
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: WhIMOSmjTpPB9UDKAj+F8pNeWv9s4OC7SciBWFZh2is=
Subject key identifier: 8D:5D:46:D3:9E:0A:B3:9E:AD:B3:43:87:23:B1:7E:0B:05:A9:1B:51
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 0395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 0389
Signing time: Sat 13 Jun 2026 00:47:59 +0000
Manifest this update: Sat 13 Jun 2026 00:47:59 +0000
Manifest next update: Sat 20 Jun 2026 00:47:59 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: TuyndxbzoC4NHYZScQY7amwdNx1DuqvqZ43CbRdygeI=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Jun 13 00:47:59 2026 GMT
Not After : Jun 20 00:47:59 2026 GMT
Subject: CN=6a2ca8bf-3eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:17:c3:c3:9a:99:be:90:78:7d:7e:1f:f8:
92:7e:52:41:40:18:1f:ba:f4:08:b5:e6:76:3d:97:
18:41:d3:b5:f5:c2:72:dc:52:12:db:d7:95:14:c3:
0a:11:bd:36:1f:a7:9c:e2:40:39:3b:21:28:d1:c1:
36:22:94:c1:9c:d8:e0:80:73:70:f9:5a:e7:02:74:
6a:ba:f2:1a:ed:12:4f:1d:dd:6f:e2:72:b8:ea:eb:
21:93:06:08:30:75:f8:9e:f1:24:2c:e6:84:df:7a:
51:17:39:b9:73:63:f3:2e:eb:09:b6:31:bb:52:f5:
a1:24:8b:b5:46:fa:99:99:60:d0:d6:8b:64:0e:1d:
00:2d:f3:ed:9e:7e:cb:f3:a2:5d:05:8b:ef:f0:cf:
ef:3e:c0:3b:5a:d2:66:ab:cf:46:16:87:3c:a4:a3:
fa:ed:05:6f:40:4f:cc:9e:65:4d:72:26:d7:72:3c:
9b:5d:51:50:47:cb:d3:04:d9:7f:15:ba:be:54:5a:
27:fa:13:0a:c1:fb:94:ca:c9:2d:c1:bb:73:90:b7:
9c:7f:ac:59:27:80:90:de:41:d9:b6:66:cd:84:37:
b9:38:12:28:b0:d6:2f:91:a2:6f:23:c4:d0:92:aa:
19:c2:e8:bc:d5:10:ce:df:5f:ed:e0:0b:cb:3c:2c:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:46:D3:9E:0A:B3:9E:AD:B3:43:87:23:B1:7E:0B:05:A9:1B:51
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:a5:b2:f9:55:c9:99:34:df:a0:7a:c1:58:1d:de:d5:37:
53:b7:69:c3:99:74:93:2c:e9:9f:42:58:cb:0a:d6:e8:f1:b6:
d3:d3:a9:d0:64:0c:3f:ad:67:1e:c1:cd:ce:5a:92:94:1c:8a:
e9:d6:96:7b:3d:cf:23:55:65:0f:0b:ca:29:8e:69:11:f8:09:
80:be:db:b2:68:75:63:08:1b:b3:7f:81:76:23:60:77:46:7b:
e2:41:8e:5c:9f:79:a6:94:8b:4e:8c:39:b5:64:61:91:2f:db:
1e:b8:4a:a7:2b:4c:13:7c:58:90:79:d8:35:b7:f5:bd:f1:cb:
1f:fd:5c:de:1f:10:0c:bf:9d:ac:ac:e1:e0:75:30:20:50:a6:
11:32:00:47:dc:5d:b1:de:6e:d9:77:f9:a0:f9:1c:e1:0a:ed:
2b:81:08:f3:0c:ed:f2:b8:4b:f2:a6:b4:7e:96:79:49:ce:80:
88:aa:f6:91:95:4f:47:46:ee:d2:d1:55:c1:ad:70:39:2d:82:
18:ce:d0:82:f3:81:71:45:11:73:02:d5:6a:06:6d:69:2e:66:
b6:59:1b:20:c6:79:34:25:8c:bd:6d:3d:31:6e:c0:81:76:8f:
37:49:22:0f:7d:90:f6:a0:62:37:e5:7f:5b:dc:94:61:22:d8:
5a:74:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:33 2026 by rpki-client