
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: b4cCYbgLt/HilFzKqLM521VMUoILdrbWbQjyu8JwVv0=
Subject key identifier: 79:8C:55:65:19:D1:50:E4:F8:BD:5A:10:3B:33:51:EB:17:35:52:FE
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 3590
Signing time: Mon 12 Oct 2026 14:54:32 +0000
Manifest this update: Mon 12 Oct 2026 14:54:31 +0000
Manifest next update: Mon 19 Oct 2026 14:54:31 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: 7DytzQpRQ2kLZYwHW9bvxGXTgRPhpM6pbdJYY81j/lc=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: B9XMTdbA5EFZjkugV5In7mrbJqz14dCndIA8Lsadbvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Oct 12 14:54:31 2026 GMT
Not After : Oct 19 14:54:31 2026 GMT
Subject: CN=6accf4a8-ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:ba:b7:e7:63:a5:6c:24:f2:b7:e7:68:79:
b2:ab:57:c6:d5:c4:ed:a6:93:79:62:89:a7:3c:05:
dd:0d:44:3a:4b:c5:2f:2a:ea:8b:52:c1:db:60:7e:
81:a6:ad:bd:a5:02:fc:1d:84:2b:ef:cc:11:9f:8c:
10:0f:3a:d7:de:35:f2:2a:f3:25:05:4c:70:c5:c8:
9b:81:12:73:52:84:98:4a:13:14:50:6f:27:e1:01:
57:65:e6:1f:bd:6c:79:bf:0b:77:29:5a:22:c3:ff:
89:30:c7:8f:4c:f0:42:97:59:60:09:99:ff:93:fe:
31:29:8f:24:03:c3:15:c7:be:ba:46:3b:b5:85:58:
0c:83:32:2d:51:06:be:48:c4:a6:fc:8e:fe:23:f5:
b6:2f:48:e2:5a:17:0a:5d:84:3d:9f:be:d6:17:15:
92:b9:3d:8a:25:75:02:9b:11:42:43:3d:a3:50:4c:
98:e4:0c:2a:72:4a:a2:b3:48:ac:c4:82:7c:da:42:
59:62:4a:4d:49:5b:3c:89:56:7f:5a:23:09:20:ab:
16:f4:e5:c1:0e:70:a0:b4:dc:f9:e1:46:d1:94:8e:
cf:89:7e:ee:f0:81:a4:dc:62:42:60:ec:9a:ff:fd:
a0:36:30:e6:c4:3d:72:42:ef:c0:af:15:48:78:69:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:55:65:19:D1:50:E4:F8:BD:5A:10:3B:33:51:EB:17:35:52:FE
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:0a:c4:42:d3:e7:0b:c6:f9:83:99:9d:41:7c:4e:49:a2:cf:
ac:e5:e7:74:a4:e3:20:29:49:67:13:7f:bd:14:74:88:35:ed:
63:bc:f4:62:2d:cc:72:13:2f:eb:7f:fc:de:03:92:0b:fd:f2:
04:5b:6b:56:75:83:a1:27:f0:ce:80:7b:a9:6a:87:7d:28:0f:
24:b3:33:be:8c:56:22:59:67:1c:f1:06:fa:aa:06:26:35:06:
9e:07:c2:e4:49:9a:49:ed:fc:f8:2c:07:d9:13:da:e7:93:a3:
e7:27:69:a7:a3:7f:9b:39:9c:da:ce:fa:6d:63:0d:68:de:45:
15:b0:19:55:de:18:cb:49:86:f9:24:41:eb:1c:ad:0a:2b:7d:
95:2f:19:4b:dc:61:25:60:1f:f4:dd:83:57:c6:db:95:f3:8a:
c8:4f:e7:ec:d5:39:66:88:8c:91:ad:70:16:bf:38:46:fe:da:
8b:5f:ae:0a:2d:c8:e4:e5:94:e7:ba:3b:1b:28:d1:04:ea:30:
e3:95:e3:b6:b7:21:02:ae:0c:0c:3a:84:72:5c:52:be:2e:ab:
1a:7f:26:05:f5:ca:3b:0e:99:55:8d:26:08:71:2e:8c:21:6f:
f8:fd:c2:58:f7:f7:97:61:97:98:8c:72:0a:58:0d:41:9a:4d:
3f:c2:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:34:51 2026 by rpki-client