
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json)
Hash identifier: w/P4thwI2VAv5tKg1IJXtdDHSqucWXwkcRGf858eXEg=
Subject key identifier: 4C:64:B2:3C:46:7B:ED:96:E2:EE:0F:FB:22:7D:EC:0C:EE:67:04:F8
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial: 0A8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
Manifest number: 0A83
Signing time: Mon 22 Jun 2026 20:23:11 +0000
Manifest this update: Mon 22 Jun 2026 20:23:10 +0000
Manifest next update: Mon 29 Jun 2026 20:23:10 +0000
Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: onzXEhq6iEvAToO6UCgbayzZYWLM/Q7OcCzYg04JON0=)
2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: gfXrnN3jQkJVV0wj646OBjzyC1W/Dpnz2lbxL1Z1Wig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Validity
Not Before: Jun 22 20:23:10 2026 GMT
Not After : Jun 29 20:23:10 2026 GMT
Subject: CN=6a3999af-2edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:3f:64:7f:7a:3e:2c:fc:4c:3b:63:8e:eb:
7f:96:03:86:c3:26:1d:d1:ff:09:71:54:3b:2f:59:
83:09:7d:07:8d:9e:f9:70:bf:17:c6:15:8e:e0:7e:
68:4a:13:19:43:76:6b:67:f5:f4:7a:13:9b:fe:06:
bf:41:94:4a:99:79:32:89:7d:7b:f7:d4:7d:62:14:
c7:0a:ff:c2:05:7d:b0:d5:5d:54:01:7f:0e:ad:63:
8b:6d:b1:95:ba:c4:64:42:93:3f:23:14:7c:09:db:
15:a7:93:07:2d:f7:d1:05:3b:9c:8b:65:e3:0e:dd:
ee:c5:26:7e:60:aa:6f:a0:70:06:73:ed:14:8c:c5:
e1:94:7f:0c:4d:f2:de:8b:86:7a:d6:e7:2b:12:69:
a4:89:ed:70:27:2a:53:10:29:4e:81:fb:78:d2:80:
09:2d:e9:12:e2:04:c9:9d:54:d0:95:dc:5a:dc:15:
ab:ad:7d:b0:01:0a:5b:71:33:c6:b4:6d:29:6e:19:
e9:c3:44:2c:b2:be:1f:95:13:5c:7d:c0:8d:fa:ff:
87:28:b5:fd:c8:b5:0f:00:36:33:91:f7:b1:57:7f:
71:21:99:22:e5:50:b6:97:e8:52:93:d5:31:7e:91:
71:c6:36:6e:a6:d0:1f:2d:ae:3b:04:20:45:de:d5:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:B2:3C:46:7B:ED:96:E2:EE:0F:FB:22:7D:EC:0C:EE:67:04:F8
X509v3 Authority Key Identifier:
keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:6d:28:4d:4c:74:2c:b9:68:8e:8e:a1:79:73:8e:48:e2:
73:db:e7:da:72:36:a9:6d:26:03:ec:56:4c:b3:0b:3e:75:ed:
eb:b5:f7:22:40:17:6f:1f:5c:b7:7a:af:aa:7d:1d:8b:27:5a:
6f:51:0c:bc:d9:25:54:79:04:5b:32:28:16:78:5b:62:91:ca:
45:fc:0d:d4:e7:16:b1:5f:85:ea:a9:ab:05:7f:b6:e7:3f:53:
c4:2a:7c:4e:7c:67:d2:1b:9b:a3:e5:dd:f4:22:2b:7c:a7:ac:
1e:81:29:bc:87:52:7b:2e:a8:e2:3a:ec:0f:23:d6:39:46:7b:
a7:95:72:94:fd:16:ee:e0:d6:aa:32:09:dc:92:ef:a9:59:a6:
2a:dd:87:16:a8:97:01:4c:ef:97:24:d7:15:f8:8a:21:d1:ec:
24:ea:4e:b5:87:56:12:98:e4:ce:c4:41:cd:dd:bc:96:0c:1f:
62:4b:c6:5a:2a:0e:48:2a:f4:cf:bc:c3:77:4f:a2:19:c2:be:
f7:41:f8:9c:e6:f5:cc:47:05:4d:68:82:16:86:ea:09:bf:27:
cd:f4:08:9b:a4:81:d3:10:3c:00:92:5d:c2:e4:2b:3f:05:43:
17:c8:68:2b:ba:7b:8c:0c:37:b1:42:11:62:a8:6e:d5:2d:ba:
b0:07:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:38:46 2026 by rpki-client