
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json)
Hash identifier: JeL8LTzXiYcJefjAhhtMNANLvpSYGvb7V8MfTAe21oI=
Subject key identifier: 10:18:63:55:7B:D5:9E:C5:59:CA:FD:32:3A:DA:A5:11:C5:D4:31:DD
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial: 0D7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
Manifest number: 0D52
Signing time: Fri 12 Jun 2026 18:05:20 +0000
Manifest this update: Fri 12 Jun 2026 18:05:20 +0000
Manifest next update: Fri 19 Jun 2026 18:05:20 +0000
Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: mQs+oXQ2htc+Cfu0pONibnOEM5Iu785u0omPrm0tBcE=)
2: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: 9eVW8q201teZAFGXXlr75mIPBbOGURlsiVyxRbpYboo=)
3: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3450 (0xd7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Validity
Not Before: Jun 12 18:05:20 2026 GMT
Not After : Jun 19 18:05:20 2026 GMT
Subject: CN=6a2c4a60-9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:e3:3a:4a:37:fe:89:fa:82:ae:a2:b3:1d:
7a:7f:ea:2b:bc:42:96:88:1c:dc:8e:77:8d:0f:2f:
25:78:11:b0:ab:b8:50:cf:ea:4f:6a:39:89:db:67:
14:ac:f1:67:b4:72:0c:b1:dd:65:95:9c:af:18:08:
83:d0:0a:bb:75:fa:d5:31:ff:75:e3:38:12:75:d5:
f2:b0:da:b5:d7:7a:99:5f:19:46:e4:ce:93:cd:5f:
37:0b:e9:71:76:65:cb:ab:79:c8:d8:06:8c:9f:18:
0d:88:2f:42:9c:66:66:b3:41:80:e5:21:c6:4b:6d:
a8:91:39:85:a6:df:5f:71:ec:f1:04:bd:f8:fa:9f:
12:c6:49:14:15:30:a4:26:c8:22:84:92:97:f3:41:
e0:5a:60:06:77:59:87:5d:b6:22:e5:ba:e7:6b:d1:
33:2d:3d:1f:21:8c:bf:32:2c:38:0b:d1:e8:31:6d:
da:4d:03:ad:3e:4c:4b:1f:e4:54:53:10:d7:08:a3:
69:7d:4a:31:8b:20:77:38:13:b4:94:c5:5a:0f:bd:
19:67:dc:a1:ac:22:8c:3e:7b:7c:1c:1f:04:86:19:
e5:6c:b1:f3:c7:af:33:57:f0:09:fe:ec:bf:f7:19:
4a:d7:05:fc:29:53:3e:e7:55:9a:f4:f3:29:65:07:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:63:55:7B:D5:9E:C5:59:CA:FD:32:3A:DA:A5:11:C5:D4:31:DD
X509v3 Authority Key Identifier:
keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f8:f8:75:2f:10:94:2e:97:31:7a:7f:1b:07:9d:dd:ec:30:
8c:0d:9f:93:97:48:dc:a3:4c:5a:8c:14:da:2c:b3:4e:7d:6a:
1e:fc:e8:25:a2:6c:4a:e1:5d:6b:59:c1:80:d7:0b:3c:ce:8f:
0d:af:f2:63:23:e0:1f:3a:55:06:af:a8:ca:7f:99:0d:5e:34:
a2:2f:dc:70:90:ec:77:b1:d8:60:be:8b:b3:16:82:d2:ee:eb:
a1:cf:c4:c2:f5:16:0c:68:c4:44:65:b1:3a:6d:7e:3f:2d:01:
4f:89:af:7b:43:95:f5:2f:bd:30:15:78:5a:67:7c:72:ac:ca:
7f:4d:dc:50:48:23:39:63:2e:bc:88:e4:30:59:b1:81:b2:e3:
e9:d7:f5:45:76:64:ff:40:79:44:74:fa:17:36:ea:08:c9:a0:
a6:0c:07:2c:24:ad:de:bb:d5:fc:89:67:4f:a8:c6:3d:1e:16:
30:e4:ce:91:4e:44:95:ef:e3:9f:b7:5f:a2:f8:ea:c0:b0:b5:
ef:4a:4c:68:2e:60:6f:1f:ac:6a:0c:65:1a:51:10:64:c7:3d:
7a:1b:1a:a2:2c:e6:e9:96:5d:5c:e4:2b:40:34:38:20:1b:de:
20:20:9b:f0:f7:1d:47:78:d3:c3:45:b2:ba:58:16:d3:a2:8f:
ac:13:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:29 2026 by rpki-client