
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
File: 2HXmPHNQjdifas3MBgFEoIwIZtw.mft (raw, json)
Hash identifier: +mGAuoDcHGAOZXthDuwH2wqvA7hemSGgmPWzYcGUJd0=
Subject key identifier: 26:DB:2C:88:6A:86:CE:C8:62:01:B3:97:5A:3E:C1:45:50:C9:DA:47
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Certificate issuer: /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
Manifest number: 04BE
Signing time: Tue 06 Oct 2026 23:58:20 +0000
Manifest this update: Tue 06 Oct 2026 23:58:19 +0000
Manifest next update: Tue 13 Oct 2026 23:58:19 +0000
Files and hashes: 1: 2HXmPHNQjdifas3MBgFEoIwIZtw.crl (hash: PhygQZDgn5+m/wIcvw1GBQYJjKEghxOgRbFMYrXixrw=)
2: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (hash: AYyvUvhzIIzGhGYX6d4zPR5Y9KuZWH0oaRfn5+qDvqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Validity
Not Before: Oct 6 23:58:19 2026 GMT
Not After : Oct 13 23:58:19 2026 GMT
Subject: CN=6ac58b1c-3677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:a9:6b:d5:1e:3a:5e:64:52:27:a2:3c:9c:
c5:97:7e:e9:9e:da:44:f4:3e:4c:62:f9:80:99:03:
cc:52:ee:10:02:55:8c:b3:95:08:ff:16:d6:5d:02:
bb:24:fb:99:64:a7:b8:87:5e:ed:2d:db:1e:d8:cb:
38:83:96:b3:58:e1:d2:b3:d5:f3:1e:87:f8:5b:cd:
44:a8:28:8a:67:f5:fb:5a:52:74:fe:03:b0:22:11:
9b:4b:1b:e4:0b:b6:69:78:8b:93:c2:8d:a2:04:28:
9a:05:3b:13:bf:73:5e:6b:c4:fd:66:1d:9f:55:34:
2e:6e:4b:38:c3:c2:c2:b8:38:e3:ad:67:de:ae:65:
20:3a:ed:93:d7:62:33:e3:e3:ff:96:7f:dc:31:4c:
cf:c4:99:39:90:23:93:4c:01:d2:a0:67:88:8c:58:
01:3d:7d:67:79:b6:08:27:97:4f:21:f7:d9:de:06:
aa:49:8a:55:49:fa:72:74:a9:12:89:f7:22:bb:3a:
c9:9c:84:80:40:e0:c5:57:b3:df:ab:95:a5:92:c9:
b2:6e:35:dc:c6:45:a8:89:02:0d:2e:31:31:b0:42:
a9:f3:a5:85:19:c2:58:2d:fd:ac:a2:5d:7d:28:75:
34:e5:7a:ae:58:44:cd:f7:7c:b1:f8:5d:ac:7d:e4:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:2C:88:6A:86:CE:C8:62:01:B3:97:5A:3E:C1:45:50:C9:DA:47
X509v3 Authority Key Identifier:
keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c5:32:07:9f:73:db:56:ba:3e:bc:54:47:86:e5:6e:d8:02:
4a:2e:1a:c1:ec:83:00:7f:e8:06:6a:f4:f6:ca:9e:39:81:03:
c2:53:23:95:19:3a:95:e6:0f:5b:ac:d2:5e:08:88:09:6c:f5:
01:cc:1b:fc:00:4c:c2:59:36:0f:1f:f9:f9:b2:9e:c2:41:76:
58:43:5b:1f:64:fe:6b:c9:f8:ac:c9:53:9c:90:b7:73:f7:3e:
b8:e1:69:01:aa:a1:54:d9:4c:8b:3c:ab:1d:53:38:e8:75:6a:
f7:f4:20:43:60:4c:1a:e0:41:4f:e9:0f:28:9a:02:87:d6:fc:
eb:cb:90:ef:04:ea:db:f6:33:d1:29:20:84:7b:97:e7:c7:d3:
e9:41:f2:ce:24:9a:13:7b:70:76:cb:b6:7d:09:9a:ee:12:40:
94:c2:3c:90:87:2f:d0:fd:b7:df:1a:9d:a5:0f:42:0c:6a:55:
ec:aa:05:c4:5c:d8:11:03:60:05:b1:00:5f:aa:e6:cf:d8:f1:
f4:cf:19:73:b8:81:90:fa:62:f9:72:36:8e:73:6c:b7:90:5d:
7c:0a:f3:42:a4:7d:70:68:6b:e9:8e:a2:19:b6:51:72:e8:07:
47:ae:bd:26:88:1a:13:4e:48:82:e7:68:76:ad:e2:dc:0e:93:
cf:b4:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:29:18 2026 by rpki-client