
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier: OLvzTDCR6kyUhWt9FANeQ6OpagdfcOKyZy7ItfpSktU=
Subject key identifier: AC:E5:B1:05:48:D4:25:6C:C3:C0:E7:F8:BE:D7:E9:82:F8:81:CE:F6
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial: 0C85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number: 0C7C
Signing time: Fri 12 Jun 2026 18:38:40 +0000
Manifest this update: Fri 12 Jun 2026 18:38:40 +0000
Manifest next update: Fri 19 Jun 2026 18:38:40 +0000
Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: Cwq4GtQ5MYCBwnR0Uu36O2uEEtAomzlyBWvKSRVZ7wE=)
2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MhK6fjpCgRPkr/iKRfOswI8Vu+Z6RpVv9J3L3B3Ndho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Validity
Not Before: Jun 12 18:38:40 2026 GMT
Not After : Jun 19 18:38:40 2026 GMT
Subject: CN=6a2c5230-7628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:f5:88:8a:38:76:4d:70:1e:08:44:fa:8e:
d0:c6:94:43:1f:a4:79:32:53:73:bc:60:fb:44:50:
e2:2c:d5:1b:8d:c5:59:e1:47:2e:40:de:fb:58:d1:
8a:86:e3:be:3b:8d:0a:17:a1:4f:ad:4f:ee:d3:ef:
da:dd:22:0c:45:81:51:5f:cf:bc:e2:f4:85:38:63:
b9:e9:09:75:80:bf:67:c2:44:34:00:2f:dd:73:97:
38:4d:8a:a3:9a:f1:6d:a9:0d:24:02:96:61:a5:19:
f8:71:49:9e:d5:93:87:96:af:65:7d:91:5a:9a:38:
04:fe:0d:b2:1c:dd:3b:db:d1:21:ff:eb:be:fb:1e:
28:53:22:3f:5f:4b:e8:42:a5:0d:f6:64:e8:c6:c4:
fd:fb:7c:02:bd:e4:11:be:0b:63:b9:02:53:f8:ec:
a3:69:6f:7e:65:29:a7:40:c0:3b:de:3f:53:e2:57:
5d:5e:14:93:dd:9a:19:3d:2f:86:22:d7:7b:55:76:
f3:a5:61:b5:d7:ba:72:91:ce:df:3e:6a:89:34:09:
e1:16:99:74:58:d5:a4:54:6a:00:3b:cd:29:92:39:
e6:bf:1b:92:a6:4e:c5:d2:00:2f:bc:75:1a:aa:3a:
29:4d:7c:24:02:25:69:5f:e8:35:88:66:7a:c2:a6:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E5:B1:05:48:D4:25:6C:C3:C0:E7:F8:BE:D7:E9:82:F8:81:CE:F6
X509v3 Authority Key Identifier:
keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b5:98:45:5a:15:96:01:ce:e8:d6:f7:6c:f4:c5:29:0f:47:
fb:96:7a:44:ef:1e:1c:11:5b:89:e9:33:1c:a6:aa:c8:6c:34:
33:b0:ce:10:57:89:be:e1:83:aa:be:be:03:da:2d:ed:e7:94:
9c:49:c4:a0:45:2f:fe:12:b4:1e:cf:66:e3:b7:c2:8c:e5:ec:
31:53:fc:fb:6f:41:0c:f7:70:1c:d2:54:ef:b8:8f:6b:f9:50:
0a:84:04:66:54:14:71:a4:79:20:86:9c:e6:5e:32:bd:7e:72:
e2:42:a8:5b:ed:22:e8:14:b6:8f:4c:a1:64:8e:80:aa:d2:4f:
e9:53:46:9b:cc:a4:b1:5e:a8:f0:61:b3:96:df:0f:75:d6:60:
30:47:cb:e8:4f:74:42:6d:6d:71:22:cd:1b:c2:b1:0c:8f:c4:
73:de:de:7c:df:4b:c9:37:5a:0d:1b:51:13:ec:8d:36:8e:8b:
68:09:70:ab:46:d3:5b:ed:ef:24:4e:63:c0:d0:ce:4a:7a:ae:
c1:1b:34:bc:08:ef:2d:48:b7:43:b3:d5:86:21:9a:09:9c:b5:
aa:25:87:4d:9a:84:b2:f7:fc:16:a5:22:04:a8:1f:79:76:94:
2c:f5:84:c4:93:aa:67:1d:45:db:c3:88:f2:4a:44:ca:a9:83:
1e:ea:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:19 2026 by rpki-client