
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: uCm+h1WQ2WfsL/fYwMoCRH5atxMywYlZr2KNzZ/D06A=
Subject key identifier: 28:81:9E:B9:4A:62:45:DA:E2:50:E6:F9:06:0D:53:23:D0:FF:3F:30
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 03CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 03C1
Signing time: Sun 27 Sep 2026 00:37:20 +0000
Manifest this update: Sun 27 Sep 2026 00:37:20 +0000
Manifest next update: Sun 04 Oct 2026 00:37:20 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: kcNbk0i6JMTtfVQesaegp64XcLqTw/UathGflxcy69U=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: wubF49eAoF9HZ7KRE24UNHtpS4tGrniQyZh1XIMV5HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974 (0x3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Sep 27 00:37:20 2026 GMT
Not After : Oct 4 00:37:20 2026 GMT
Subject: CN=6ab86540-0090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:79:e1:b1:d7:62:33:ad:c7:23:1e:ba:8a:
b9:47:77:98:67:4e:21:1e:d9:eb:cb:33:49:df:ce:
06:e0:60:45:7c:c8:e3:4a:fd:aa:74:20:54:26:28:
13:ee:62:24:77:3d:a0:fa:5c:24:26:73:c8:cd:0d:
7b:51:74:0a:b7:7e:9c:e7:9e:1d:6f:67:65:6c:8d:
ff:e9:c8:be:1e:e9:95:b0:cc:3e:54:c8:ae:da:52:
1f:97:c9:e1:68:2f:68:82:49:b9:dd:06:4a:67:28:
63:73:8f:a7:23:90:af:73:b3:d6:2e:92:3d:e9:4a:
5b:87:0a:e3:6e:63:9b:b0:1d:a6:17:74:21:53:89:
87:e1:67:56:34:d4:88:4c:24:95:fe:08:62:4c:13:
36:cb:2f:96:ac:fe:cb:31:de:e7:cb:2e:94:b5:b0:
60:fc:83:c7:32:df:0f:eb:15:fa:14:84:18:a9:65:
13:5f:8e:cc:d0:bb:63:d0:6b:99:8f:ee:97:7b:37:
f3:df:f3:ae:b9:60:2e:e2:15:db:8a:f8:ef:17:e1:
db:16:27:d9:06:18:12:a7:b5:ed:f5:bd:29:86:23:
09:d6:43:d9:87:75:2b:79:6e:fb:3d:67:58:bb:ee:
d6:19:48:a4:8b:2b:6a:b5:50:0f:cb:96:39:de:e2:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:9E:B9:4A:62:45:DA:E2:50:E6:F9:06:0D:53:23:D0:FF:3F:30
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:ca:a5:ed:d4:4a:db:74:cc:68:19:76:0d:91:48:a5:e8:
06:7e:65:3e:2e:9b:70:24:1b:2b:d8:84:03:36:64:39:4a:4c:
45:b9:d6:13:78:16:7f:ba:b8:07:d1:ff:1b:1b:b2:9d:12:2e:
9a:10:ca:a7:99:5e:99:88:32:48:3c:1a:a9:d2:5e:9b:0c:11:
db:95:14:30:57:36:d3:e0:92:03:0d:39:1b:19:ea:1d:94:40:
35:1f:99:c9:20:5d:aa:86:9c:1b:58:e5:d7:ff:cd:c8:f2:0c:
6f:be:37:ea:ca:b9:dd:fa:47:75:dc:81:e4:d8:95:81:05:af:
07:50:29:b4:af:1f:7c:ed:94:cd:1b:96:f1:43:fa:fb:1b:00:
be:5e:ef:71:29:ab:ee:a2:74:38:7b:6a:55:8a:fe:13:cd:be:
4e:6a:b9:1e:bd:8e:21:7b:f0:7b:00:8e:f8:ae:a1:f2:aa:c1:
2f:75:81:2d:ab:67:6b:b4:cb:01:cf:e9:78:18:30:15:8f:f3:
80:f3:8b:19:fa:ea:5f:b9:86:8e:3d:24:6e:83:58:70:de:2c:
6b:ea:f5:0f:df:94:ae:6c:65:32:c5:7f:26:c3:0f:e7:fb:fe:
46:e7:1b:c7:14:0c:9b:d2:e3:23:0a:13:f5:69:6a:0d:94:40:
8b:4f:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:36:38 2026 by rpki-client