
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier: nLBB610cqlBfiBmqSGgEd2Efi2SVsmImEf2dOAJLp8U=
Subject key identifier: 44:54:8D:DC:C1:15:A1:1F:28:BC:39:79:6A:8E:AD:E1:F1:A4:2C:19
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number: 02FD
Signing time: Fri 17 Jul 2026 01:53:52 +0000
Manifest this update: Fri 17 Jul 2026 01:53:52 +0000
Manifest next update: Fri 24 Jul 2026 01:53:52 +0000
Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: y8rrEWJTahEFdSwC8GlGFatqSgT2vnS2R7IUOOOF+1o=)
2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=)
3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=)
4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Validity
Not Before: Jul 17 01:53:52 2026 GMT
Not After : Jul 24 01:53:52 2026 GMT
Subject: CN=6a598b30-e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:a7:e2:2a:c0:e4:c3:32:86:5b:13:3a:03:
7b:df:19:b7:6c:4b:ce:cb:eb:65:e4:56:6d:77:46:
d4:55:d2:72:35:a1:c8:8f:d2:15:b5:d6:f2:34:d2:
73:c0:31:9b:fb:91:e1:45:9d:92:5b:f0:bf:b0:9f:
28:d8:ba:f7:9f:3e:84:12:3e:d9:d5:53:b8:2e:e9:
b2:ab:67:a0:b4:01:91:d2:16:01:83:6f:53:f5:67:
9f:5e:a8:87:00:e7:ca:3a:e4:66:e4:b4:ff:7a:57:
79:06:e6:b3:d6:3a:dd:6a:39:37:3c:06:80:bb:0d:
95:c6:ba:2c:e4:c6:2e:29:01:e6:bc:49:25:b6:5e:
f5:e9:44:5b:af:0c:2a:96:10:36:7e:91:0d:ed:ae:
83:e2:1b:77:ff:3f:84:49:33:7e:a4:62:3c:ee:98:
a1:31:4e:58:22:f0:1e:04:1c:24:9a:38:72:02:2c:
19:99:0b:f3:df:28:81:19:97:d2:8e:dd:9c:aa:28:
5c:77:7b:26:38:b1:b2:7c:89:80:74:e1:d6:01:45:
2b:f6:06:0e:d9:99:8d:30:e8:b0:b1:d0:3d:03:d4:
da:d7:05:2e:41:7d:1a:28:a4:08:b6:e0:67:45:fa:
37:4a:af:f9:cd:97:9d:e2:46:98:d9:03:14:c2:be:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:8D:DC:C1:15:A1:1F:28:BC:39:79:6A:8E:AD:E1:F1:A4:2C:19
X509v3 Authority Key Identifier:
keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6c:42:33:83:5d:68:91:86:97:99:dd:11:98:23:57:87:75:
58:28:ae:66:f1:01:61:8d:84:cc:6e:4b:0c:fb:62:99:d1:f2:
12:9f:a5:6f:7a:7d:92:f9:c6:53:00:0e:a1:03:68:fa:a1:64:
df:e2:f3:a0:14:a0:b0:d4:d4:70:03:77:6f:04:49:3a:19:26:
2d:93:24:5a:93:d5:75:a4:bb:d8:e3:bd:e0:05:9d:5e:2c:c0:
c3:8c:35:e9:02:f9:ed:01:7f:6a:05:d4:87:0b:f4:7a:7e:e8:
ef:0f:ff:b2:56:28:f7:0e:f7:09:9c:02:16:5b:27:eb:43:c8:
c7:02:39:55:1f:17:14:84:1c:35:5c:65:6a:77:73:8d:1d:23:
2e:0c:b0:86:a4:f6:46:fc:ef:8a:5c:a8:8e:50:f9:d5:80:1d:
59:44:f5:81:61:f2:18:b8:3e:4c:96:0d:92:69:a0:ec:ed:c4:
6b:c1:b1:1a:60:dd:75:4f:0b:6d:c7:90:30:1b:ab:76:f3:5b:
a7:1c:d6:dc:99:44:04:44:cf:bc:13:64:87:a1:db:cf:d6:9a:
8e:ca:9e:2f:22:a4:41:5e:b8:1a:8c:18:e8:aa:0f:d8:af:a8:
6c:b0:35:22:a0:bf:c6:b2:4f:ec:0f:33:34:ab:f0:78:b9:d6:
27:c2:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:21 2026 by rpki-client