
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json)
Hash identifier: tEJBIYFjdVrg8y68ZfsHAVx78ZZSOET1K5xPp+NSYa8=
Subject key identifier: 9E:A7:A2:2D:F4:7C:AD:94:C6:E4:38:84:CC:9C:B2:8F:81:68:D2:45
Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
Manifest number: 0526
Signing time: Sat 04 Apr 2026 23:20:36 +0000
Manifest this update: Sat 04 Apr 2026 23:20:35 +0000
Manifest next update: Sat 11 Apr 2026 23:20:35 +0000
Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: geAzRDHL3aerXCeI9JP/S5aIWFqEATo5TztZfcg7jbI=)
2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Validity
Not Before: Apr 4 23:20:35 2026 GMT
Not After : Apr 11 23:20:35 2026 GMT
Subject: CN=69d19cc4-f6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:b3:c7:69:a7:59:d3:ed:85:a3:19:0d:80:
d3:1c:c5:35:e7:41:9e:ff:1f:d3:8f:d5:86:57:01:
22:7e:ae:fd:63:91:ae:db:3d:56:72:aa:c1:ae:e3:
72:50:96:b6:6b:4c:a7:c0:02:0c:68:57:72:0e:f0:
e0:44:a7:56:44:29:8c:53:3e:a5:06:53:2f:f3:b7:
c5:3e:a5:d9:3a:9e:5c:32:d1:be:91:1b:64:cf:1c:
9c:a5:cc:d7:cf:31:98:3c:b9:d5:7c:89:c4:e1:d5:
f6:58:5f:21:de:0e:e0:c1:4b:d5:99:f2:b9:bf:bd:
05:9e:e3:8e:5e:d1:68:32:31:8f:d1:ad:c8:58:53:
ba:3e:f7:86:23:a5:17:54:e6:6f:05:51:dc:9d:77:
1c:33:31:3f:b4:fb:e2:be:6e:27:c5:a5:c5:4b:a2:
a9:50:da:ee:7e:af:39:f6:0e:19:ac:7c:6a:71:b9:
b2:45:dd:03:c8:c2:18:a2:64:89:46:9c:18:6f:b4:
78:5c:eb:5d:6e:4b:85:92:49:22:22:29:7e:ce:a1:
40:10:47:e0:2e:34:06:ee:de:ee:86:44:88:4a:48:
ad:2f:4d:fe:c3:2e:3c:e3:b6:71:fc:50:00:15:10:
6f:bc:8a:e2:e2:e8:3a:f0:b6:17:0f:22:29:8c:c3:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:A2:2D:F4:7C:AD:94:C6:E4:38:84:CC:9C:B2:8F:81:68:D2:45
X509v3 Authority Key Identifier:
keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:5c:ca:0c:94:ba:2d:f0:22:84:ad:be:af:f9:64:89:4b:
fe:f0:3e:ce:3b:1d:e9:fb:34:82:40:89:35:e1:82:0d:be:ee:
18:3b:5e:64:89:03:2e:ed:fa:80:94:f9:11:d0:bc:22:66:1a:
f2:ac:5f:64:8d:f0:3f:ba:a2:29:96:08:9e:37:4d:a1:d7:01:
cd:9a:15:bc:95:fb:1a:6f:13:f1:6c:61:ff:cd:15:ac:15:18:
e6:1d:cf:a8:ab:38:df:38:6d:bf:71:5a:b9:02:40:87:cc:a3:
4a:c7:26:ec:50:74:fc:b3:78:21:08:02:bf:dc:2e:c2:18:d3:
7c:1d:9f:e8:da:e1:6f:38:3b:2e:3b:1f:85:1f:74:d0:8c:d9:
c0:50:ad:54:77:39:9a:6c:9e:c3:d9:f7:19:fc:5b:06:1e:f7:
ea:8b:97:66:d8:7e:eb:57:64:c5:ca:d7:d1:13:be:cf:7a:4d:
a6:0f:04:a4:77:f6:b8:4c:00:a9:ad:fd:bd:b7:e0:da:c9:c3:
2e:73:99:f2:23:85:47:b6:4f:1b:3b:fc:39:4a:dc:0d:be:81:
d0:d7:a1:45:6e:83:e4:5d:24:cd:15:3e:ec:69:af:a7:9e:92:
f4:e3:30:66:11:a5:9c:50:1f:5c:ed:da:cd:96:f0:df:7f:b2:
00:8b:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:01 2026 by rpki-client