
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier: LEnwZSCgXERD4ymhiBhVzUYhgsQb/SvMpGLcxbNH07A=
Subject key identifier: E4:73:6D:C9:26:7A:4B:48:38:3A:8A:B2:9A:00:A2:34:0B:F2:8C:03
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number: 01F1
Signing time: Wed 15 Apr 2026 03:05:23 +0000
Manifest this update: Wed 15 Apr 2026 03:05:22 +0000
Manifest next update: Wed 22 Apr 2026 03:05:22 +0000
Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: lpJLoqlV37bgIlxcnU40oc5ewlmj/AVSszQ8R9IhUME=)
2: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
3: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Apr 15 03:05:22 2026 GMT
Not After : Apr 22 03:05:22 2026 GMT
Subject: CN=69df0073-0fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:d5:c5:e8:06:ff:b6:44:5f:56:64:51:3a:
0e:e9:fe:37:8c:2e:e4:cb:c0:3a:f9:02:1b:e7:de:
c2:e1:0b:3f:5f:89:29:a9:30:2c:5b:4b:b7:b0:61:
5f:66:11:6f:69:65:fd:d8:a6:70:f0:2b:f7:9a:72:
03:a2:b8:5d:b5:3e:81:a5:3f:25:7f:2f:05:a9:7b:
c3:b0:f5:86:e9:14:70:40:81:a9:8b:5b:bf:43:45:
21:e7:ea:d9:d3:99:68:7d:45:8b:76:6c:45:5e:bf:
50:f9:4b:7b:56:4a:72:20:4c:d5:e6:d1:62:54:8c:
e5:05:7b:bd:03:0f:0c:94:29:0a:59:49:80:fe:eb:
9d:7f:94:83:c9:e2:de:4a:eb:89:7f:6a:c5:18:4d:
5f:4e:9b:2e:6f:1c:bc:a7:45:db:5d:19:14:c4:cc:
e8:6b:9c:87:ee:2c:25:07:df:ea:31:c9:64:16:ae:
8a:2c:2c:e5:cb:23:50:1d:77:e3:cf:a5:1f:97:64:
e2:5d:50:3a:ce:6b:37:be:72:8f:a8:3a:54:f3:cd:
3e:4e:2b:43:ec:f1:18:81:b7:7d:8e:d2:10:d5:ca:
64:33:98:e7:06:4f:66:eb:7f:87:65:01:51:29:d6:
d9:4a:51:21:9d:7e:e2:90:58:db:33:65:49:51:82:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:6D:C9:26:7A:4B:48:38:3A:8A:B2:9A:00:A2:34:0B:F2:8C:03
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:c0:82:3f:9c:95:d9:20:1a:13:a7:e9:74:30:fc:6b:11:
d2:da:8e:e7:f6:e6:9a:2d:8b:8f:01:ed:c8:6f:0a:fe:65:16:
56:70:69:61:f9:02:0f:bd:6c:bc:58:bb:cd:86:72:19:1f:30:
6c:da:0c:2d:e4:29:c5:8c:5f:36:5e:b8:72:0c:f0:76:01:36:
fa:c4:88:cb:39:a5:9d:f2:c0:f9:f9:5e:3f:3b:40:58:31:4b:
0f:0f:77:df:74:af:dc:a8:24:e7:1b:f7:2f:4b:6a:ec:bd:54:
7b:9b:26:11:45:8e:68:8a:1e:b8:68:93:52:a4:cb:ac:7b:5d:
d0:5d:9c:a3:1c:a8:ec:31:fb:bf:8b:aa:e6:55:12:a9:14:c4:
ff:ae:41:bf:89:c1:91:e2:14:ba:25:81:25:4e:4c:53:5c:5c:
a6:69:e1:e6:7c:e7:d7:be:fd:d3:d0:21:64:31:c4:00:95:07:
b5:8f:a9:a3:56:18:f2:33:51:a2:26:14:05:6d:e9:8b:ae:6c:
33:06:be:a1:fc:d0:e5:6a:eb:fe:7e:6b:51:61:75:1f:11:dc:
72:04:73:95:db:39:e1:c3:aa:d0:8e:a8:11:90:5e:8e:51:b4:
4d:f1:fd:ca:0b:de:f8:fa:2b:8c:3e:5a:fb:f0:bf:b8:0d:a0:
ca:72:41:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB
MDZFQ0E3NDAwHhcNMjYwNDE1MDMwNTIyWhcNMjYwNDIyMDMwNTIyWjAYMRYwFAYD
VQQDEw02OWRmMDA3My0wZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqPVxegG/7ZEX1ZkUToO6f43jC7ky8A6+QIb597C4Qs/X4kpqTAsW0u3sGFf
ZhFvaWX92KZw8Cv3mnIDorhdtT6BpT8lfy8FqXvDsPWG6RRwQIGpi1u/Q0Uh5+rZ
05lofUWLdmxFXr9Q+Ut7VkpyIEzV5tFiVIzlBXu9Aw8MlCkKWUmA/uudf5SDyeLe
SuuJf2rFGE1fTpsubxy8p0XbXRkUxMzoa5yH7iwlB9/qMclkFq6KLCzlyyNQHXfj
z6Ufl2TiXVA6zms3vnKPqDpU880+TitD7PEYgbd9jtIQ1cpkM5jnBk9m63+HZQFR
KdbZSlEhnX7ikFjbM2VJUYKKCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORzbckm
ektIODqKspoAojQL8owDMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC
NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf
RjBxLUVTMUpYdFdnYnNwMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACdDAgj+cldkgGhOn6XQw/GsR0tqO5/bmmi2LjwHtyG8K/mUWVnBpYfkCD71s
vFi7zYZyGR8wbNoMLeQpxYxfNl64cgzwdgE2+sSIyzmlnfLA+flePztAWDFLDw93
33Sv3Kgk5xv3L0tq7L1Ue5smEUWOaIoeuGiTUqTLrHtd0F2coxyo7DH7v4uq5lUS
qRTE/65Bv4nBkeIUuiWBJU5MU1xcpmnh5nzn177909AhZDHEAJUHtY+po1YY8jNR
oiYUBW3pi65sMwa+ofzQ5Wrr/n5rUWF1HxHccgRzlds54cOq0I6oEZBejlG0TfH9
ygve+PorjD5a+/C/uA2gynJBdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:30 2026 by rpki-client