
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier: /12+Ii58dxT5TEuvB4v2M1gam8oE6blJ7CS9wY4MdyY=
Subject key identifier: E4:44:28:60:8A:90:FF:DA:44:52:61:3F:9A:FE:57:12:C3:16:A2:DA
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number: 72
Signing time: Fri 17 Jul 2026 09:12:52 +0000
Manifest this update: Fri 17 Jul 2026 09:12:52 +0000
Manifest next update: Fri 24 Jul 2026 09:12:52 +0000
Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: 1yrLf0/bimLqRgRrDs+yb8+uK95HZdv7v5bzWqgtVM8=)
2: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=)
3: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Validity
Not Before: Jul 17 09:12:52 2026 GMT
Not After : Jul 24 09:12:52 2026 GMT
Subject: CN=6a59f214-8bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:09:05:05:8a:18:b1:75:3e:a8:8f:34:fd:
6c:ac:85:e2:1b:f6:f7:23:34:a4:8f:2d:3e:88:e3:
d6:c6:6e:41:4d:7f:59:08:17:43:c6:26:b0:c6:15:
0a:3e:2d:e4:cd:dd:20:30:cc:9e:9b:4a:21:e0:6c:
5a:26:0a:79:4b:2c:fa:d9:ca:35:11:a3:cb:a1:8e:
34:4b:ad:c5:9f:f3:71:1e:38:4e:fe:92:01:46:2b:
78:06:e4:29:6c:69:82:28:08:88:84:3e:27:4a:8e:
fb:04:66:d9:83:9b:93:be:dc:31:36:0b:84:91:8b:
77:89:fa:3a:f9:62:54:41:19:34:88:96:48:55:a6:
00:d8:22:89:1d:b0:53:f5:b9:b9:2c:b6:48:92:0f:
b8:44:87:46:6c:0d:06:a1:97:75:67:53:64:49:5d:
33:fa:09:81:e7:e7:76:3e:e0:23:3b:cb:0e:77:13:
52:88:03:3f:28:77:36:d1:ea:8e:12:55:2f:c6:4e:
ee:31:75:0c:48:1a:4c:22:f0:05:4e:fc:62:81:48:
50:cb:78:cc:52:20:b7:97:9e:c1:5b:b9:11:eb:51:
b4:cc:d6:82:46:09:d4:ee:a4:e3:87:9f:95:20:22:
78:bf:0a:a9:a1:0d:d9:0d:01:f6:3f:ec:75:67:34:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:28:60:8A:90:FF:DA:44:52:61:3F:9A:FE:57:12:C3:16:A2:DA
X509v3 Authority Key Identifier:
keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:de:b4:0b:8e:12:9f:4d:b9:48:a5:4e:a0:05:4e:25:c9:2d:
41:88:fb:fc:66:a0:aa:e5:49:6c:d7:75:8c:15:46:89:b8:f4:
fe:f9:e0:c0:aa:81:8a:9f:e7:93:b6:d6:9a:75:f3:8f:78:4c:
f4:5b:78:bd:5e:13:eb:00:e7:14:ff:f2:a5:34:80:14:77:a7:
ce:bb:35:1e:d5:30:ab:a1:a8:82:eb:e1:90:d9:4d:22:aa:ec:
57:fb:d3:fa:cb:08:49:fe:35:61:bf:56:70:da:1b:17:fe:d0:
6c:c9:d3:69:81:12:05:e9:6b:55:a0:e7:83:60:6b:f4:42:2e:
5c:51:76:55:b9:94:0d:47:a6:08:67:73:1b:8d:e3:09:dd:b3:
5a:43:57:42:62:2f:4d:4c:1e:7c:e5:e9:f6:8e:4c:7e:37:90:
b3:c8:f5:c5:58:b0:d3:bd:67:c0:73:59:81:de:1f:9d:56:2b:
32:c7:42:86:cf:e5:a7:02:01:6f:9d:7d:bc:04:c5:f6:32:42:
f7:74:c0:eb:17:47:a3:d5:ec:cf:69:6f:0f:b5:e2:99:53:11:
19:9f:9a:8b:f6:c2:8f:38:25:92:f0:ab:01:d8:24:c0:9a:d4:
b4:ca:e8:8d:06:32:aa:0f:4f:67:55:62:20:4b:62:a8:f3:78:
87:34:85:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz
MkNENDdBNjAeFw0yNjA3MTcwOTEyNTJaFw0yNjA3MjQwOTEyNTJaMBgxFjAUBgNV
BAMTDTZhNTlmMjE0LThiYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRSAkFBYoYsXU+qI80/WysheIb9vcjNKSPLT6I49bGbkFNf1kIF0PGJrDGFQo+
LeTN3SAwzJ6bSiHgbFomCnlLLPrZyjURo8uhjjRLrcWf83EeOE7+kgFGK3gG5Cls
aYIoCIiEPidKjvsEZtmDm5O+3DE2C4SRi3eJ+jr5YlRBGTSIlkhVpgDYIokdsFP1
ubkstkiSD7hEh0ZsDQahl3VnU2RJXTP6CYHn53Y+4CM7yw53E1KIAz8odzbR6o4S
VS/GTu4xdQxIGkwi8AVO/GKBSFDLeMxSILeXnsFbuRHrUbTM1oJGCdTupOOHn5Ug
Ini/CqmhDdkNAfY/7HVnNItjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5EQoYIqQ
/9pEUmE/mv5XEsMWotowHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0
NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
RThFLzQ5Qzc3NDg4RTE0NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05
MmlOdGQzZlFaWlRMTlI2WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA93rQLjhKfTblIpU6gBU4lyS1BiPv8ZqCq5Uls13WMFUaJuPT++eDAqoGKn+eT
ttaadfOPeEz0W3i9XhPrAOcU//KlNIAUd6fOuzUe1TCroaiC6+GQ2U0iquxX+9P6
ywhJ/jVhv1Zw2hsX/tBsydNpgRIF6WtVoOeDYGv0Qi5cUXZVuZQNR6YIZ3MbjeMJ
3bNaQ1dCYi9NTB585en2jkx+N5CzyPXFWLDTvWfAc1mB3h+dVisyx0KGz+WnAgFv
nX28BMX2MkL3dMDrF0ej1ezPaW8PteKZUxEZn5qL9sKPOCWS8KsB2CTAmtS0yuiN
BjKqD09nVWIgS2Ko83iHNIWr
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:16 2026 by rpki-client