
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: F3O5Te7D3tiZw8bboQ1gP28eqekMmpv6yINjzAHmbN8=
Subject key identifier: B8:3B:27:C9:F8:14:BC:C2:23:87:01:BD:77:BE:15:2A:4A:39:2A:B4
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 3533
Signing time: Thu 16 Apr 2026 14:53:32 +0000
Manifest this update: Thu 16 Apr 2026 14:53:32 +0000
Manifest next update: Thu 23 Apr 2026 14:53:32 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: D12WxFYx1LzpAIlfAUbRCYsdcvzybSzm+nB87nGcQ9g=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Apr 16 14:53:32 2026 GMT
Not After : Apr 23 14:53:32 2026 GMT
Subject: CN=69e0f7ec-f7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:76:f7:dc:16:ea:b6:a2:df:e4:50:5c:a0:
63:42:23:0a:60:87:f8:b8:d6:f0:98:22:7d:26:c4:
da:06:b8:2a:5b:a2:8f:3f:f9:fb:7e:04:b6:68:0e:
a4:07:0a:aa:bd:2f:3b:0c:ec:36:f5:2c:77:0a:71:
39:3d:83:f6:3f:18:d2:e9:1a:05:ec:0a:b4:02:10:
82:5e:a4:81:46:4d:0f:a5:fb:70:b4:85:24:7d:1b:
31:39:57:a7:a0:18:c4:46:81:f7:35:51:67:87:10:
63:dd:42:17:1e:7b:07:7b:46:17:cd:92:5c:22:7f:
29:ee:83:cf:1f:94:f9:84:3c:ea:5b:a2:4d:14:4e:
42:95:5a:9c:ae:d0:3f:0b:44:02:ad:09:d2:74:9b:
ad:e2:53:2d:c1:7c:c4:65:d0:bd:e3:77:2c:44:79:
ee:d5:3b:19:34:b4:90:ec:b5:8a:98:df:b2:50:de:
6d:1f:a2:aa:2b:ab:f9:70:81:da:7e:87:14:d3:4b:
b3:5f:af:6a:c7:dd:ed:97:5a:61:f6:fc:39:26:53:
52:7e:cd:22:d6:0d:a8:fc:4a:65:72:d5:6b:0f:9f:
62:2d:5f:85:d2:95:a0:15:b9:ba:87:7b:6c:96:00:
d7:fa:d2:af:25:38:8c:7e:1c:04:ad:51:d6:e2:52:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:27:C9:F8:14:BC:C2:23:87:01:BD:77:BE:15:2A:4A:39:2A:B4
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:9d:a3:6f:5e:3d:71:d1:0d:d0:bf:1c:fa:6b:6e:01:ae:
f9:f0:f2:ad:03:52:32:c7:b0:65:16:83:b2:21:07:e5:63:74:
52:e0:e0:6a:f4:d3:22:83:33:1c:00:e5:7f:3f:7a:f8:0e:52:
11:4d:80:f3:12:ba:73:6e:1e:01:f0:37:56:95:e4:07:35:5a:
9b:fe:b0:27:43:cd:25:04:19:f6:5a:3c:49:9a:da:00:b1:e8:
37:3b:9b:73:27:8b:8d:61:39:9c:b6:a5:63:27:e9:a2:2d:3b:
18:a4:e6:0a:71:79:79:e5:bb:ca:a0:23:20:c0:38:0c:a6:ac:
7f:7c:ae:20:84:bd:65:a4:7c:a1:4e:b5:13:79:3d:6a:ce:e9:
8a:5f:b8:ad:bf:53:04:db:8b:2b:01:55:7d:2d:68:af:12:fa:
c6:ab:0b:67:1f:9e:65:21:a0:69:89:56:71:40:dd:25:a2:e7:
91:ea:7c:08:4e:51:7d:f2:a3:c4:c4:91:aa:ca:93:fb:90:c2:
ac:68:22:bf:fa:eb:d7:b9:67:a6:24:87:06:26:f9:41:95:cb:
f4:d4:09:0c:88:bf:b7:da:4f:da:b0:43:70:e3:45:c1:50:87:
35:bd:4b:d3:b4:5e:ee:0a:cf:e0:97:15:ca:86:63:02:36:e7:
47:1f:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:58 2026 by rpki-client