
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: pyTZ40QhBW8b+Xbx+g17JHw1H+peGcxlC8BDHC7tyYE=
Subject key identifier: 9E:EA:E1:83:EB:AB:10:86:87:AE:BB:78:C6:E2:6A:54:32:1C:54:D7
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 027A
Signing time: Mon 27 Jul 2026 03:21:03 +0000
Manifest this update: Mon 27 Jul 2026 03:21:03 +0000
Manifest next update: Mon 03 Aug 2026 03:21:03 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: 87M72+Eq8P1J4YI2OHBS2eO+wPeVajcbE4bTm2RzzyQ=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: Jul 27 03:21:03 2026 GMT
Not After : Aug 3 03:21:03 2026 GMT
Subject: CN=6a66ce9f-47e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:3e:63:8f:52:b3:44:56:91:79:65:cc:ec:
77:3b:45:64:29:57:c4:bb:49:17:9e:0f:41:9f:96:
dd:b1:d7:93:87:17:4a:7f:db:67:c2:cf:59:12:f1:
b8:4a:1b:0a:c3:2b:f1:26:3f:7f:ce:a0:fe:43:89:
ae:91:80:55:9e:aa:64:f5:3f:5b:9e:e0:5e:ee:40:
95:e7:6b:39:c2:0b:cf:ad:f4:29:42:6e:91:7f:b5:
da:c3:1b:66:1d:3a:1e:6d:23:37:cb:6e:d2:da:77:
86:53:49:0d:f4:ce:77:ce:50:76:5f:6d:db:c2:55:
74:e2:db:f0:6c:33:53:91:aa:db:21:c2:c9:86:e4:
c5:ae:c0:37:c8:9e:1b:c6:2b:9c:7e:af:c2:49:01:
93:bb:e6:9c:80:ba:94:38:e7:34:22:ef:41:c2:00:
bf:76:28:b8:56:88:04:48:27:89:69:5b:4c:46:7a:
eb:15:09:7c:d1:20:fb:ee:7a:58:98:be:af:57:eb:
4d:86:48:33:87:f0:07:1d:8d:2e:d1:44:90:3e:90:
d7:05:9b:9d:f3:0f:e8:c7:4b:05:2c:4a:d8:e1:3f:
43:38:b3:20:49:a9:12:ed:02:fc:94:72:cf:89:3c:
b9:c7:9d:ef:df:ad:85:6f:25:b8:f2:e5:02:65:7b:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EA:E1:83:EB:AB:10:86:87:AE:BB:78:C6:E2:6A:54:32:1C:54:D7
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:a9:da:c2:ab:64:c0:da:e3:84:14:50:ce:ce:7a:7d:bf:
8b:1f:b3:cd:5c:d0:d1:f3:5c:01:1d:77:32:b1:26:8a:d0:f3:
33:d8:d1:5b:72:33:b8:8f:cf:3a:fb:93:ca:86:d7:b0:f8:33:
f4:7e:ca:96:bf:75:2c:27:47:f4:40:de:1b:34:e5:81:fd:e3:
84:ce:6f:d7:a7:74:ef:3d:d1:f6:99:90:74:87:f8:2f:62:7e:
57:9f:da:8a:57:91:21:8e:bd:67:be:9a:df:ab:ec:0a:31:05:
88:df:dd:21:31:59:43:7b:66:3d:79:bb:71:85:69:ee:fe:73:
e9:87:30:ed:79:b1:8e:d9:bf:50:07:72:b9:69:93:22:55:95:
92:ec:8e:07:c9:76:cd:49:26:1e:60:d3:f8:8b:c4:9e:3c:2f:
84:26:14:aa:f8:4d:4c:b2:4a:f1:e0:f3:58:b8:f7:71:16:69:
0e:12:82:36:f3:6e:48:60:6c:15:6a:b4:56:29:11:d2:ab:70:
9c:6c:6a:a4:75:60:f4:cd:81:99:66:6c:aa:57:97:82:7f:06:
ea:7e:4e:f6:bb:c5:73:29:d9:78:96:92:2a:06:9a:1e:da:d5:
40:c6:38:9d:d0:87:29:b1:73:c4:c3:ea:e2:15:48:c9:9f:3c:
5f:ba:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:02 2026 by rpki-client