
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier: H9OPagJtL7wDB0AVvXzUNMs1bjXP1S+ryZOWa8TJF50=
Subject key identifier: 03:01:62:7B:03:DF:6C:08:DF:16:96:4F:02:74:EA:84:FF:45:0B:A3
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer: /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number: 42
Signing time: Mon 03 Aug 2026 10:05:40 +0000
Manifest this update: Mon 03 Aug 2026 10:05:39 +0000
Manifest next update: Mon 10 Aug 2026 10:05:39 +0000
Files and hashes: 1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: E5kR8VmAdPzPtJuJQdgD8NWPT/SOxK/gAAxmr/p9XM4=)
2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 10:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Validity
Not Before: Aug 3 10:05:39 2026 GMT
Not After : Aug 10 10:05:39 2026 GMT
Subject: CN=6a7067f4-b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:1e:fc:15:ea:97:46:4a:db:7e:39:e3:71:
3a:46:3e:6b:fa:83:8e:05:23:49:77:40:25:54:d3:
65:15:af:35:3a:de:ae:f2:95:68:c1:af:dd:95:46:
d1:e3:e4:3b:f3:89:88:98:b0:e5:86:4d:79:3b:34:
c0:09:8b:1b:4f:fe:f2:d8:d3:0a:06:68:c6:d3:c6:
34:61:30:d5:34:74:c9:a9:f9:f7:10:87:b2:00:67:
eb:6e:68:27:d6:2c:62:d6:f2:7b:a7:5e:2a:08:cd:
68:88:af:5f:ec:71:c4:03:ab:c9:7a:8c:98:e3:e0:
40:00:21:74:a8:27:fa:3f:ab:03:ce:a0:4f:2e:df:
dd:e6:b7:73:45:c2:a7:af:d1:ad:a4:23:98:73:39:
b4:6a:d5:29:36:d9:29:e5:1c:45:76:af:80:c3:f8:
13:1f:10:00:2a:3d:75:5a:37:74:b5:2e:52:5d:bb:
12:e6:f3:d4:c9:96:38:33:a3:9a:dc:9e:b6:36:ea:
b2:f4:b3:0c:63:4a:7e:f3:b9:8a:f8:2b:df:1a:37:
94:7b:27:07:90:4e:f9:b2:e9:1c:0a:76:49:2f:32:
29:28:d2:83:78:fa:fd:32:8f:dd:1c:9e:ac:a2:bc:
fe:3e:ed:ef:0d:cb:e2:61:ff:ab:88:5a:67:b2:97:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:62:7B:03:DF:6C:08:DF:16:96:4F:02:74:EA:84:FF:45:0B:A3
X509v3 Authority Key Identifier:
keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:34:ff:88:ad:4b:b7:8d:6b:eb:93:26:59:7d:0a:4e:f8:
25:31:d9:3b:e6:7e:2d:b0:fe:e9:7f:9e:46:4f:07:74:00:cf:
5a:d2:8e:ac:a2:7a:01:c5:21:c6:8f:e2:94:d4:6e:7f:94:d9:
b9:ef:ae:2b:8f:61:4d:cf:db:1c:76:cf:3f:4b:58:62:9a:3c:
e2:8a:b9:cd:5e:a8:38:fe:ae:5b:67:0c:fa:95:b3:11:36:96:
96:29:6b:6a:68:70:97:0b:49:15:3e:e4:93:ee:2d:6d:d5:2a:
48:6b:59:75:4d:71:86:d4:77:cb:07:32:3a:97:c5:15:e3:59:
4d:8f:27:c3:be:bf:1c:4d:f4:aa:e5:22:5f:ec:5e:4c:75:a0:
60:6a:f2:70:83:b6:3e:e8:44:ed:f5:b1:1a:02:0a:df:a1:28:
39:0f:d8:f3:df:f6:9d:37:45:3a:a4:b8:8b:ff:f2:32:64:fd:
c1:ef:d3:38:39:1b:dd:16:f9:9e:c1:45:d2:a7:eb:0b:ce:99:
b6:de:25:41:44:f0:45:fb:20:72:75:51:0a:c0:50:fe:cb:99:
92:22:ef:86:f9:ec:87:33:ca:92:54:e0:f1:2f:04:2b:43:a3:
4f:81:51:68:a4:0e:6f:e9:97:ad:f0:ac:a1:82:9f:a6:57:87:
f6:9d:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:17:40 2026 by rpki-client