
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json)
Hash identifier: 396U4RTZVAMYKbRdAUNsS2YtBGlp7yZygXOFi0LRFSY=
Subject key identifier: 6E:EE:3F:EE:12:C5:14:CA:FE:97:E3:C3:6D:0F:A1:33:7E:3B:3C:7F
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial: 0AAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
Manifest number: 0AA0
Signing time: Tue 18 Aug 2026 19:49:26 +0000
Manifest this update: Tue 18 Aug 2026 19:49:25 +0000
Manifest next update: Tue 25 Aug 2026 19:49:25 +0000
Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: yPkL3qgQO8Tlh4SvBRHUgjXGyveJ8rHvzg9nSGNGTH4=)
2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: gfXrnN3jQkJVV0wj646OBjzyC1W/Dpnz2lbxL1Z1Wig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2730 (0xaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Validity
Not Before: Aug 18 19:49:25 2026 GMT
Not After : Aug 25 19:49:25 2026 GMT
Subject: CN=6a84b746-a160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:e5:20:14:7f:ad:fc:69:89:58:87:1a:a9:
32:de:24:4d:2f:f1:73:ed:e8:87:d4:ac:78:5a:0c:
36:cb:e7:a3:ed:d2:20:28:68:15:dc:dc:25:1e:ac:
c6:b4:8f:75:09:52:a7:94:bb:13:7c:6a:3f:6e:fc:
92:da:5d:2d:4b:5c:cd:73:2b:94:73:a5:77:b1:10:
ed:e5:6e:f5:5b:ac:e7:f7:f6:38:a2:9e:f5:5b:1a:
20:72:c7:32:27:20:50:14:63:06:60:3c:7b:1b:42:
6c:45:83:7f:b0:59:3e:ad:2f:19:58:83:70:65:5c:
89:9e:ef:72:fe:25:fc:bf:67:c8:50:f0:fd:f5:d7:
7c:4e:bf:31:cb:45:3d:0c:58:21:a3:1e:ca:34:c1:
f6:88:45:99:7a:b4:1e:57:02:3f:ad:d3:2d:db:42:
18:4d:81:2f:e0:cf:64:5b:64:87:a3:7f:c9:4e:ab:
d6:a8:67:fb:b2:db:31:d0:2d:f7:d5:be:f0:8c:24:
3b:3e:75:dc:67:f4:88:c1:83:5b:87:4c:fe:65:86:
fc:c5:7f:49:4d:35:fc:7f:c4:ad:b5:02:8f:66:f8:
63:ff:61:d1:e6:74:96:e1:8e:15:f0:64:c1:e0:1f:
77:74:29:23:5c:a2:56:4b:c5:06:c0:87:93:65:d2:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EE:3F:EE:12:C5:14:CA:FE:97:E3:C3:6D:0F:A1:33:7E:3B:3C:7F
X509v3 Authority Key Identifier:
keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:54:ae:c9:f4:cd:e9:9f:7a:92:1e:7c:80:7f:aa:b0:cf:
f2:18:48:b1:20:c9:7f:51:be:ed:3e:67:17:6d:ae:c0:33:72:
54:cc:2b:45:67:f8:f7:26:8b:d6:98:51:3f:4e:31:a3:ec:61:
8c:59:12:d1:4b:a6:4b:30:32:94:74:2d:ae:ee:fa:bd:a2:1a:
7a:a7:2c:bb:7e:82:78:22:dc:40:d9:15:a3:fe:75:27:ed:8c:
15:9d:29:bd:33:19:bc:87:cd:cb:38:3d:7a:27:83:40:08:67:
f8:df:34:9e:68:fa:f0:e2:de:41:7b:a1:73:ca:30:96:4c:24:
a4:55:e3:c2:3b:44:a0:5e:b8:4c:cd:52:6a:8b:e3:05:a6:d8:
82:2b:78:7f:55:32:f5:6c:ec:bb:3f:84:4d:00:eb:24:93:77:
9a:35:2f:bd:fe:66:7c:d1:1c:6b:23:5b:ea:78:1a:06:9e:bb:
a3:bf:3c:20:6b:c8:c9:13:3f:82:83:8d:d9:1c:9e:f0:65:ab:
32:ce:9b:44:8a:99:b9:9b:ee:6e:14:56:bf:a0:f6:51:61:c5:
56:16:cf:03:72:4d:75:ac:7c:81:d9:eb:04:01:8c:96:86:53:
77:1c:18:fa:aa:65:ca:e4:1b:2e:bd:67:68:09:d7:7d:b4:aa:
ae:6e:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:39 2026 by rpki-client