
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: o77xgW8JuZnNSaQDA0JkOP4mLJ2e7swcx20Kf8GRvI0=
Subject key identifier: 91:28:F8:1A:CB:F6:08:E7:BF:D4:12:B5:9D:71:45:4B:37:BE:CE:E3
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 036C
Signing time: Fri 17 Apr 2026 00:46:31 +0000
Manifest this update: Fri 17 Apr 2026 00:46:31 +0000
Manifest next update: Fri 24 Apr 2026 00:46:31 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: Y2D8GoYH/A0a48ABS3OpHN/3C23je0UVQOhywBoVsbs=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Apr 17 00:46:31 2026 GMT
Not After : Apr 24 00:46:31 2026 GMT
Subject: CN=69e182e7-84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:b0:1c:f3:55:22:52:da:29:f9:c0:ad:8a:
96:5f:49:18:e2:b6:fa:8f:c7:51:bb:b4:74:00:ba:
0e:b5:e9:c8:fc:81:a0:a0:40:08:4a:ae:bc:3b:15:
02:69:90:29:a8:1f:8f:7a:b9:48:6a:2a:a4:07:94:
1d:f7:9a:9d:59:d6:b4:74:06:61:69:79:fe:f2:63:
2e:15:53:bb:89:d7:ba:1f:aa:3b:a6:f9:10:75:37:
18:37:21:74:22:45:de:a0:de:36:62:82:2f:66:38:
bd:a1:18:45:8e:25:22:b2:29:2a:39:31:32:12:27:
de:07:7f:0e:9d:da:4a:f5:91:ab:11:f2:1e:32:7f:
30:8c:f9:6e:4f:8f:b4:df:ed:2c:94:36:7d:ef:99:
d9:81:b0:f3:23:98:11:08:cf:4d:ca:d3:52:d3:d3:
5d:1b:62:44:a2:42:da:21:2b:19:fa:9c:01:0d:cd:
ef:d1:96:92:ba:46:1a:d6:cf:df:70:82:36:db:91:
54:a4:f6:b1:74:7f:ed:e7:8b:60:6d:e5:7c:aa:eb:
1b:0a:a6:61:5c:e8:17:3c:83:b1:13:f3:9b:c9:ef:
f9:cf:f2:ed:e0:13:5c:4a:b8:31:2e:33:2d:6f:8e:
78:6e:0b:b9:e9:b7:40:78:f4:ff:cc:0d:8d:50:02:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:F8:1A:CB:F6:08:E7:BF:D4:12:B5:9D:71:45:4B:37:BE:CE:E3
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:1c:75:7d:7c:34:af:12:f3:87:1e:05:98:8c:af:af:7a:
3b:07:74:86:27:5b:35:4c:1f:ca:b0:8c:bc:68:3d:b1:7a:ed:
bf:7b:20:9b:fe:a8:e6:fa:57:7f:14:e6:2f:31:d6:83:c5:f3:
74:a4:db:57:b2:15:36:5d:9a:02:60:be:13:48:5a:dc:08:93:
dc:d8:3c:6a:0e:0d:cc:23:b8:3b:a7:a7:3f:b2:ce:35:49:0a:
ea:92:a5:6b:95:67:41:17:22:79:99:bb:1e:b7:84:84:8f:f6:
3d:ac:35:8f:1a:ce:b1:dc:0f:a2:0b:16:59:00:88:24:85:15:
4c:48:23:26:d7:da:0e:b2:c6:3a:9f:72:35:7a:f1:5c:3a:bc:
47:66:fc:a8:36:8f:59:69:4f:2f:06:52:d5:96:e9:1c:c8:d9:
8a:17:c7:99:04:c7:19:2d:25:ff:7d:00:73:4b:00:d2:09:90:
9d:7a:68:04:3a:c5:9a:67:40:2a:55:21:99:55:c3:d9:5f:bb:
2f:cd:55:bb:5b:fc:00:50:43:97:f4:32:86:cb:19:49:f2:95:
41:46:ed:84:7b:0c:c8:6f:25:9d:c1:c0:1f:90:66:cf:cd:60:
07:35:a4:05:ff:61:94:ce:33:58:73:8d:09:2d:80:4b:3b:22:
f8:d7:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:14 2026 by rpki-client