
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier: RkW7JJDqXER0igIYervH+LBVm6e7w1KuqvUZpxt1WVs=
Subject key identifier: EC:6D:DA:5F:54:85:50:A7:EB:54:7A:B7:8B:77:94:30:E7:66:77:0E
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number: 03F7
Signing time: Sun 25 Oct 2026 00:24:14 +0000
Manifest this update: Sun 25 Oct 2026 00:24:14 +0000
Manifest next update: Sun 01 Nov 2026 00:24:14 +0000
Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: dJqOYioMN9rcr9UdaKgt20ZbAJtzPOlrNmn0+ukrvXE=)
2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: avd1BRD3UmGj21dyPoHC4i5mdB/6dCsth0FrDgLd998=)
3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: Tl//mlJpb2VMGBb+QtBeeHRCi1hlUkdF28Hoha7r34U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Validity
Not Before: Oct 25 00:24:14 2026 GMT
Not After : Nov 1 00:24:14 2026 GMT
Subject: CN=6add4c2e-fb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:ca:c0:cf:6d:ef:5a:26:e5:ad:3e:ff:e5:
56:02:d8:e1:f7:c5:06:f6:fe:69:e9:ff:13:5a:52:
93:0d:8a:63:db:21:9f:4c:0c:62:6f:e0:1e:91:05:
29:93:71:33:59:af:98:e4:f6:a7:08:cc:c4:88:c8:
6b:42:59:8b:a8:08:ff:ee:13:c5:17:f7:18:96:76:
09:84:2c:ba:52:d0:86:3a:f7:ee:cb:33:8a:8d:bd:
19:28:73:e5:08:13:f5:c4:95:e1:46:ce:d0:66:0e:
66:8f:3f:2c:43:48:4c:d2:63:80:54:50:b9:af:8f:
6c:00:8a:80:e4:aa:4e:56:94:92:66:82:6b:71:90:
70:e9:5c:47:43:ec:90:0e:71:ad:d1:6e:b6:38:e4:
84:01:40:e3:3e:a4:14:5c:42:db:ae:7a:0f:2e:3c:
98:86:a6:e5:66:a4:1a:75:3d:62:c3:f4:24:54:58:
6c:d0:1d:58:58:30:4f:bf:8d:d5:c5:d7:c3:c8:c4:
10:23:08:96:a4:b0:b3:04:c2:97:ad:4c:fe:2d:8b:
22:90:40:47:e0:60:43:55:87:2d:95:7f:14:af:91:
99:87:c5:1a:6b:d7:cc:8f:7e:bb:1d:43:6c:38:e0:
15:e1:39:3f:86:d8:35:fa:22:0e:97:44:20:72:35:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:DA:5F:54:85:50:A7:EB:54:7A:B7:8B:77:94:30:E7:66:77:0E
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:2c:e2:94:69:98:71:61:0d:a3:6e:f1:ad:88:ee:76:78:2a:
5d:5d:04:92:5d:65:9a:2f:12:36:9a:b5:bf:99:24:e5:cc:58:
87:49:f1:ea:0c:26:5d:d1:0d:5f:15:84:14:0f:3d:27:74:01:
f2:e9:b0:82:7f:7b:9d:c1:6e:59:0d:c6:be:1b:d8:dd:aa:49:
55:6b:5f:25:1b:7c:01:bd:ba:8c:3a:84:46:0b:d3:9f:92:c6:
02:23:38:1c:a7:12:8d:1d:ce:6a:b4:1c:3a:08:53:e2:00:15:
80:41:4b:7c:fb:60:69:ca:32:4a:b4:b6:54:60:11:6c:cb:aa:
dd:a0:87:90:9e:31:aa:3a:3b:98:bb:04:2d:a0:71:db:bd:5e:
93:fa:35:f6:4a:eb:14:4c:45:fa:a5:3d:66:d7:88:fd:eb:d6:
13:37:8f:c3:7f:aa:9f:19:f2:94:f2:83:46:79:cd:c1:1e:da:
9e:55:a5:2b:a5:90:c6:0e:99:67:74:82:f6:6b:5d:6f:01:ed:
8f:9a:f5:de:89:4b:7e:1f:78:64:82:c5:11:80:83:ce:99:a4:
ec:98:99:7d:32:37:f9:81:4a:56:9a:63:29:1e:10:2b:f5:9d:
fc:6d:0e:4f:70:db:1b:fb:30:5b:9d:c4:59:8d:8d:8e:c2:b9:
ad:0f:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:27:55 2026 by rpki-client