
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier: C+l2NaDMLRWV3WFU8bRTwmexznPgWToiWW05rG4uu+U=
Subject key identifier: 27:DA:0D:09:CC:88:92:BB:85:A0:E4:35:BF:6D:7F:86:8A:B6:F8:23
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number: BF
Signing time: Sun 19 Apr 2026 06:34:17 +0000
Manifest this update: Sun 19 Apr 2026 06:34:16 +0000
Manifest next update: Sun 26 Apr 2026 06:34:16 +0000
Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: IxUC6m8ab9RiobCWDSTujaDyrahJ5nFif+zgco4J0uo=)
2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Validity
Not Before: Apr 19 06:34:16 2026 GMT
Not After : Apr 26 06:34:16 2026 GMT
Subject: CN=69e47768-76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:b3:c7:a0:b1:02:92:65:67:f6:3f:6f:f0:
36:a4:cc:cd:3c:f9:65:ff:b3:fe:d2:ee:90:7a:e5:
f6:a3:eb:3e:d1:cd:dd:8f:b3:0c:fa:ee:15:68:79:
c4:a7:30:a6:c9:b7:46:d1:6f:ad:7b:0c:26:20:f8:
f0:fd:e6:91:e8:6a:1f:81:73:14:36:4a:80:d7:91:
58:1c:c0:fc:21:a3:ff:04:f9:28:51:e4:1e:cb:b6:
13:f7:cc:ef:7a:cc:fb:3a:a2:cb:0f:68:13:7c:91:
60:89:f0:35:f6:7b:1a:b1:85:eb:87:ee:38:ac:d1:
a4:58:b9:bf:7e:48:af:10:3f:b6:13:a9:14:44:e5:
32:3b:cb:17:ae:7e:bb:7b:54:32:37:76:cc:24:88:
49:b8:a9:04:55:52:b0:d0:4c:08:16:09:04:03:82:
e1:af:61:98:b5:2d:cb:bb:fd:e0:d7:15:84:78:e4:
29:02:71:43:c3:ec:a3:97:c7:8e:8f:f3:25:b5:2c:
e7:5f:6d:33:ed:b3:2c:e7:d8:24:70:6e:68:f9:0c:
0b:d3:46:46:ff:81:f6:e0:ea:b3:91:88:1e:5d:db:
2b:fb:11:da:d3:53:09:e5:f0:2e:9e:4a:3f:37:e4:
63:e8:20:19:19:2b:d3:55:b0:07:7d:14:25:28:fb:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:0D:09:CC:88:92:BB:85:A0:E4:35:BF:6D:7F:86:8A:B6:F8:23
X509v3 Authority Key Identifier:
keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:b6:7d:28:25:81:d0:03:3e:32:33:10:5e:0b:f6:0f:34:
28:a4:25:fd:0d:d0:e4:ae:89:38:4c:dc:08:5e:96:e5:65:74:
3d:48:5d:f5:cf:a0:9c:82:3a:3d:a0:5f:e0:d9:2d:6a:89:76:
ef:ce:84:c4:b5:1a:78:42:04:05:a4:d4:28:3b:73:ca:29:69:
53:e4:aa:df:46:bb:f8:03:4b:3c:3a:de:13:36:b5:e5:25:21:
e8:8c:02:72:32:41:bf:a0:36:58:6e:af:f7:44:7f:c3:c2:4c:
72:75:c9:58:99:ca:57:4c:ce:ca:66:99:66:ec:26:51:d1:79:
5b:d3:c5:85:9c:ba:69:e1:75:34:7d:b0:58:88:13:c9:c2:f0:
08:58:ac:84:9c:f8:80:09:2d:a8:05:a4:f2:2a:c7:a3:0f:1c:
bc:f2:80:8a:5c:e9:ed:b7:de:85:7a:51:53:b8:ab:01:cb:79:
01:8c:02:ed:21:38:75:8a:5d:a7:80:52:83:19:33:8e:b9:09:
9b:17:cf:7e:0d:c6:1b:e1:00:65:34:f7:bf:f1:84:bf:26:3e:
a5:93:60:e3:7b:f7:91:13:a9:b7:2c:2f:24:bb:19:ad:3c:93:
ab:fd:98:08:6e:2c:c8:e6:b9:25:95:c9:fe:4e:49:29:6f:fb:
53:b3:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:08:22 2026 by rpki-client