
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: oiEYY4JX9tLUNZVMuLWbMJBX1vMcJ1RNIxgf9P2uZ7U=
Subject key identifier: 26:F5:3C:12:F1:16:2E:65:94:00:8D:A1:A4:CE:CF:9C:F7:F3:27:4F
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 0366
Signing time: Sun 05 Apr 2026 00:39:28 +0000
Manifest this update: Sun 05 Apr 2026 00:39:28 +0000
Manifest next update: Sun 12 Apr 2026 00:39:28 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: jrYMgFOIPoerRI+7ppiQa2+RVwc6/+zZqaYkmL46ZTk=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Apr 5 00:39:28 2026 GMT
Not After : Apr 12 00:39:28 2026 GMT
Subject: CN=69d1af40-2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:70:cf:98:91:30:1c:98:19:87:0d:6c:e3:
43:5b:f0:42:60:67:fd:73:31:b0:54:47:49:cf:d8:
3c:0d:58:8c:1c:a0:b6:96:ad:81:26:0d:c1:e5:55:
23:47:71:db:58:e3:77:af:a2:7b:09:fb:22:bf:5e:
a9:ca:49:42:93:b8:ba:4e:13:17:75:a7:e5:9d:aa:
d7:b6:9a:c9:cb:9a:16:9b:2a:0b:a1:9d:5f:56:fb:
de:b1:e2:f6:ac:23:32:e5:d3:8a:cc:60:1d:6c:45:
c3:71:7a:73:f1:89:27:f8:f5:7a:45:60:5d:a6:3d:
84:6a:f1:85:19:fc:42:d0:b6:68:4f:1b:ca:97:a7:
94:d5:f4:9a:f2:46:de:b1:6f:c7:7a:2e:0e:84:ed:
1a:4e:95:66:37:df:e3:2f:a8:62:e7:1e:2e:8f:12:
f7:62:95:f4:4c:12:64:bb:0d:97:3a:b8:bd:a5:7c:
9d:8f:7c:27:64:59:84:f5:41:79:17:78:92:50:97:
f0:59:a4:85:ab:d2:75:e6:4d:9e:c9:0a:27:84:0f:
44:e7:2a:44:a0:a9:a6:2e:1a:d0:76:9e:4c:34:17:
fe:ad:d8:83:ec:7c:da:6d:a8:9e:c1:05:44:4d:92:
09:f7:fd:3f:b7:28:be:0b:b8:d1:36:f3:59:d6:c0:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:3C:12:F1:16:2E:65:94:00:8D:A1:A4:CE:CF:9C:F7:F3:27:4F
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:84:51:48:b1:a1:c8:8a:a6:af:75:a5:d0:ae:b2:f4:82:9b:
c4:52:97:38:e4:f6:72:10:de:cc:d3:3f:67:69:be:a1:fb:82:
2c:9d:1a:a5:93:85:77:16:a7:6a:20:b1:ce:48:99:9b:79:44:
54:32:4f:36:d7:f1:55:f7:8b:ba:27:37:fa:1d:bc:4e:53:f3:
81:67:01:8a:6c:f3:9e:44:4f:34:f4:51:11:2c:0f:98:bc:4d:
2f:30:29:fb:b6:bb:92:b1:35:8d:fd:45:6e:89:fc:eb:d8:eb:
45:c1:80:0b:d8:92:6a:cf:e8:76:83:84:a3:13:81:af:be:51:
40:8d:c1:00:0d:f4:b0:9e:db:88:1e:74:c9:2a:fb:f7:08:b0:
65:f2:bf:ff:fe:ce:d7:88:55:34:fb:70:c0:7c:d4:b7:67:cf:
97:fe:0c:0c:92:b7:b6:67:56:2f:00:e4:fc:bc:30:3a:f9:f7:
b0:29:90:a9:b6:c7:ea:f0:b9:cd:84:2b:0f:ec:20:79:d5:b1:
13:50:77:ff:55:d0:d1:61:98:cc:a1:3d:c7:86:a3:be:4a:99:
08:ee:00:15:f9:12:02:f3:dc:36:35:c8:7f:37:8a:82:8f:19:
a6:7c:a6:d7:39:6b:c9:0d:fc:6a:b2:37:02:ab:7f:6c:7d:c5:
ec:89:48:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD
RUJDREYzQ0IwHhcNMjYwNDA1MDAzOTI4WhcNMjYwNDEyMDAzOTI4WjAYMRYwFAYD
VQQDEw02OWQxYWY0MC0yODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLBwz5iRMByYGYcNbONDW/BCYGf9czGwVEdJz9g8DViMHKC2lq2BJg3B5VUj
R3HbWON3r6J7Cfsiv16pyklCk7i6ThMXdaflnarXtprJy5oWmyoLoZ1fVvveseL2
rCMy5dOKzGAdbEXDcXpz8Ykn+PV6RWBdpj2EavGFGfxC0LZoTxvKl6eU1fSa8kbe
sW/Hei4OhO0aTpVmN9/jL6hi5x4ujxL3YpX0TBJkuw2XOri9pXydj3wnZFmE9UF5
F3iSUJfwWaSFq9J15k2eyQonhA9E5ypEoKmmLhrQdp5MNBf+rdiD7HzabaiewQVE
TZIJ9/0/tyi+C7jRNvNZ1sAFAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCb1PBLx
Fi5llACNoaTOz5z38ydPMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw
NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W
X29oSGpTSFhQamJPdk44OHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXIRRSLGhyIqmr3Wl0K6y9IKbxFKXOOT2chDezNM/Z2m+ofuCLJ0apZOFdxan
aiCxzkiZm3lEVDJPNtfxVfeLuic3+h28TlPzgWcBimzznkRPNPRRESwPmLxNLzAp
+7a7krE1jf1Fbon869jrRcGAC9iSas/odoOEoxOBr75RQI3BAA30sJ7biB50ySr7
9wiwZfK///7O14hVNPtwwHzUt2fPl/4MDJK3tmdWLwDk/LwwOvn3sCmQqbbH6vC5
zYQrD+wgedWxE1B3/1XQ0WGYzKE9x4ajvkqZCO4AFfkSAvPcNjXIfzeKgo8Zpnym
1zlryQ38arI3Aqt/bH3F7IlIsg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client