:fa:c7:48:4f:2d:
55:b7:5c:eb:a1:9c:dc:31:c0:eb:af:2e:a6:2c:85:91:f1:cc:
af:e2:a6:08:56:df:03:5d:c4:72:d2:92:97:69:e8:bf:50:6a:
c9:1f:4d:0e:6d:3c:ae:97:d3:55:ff:d1:b7:44:72:d8:12:d7:
6b:52:5c:a6:0c:43:b1:44:3a:d6:42:36:58:d1:8d:7c:69:a9:
82:8f:f6:a2:1e:ca:79:81:b8:09:ff:6b:aa:f1:95:3b:42:66:
ed:25:24:e5:e8:22:55:72:78:f2:b6:e3:82:3e:02:fa:23:7b:
6e:29:ee:f1:cf:bb:e9:38:cb:95:6c:19:ca:e6:42:4a:35:43:
56:44:f1:8e:09:61:b9:fc:7b:ef:bd:e0:d1:3c:6d:ba:a3:dc:
64:39:3c:58:7a:ba:41:67:25:1a:99:37:78:b5:af:a8:d1:74:
ce:5f:00:c8:aa:58:29:e4:49:ab:7f:01:ec:74:76:f1:4f:7f:
4d:e5:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:14:54 2026 by rpki-client