
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json)
Hash identifier: upCe1HYyUhdVYbxNyVLw4gFfntNWDPcEYvwpvrg57PQ=
Subject key identifier: 16:4B:03:C9:8A:76:CB:DF:70:54:C7:45:8D:22:A2:EF:B7:78:D2:75
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
Manifest number: DE
Signing time: Sat 13 Jun 2026 06:46:29 +0000
Manifest this update: Sat 13 Jun 2026 06:46:28 +0000
Manifest next update: Sat 20 Jun 2026 06:46:28 +0000
Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: 4Doe5tytYlYGBQHoi8OpmgH7XcB4EDftzjsvnBwa+UI=)
2: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: vNh/5KqyGcLBgRea4GEaf1GiSDPNGV2ayLMJqKrT05s=)
3: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=)
4: E31A926E6EAF11F088699976C4F9AE02.roa (hash: FKzaSN7wk2dTCiUFf01WiFdCMnfThuKnhdLTnhYbGgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Validity
Not Before: Jun 13 06:46:28 2026 GMT
Not After : Jun 20 06:46:28 2026 GMT
Subject: CN=6a2cfcc5-c964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:08:a6:52:d8:76:9c:49:e8:09:c6:d8:ea:
58:cb:88:2f:98:0f:77:fa:12:b8:f4:16:f1:b6:c1:
e8:81:bb:3f:31:73:a6:18:70:e2:2d:eb:7e:01:d8:
8a:f6:4b:a8:f7:13:4d:58:4f:8a:75:e8:de:14:b1:
30:71:18:90:49:b1:47:10:92:97:27:00:a9:da:b3:
27:aa:b8:0f:2b:4a:88:d7:37:45:c5:be:b5:d8:79:
d4:51:28:81:7e:e4:83:7a:41:ce:30:0c:65:0b:2a:
3f:58:f8:4f:89:8a:fb:98:ac:0a:4c:2a:cd:2e:71:
d4:37:93:44:b1:26:a6:73:3e:34:3f:08:8a:70:00:
e3:ae:f7:42:0f:ea:b6:19:14:33:6a:5d:8a:dc:36:
0b:68:63:54:9d:85:27:56:43:87:5a:6d:f4:d4:f6:
f1:c6:ea:80:ea:e1:d1:bc:bc:32:57:5e:17:2e:8b:
b3:63:26:01:03:93:d3:32:e6:ee:f2:dc:95:62:3e:
9a:07:8d:71:9b:b7:3b:3f:ce:9e:1c:cb:7b:71:62:
02:1d:6c:f9:cd:96:ae:d2:6b:cf:45:34:b9:30:f6:
c1:c8:4d:06:e5:0b:db:e0:64:97:ff:11:ac:fb:7d:
b3:4c:0f:70:bb:63:c7:e6:ec:99:ff:7b:5a:15:0b:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:03:C9:8A:76:CB:DF:70:54:C7:45:8D:22:A2:EF:B7:78:D2:75
X509v3 Authority Key Identifier:
keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:a0:01:44:48:ae:10:8e:52:00:f2:7b:ef:c6:16:1d:2d:
89:e1:74:a6:b8:12:0e:2d:d5:d6:e5:6f:6e:5a:27:27:b2:51:
3f:26:0f:8a:00:e7:00:5d:a6:0b:7c:30:6f:72:5e:e4:0d:c9:
71:a6:86:b1:db:ce:46:5f:7e:73:62:20:8f:84:3e:46:c3:0b:
ed:20:e6:91:37:82:f8:ec:8c:d8:0d:48:21:f2:24:92:5a:85:
19:a6:be:72:d0:56:c4:ea:8d:32:6d:90:94:ec:e8:d7:56:7e:
e8:2b:6c:b3:04:e0:e6:da:1a:c0:27:9e:b5:cd:09:19:ca:90:
c4:66:99:af:2b:a6:94:b9:04:8d:01:62:e5:5c:39:7c:0f:08:
60:8a:12:81:34:a6:14:8a:7e:20:71:10:7c:68:37:db:d1:85:
be:2f:cf:31:f3:dc:eb:ca:da:ed:d0:98:10:fb:a0:57:3b:72:
fb:47:f4:af:7e:ed:4b:ab:82:a4:03:38:71:ee:b1:d9:c3:0d:
f9:98:26:4e:61:2b:1b:b6:b2:56:b0:1d:64:06:af:bc:14:60:
1a:9f:ca:e3:ae:ed:5d:d2:00:b5:0b:74:f4:94:83:0a:10:e7:
62:f3:2e:b9:9e:ee:c7:5a:43:94:f0:dc:f5:01:ed:f8:27:0f:
88:63:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:09 2026 by rpki-client