
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json)
Hash identifier: UAigrRB4kkY7EnwMrIjdfgMUg3dYHL+c3WDuLUSUnyg=
Subject key identifier: 37:2A:7A:ED:EE:1E:55:5D:01:0E:B5:78:B6:DE:E3:5A:C6:7C:ED:AD
Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
Manifest number: 0588
Signing time: Wed 14 Oct 2026 23:39:52 +0000
Manifest this update: Wed 14 Oct 2026 23:39:52 +0000
Manifest next update: Wed 21 Oct 2026 23:39:52 +0000
Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: oUoEYOfdO6hEgwwhyq5nE2hXBqV+3bbxwIT1+D21RXQ=)
2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 23:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Validity
Not Before: Oct 14 23:39:52 2026 GMT
Not After : Oct 21 23:39:52 2026 GMT
Subject: CN=6ad012c8-b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:84:bf:53:19:b5:e3:c4:cb:25:eb:35:65:
32:d8:4c:00:3a:8a:1c:2a:ed:14:5e:1f:34:35:b4:
36:8d:07:ac:59:03:a9:af:06:f5:bd:ea:13:c6:34:
0b:2c:b4:8b:38:8e:3a:f0:57:71:53:2f:9a:28:0e:
6f:52:c9:d5:6f:ce:cc:43:cf:07:dc:d0:9f:a7:0c:
a3:cd:c9:1c:c6:41:0f:39:c2:ae:bb:12:6f:65:45:
5d:ff:da:cf:0c:4f:6a:98:38:90:36:0e:af:3d:88:
a6:62:59:70:5d:36:f5:b2:08:f9:63:02:f1:f8:25:
ab:6e:33:eb:29:90:5a:92:f7:6e:11:94:ab:38:bc:
99:38:c0:78:86:5e:70:24:7c:fd:e5:b6:ce:54:31:
87:95:ae:cb:71:4f:7f:e6:ac:30:da:bd:a9:f8:f1:
0b:98:cb:b5:bb:6e:ff:8a:7a:92:a0:ab:0d:98:34:
ff:74:81:94:65:54:90:f1:bb:46:e2:20:18:bd:27:
26:e3:bd:5e:c3:09:25:a1:d2:e0:12:99:c0:10:46:
0f:5a:1c:e2:a6:92:be:66:0d:a9:34:0e:37:c3:50:
d8:69:56:01:3c:90:3f:cf:77:3e:dc:fb:ec:4b:18:
01:ed:35:7c:57:85:91:e1:5d:48:44:fa:9d:68:a0:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:7A:ED:EE:1E:55:5D:01:0E:B5:78:B6:DE:E3:5A:C6:7C:ED:AD
X509v3 Authority Key Identifier:
keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:c3:d5:67:0a:74:66:78:cf:8e:53:e6:5a:c3:da:a9:4d:
a9:01:e6:6e:c1:bd:98:ae:a2:bb:13:1e:9c:a0:c1:f7:6f:e7:
4b:aa:48:5a:33:26:48:50:15:65:83:09:43:1f:b8:79:70:2c:
41:58:14:73:56:5b:91:97:92:e1:4a:4a:22:ff:7e:e3:49:1a:
35:2d:d2:b9:da:60:0d:e4:42:2a:5e:42:eb:eb:d2:db:f4:6d:
18:93:c8:8e:51:f7:8f:eb:9a:72:cd:06:e1:29:04:79:fc:b1:
a0:41:a3:e2:24:97:59:5c:74:1c:d0:4e:49:93:56:49:d7:4d:
49:e8:7e:d4:fd:cb:9d:77:f8:69:58:d4:0a:b4:f5:ef:bc:7e:
c2:35:70:5f:79:3e:4b:02:87:e7:33:a5:d1:24:d4:d6:2c:63:
f6:69:33:e9:c5:9e:a8:a7:a5:4a:43:84:39:92:d0:02:20:ed:
05:12:f3:fb:a2:f8:6e:2c:b1:90:b6:fe:18:51:69:7d:97:2c:
95:32:06:dc:6d:2c:85:8d:d3:40:68:ca:0d:e9:6a:36:15:ae:
19:96:e9:9f:2f:31:d6:6c:27:3c:15:ae:71:c6:db:49:9e:80:
c7:5c:97:4e:94:74:4e:5e:a0:d1:f4:d6:75:fe:dc:01:e7:54:
3c:a7:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:07:55 2026 by rpki-client