
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json)
Hash identifier: N8813fEsu6L7RzcW+Sw3gt8eEKhRD/FqPBRoWD3ld8I=
Subject key identifier: A4:B3:BE:77:83:F9:68:8C:A6:6E:A1:51:AB:5B:C1:79:B7:6E:2A:68
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial: 0DC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
Manifest number: 0D94
Signing time: Thu 08 Oct 2026 18:08:22 +0000
Manifest this update: Thu 08 Oct 2026 18:08:22 +0000
Manifest next update: Thu 15 Oct 2026 18:08:22 +0000
Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: ZJNlvgV9LoZy7shmn5iQBN4GGjty2vl2eQMIwExMChc=)
2: A45810226E0B11F1B444C73C6CA30FBC.roa (hash: Xtf0/6y3YC6FhVot6UpoOkskXFie6As5P2KK3d/KTL0=)
3: 75B2EA02BC2711F1869C95754111F970.roa (hash: 9AOWM5vSiMMKkvhdj1t6gHsk+38e9UbgZQcIL0Mc+0o=)
4: E9DEE50ABCE211F188EFB1283A11F970.roa (hash: 8XxYrAxCCkwxSX5gvZFcX9S2KjuOsaa9oX/qG4nIOio=)
5: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3521 (0xdc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Validity
Not Before: Oct 8 18:08:22 2026 GMT
Not After : Oct 15 18:08:22 2026 GMT
Subject: CN=6ac7dc16-cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:21:4c:94:ca:c2:9e:c8:5b:e9:20:51:32:
5c:88:31:3b:6a:85:45:94:00:61:00:0f:f2:ea:21:
60:f8:88:48:9e:6c:eb:9e:cb:7b:40:a1:58:61:cc:
49:91:30:b7:f3:08:bb:13:66:3b:03:93:b2:c0:97:
4b:89:73:a2:12:5e:de:0b:a7:98:8f:0c:56:ba:68:
1d:cf:5c:1e:a6:aa:16:15:17:25:a6:2a:5d:b7:0e:
d0:73:4f:d4:7d:b9:30:82:40:e0:01:27:96:df:ce:
44:1e:4e:f4:b7:90:03:ce:a5:db:28:22:a7:99:db:
bc:08:c4:62:60:82:58:64:6f:03:67:9a:db:17:0e:
90:a8:d9:0c:e6:0b:f4:77:bf:06:f9:e5:eb:86:9e:
bd:85:4f:d7:db:7e:fa:71:3b:26:a5:39:4f:78:7f:
3e:fe:1a:5b:89:f5:6f:b3:98:c0:fa:56:7b:39:32:
a7:7d:1a:9f:41:96:6e:bb:b0:7f:87:26:1c:86:2b:
ee:22:08:ce:cc:39:55:3d:06:f3:7a:72:13:66:f7:
f3:f4:8c:80:c2:f1:ff:77:b2:78:81:b6:ad:4c:2b:
ef:b5:5e:8e:14:69:cf:dc:f2:94:1f:00:09:1e:ef:
f7:4f:35:4e:88:ee:31:f7:e7:3d:e9:2a:dc:55:ba:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:BE:77:83:F9:68:8C:A6:6E:A1:51:AB:5B:C1:79:B7:6E:2A:68
X509v3 Authority Key Identifier:
keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:7e:dc:39:ec:11:c9:5a:b3:37:c4:bf:4c:8f:49:77:e8:
37:90:51:ac:09:ee:fb:d2:61:15:11:8d:e6:62:ed:ab:59:0d:
f7:4d:91:84:3e:ad:35:5b:2e:e4:71:5c:ab:80:32:5f:f8:14:
20:c5:88:d7:64:d3:eb:c4:42:a6:d1:f2:93:a4:5f:f5:a8:86:
fa:77:0c:b5:b4:24:bc:b8:6d:52:9e:4a:d4:d0:8e:2f:fa:41:
d5:9c:fe:96:1b:ce:04:f8:9d:41:ff:9f:3c:d9:ea:56:46:3b:
28:3a:11:cf:54:6d:96:82:08:26:51:53:6f:a0:7d:f7:1b:b5:
37:ec:68:56:a1:16:59:da:9f:6d:1a:64:bd:4d:ab:8d:ff:86:
a3:ef:73:47:b3:a6:10:f9:07:27:73:9e:6b:27:c2:82:0f:f6:
32:3b:f2:24:dd:9b:5e:87:46:c7:fe:74:47:08:2e:61:56:f2:
9f:a9:8f:79:9f:61:35:96:23:bf:a5:59:45:83:ec:70:c2:48:
c7:29:a2:65:11:e7:0d:1d:70:31:d4:3e:42:89:33:cc:ec:56:
5f:00:4f:5c:46:d4:c2:b7:dd:ce:45:53:d0:2e:47:64:26:ca:
f0:6f:33:5b:04:a4:e7:38:a6:58:96:0e:01:7d:21:bd:3d:ba:
c2:7e:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:15:39 2026 by rpki-client