
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier: 8uz07ULCUbLAs39fLkjXFldCnGlr5ssyl0Wk/gKHM5o=
Subject key identifier: FC:0B:3C:15:78:1D:5C:D9:15:02:7D:90:9E:AC:BF:EF:AF:D6:04:62
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number: 02A4
Signing time: Wed 07 Oct 2026 02:04:47 +0000
Manifest this update: Wed 07 Oct 2026 02:04:46 +0000
Manifest next update: Wed 14 Oct 2026 02:04:46 +0000
Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: pTl5HgZ7BidWRd/yiF1ErPHq6S1Ir/x55ozD5wfMp9M=)
2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: k3WVwtkl6L7ZLGV3P7GhulqncgzNNGVUWm1IeT8xDNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Validity
Not Before: Oct 7 02:04:46 2026 GMT
Not After : Oct 14 02:04:46 2026 GMT
Subject: CN=6ac5a8bf-9c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:a3:b7:7c:58:1a:63:41:32:7a:eb:b0:12:
26:1d:08:6a:90:59:09:b0:e7:ad:36:e9:d5:ab:89:
3d:bf:5b:4e:d9:e7:f4:36:11:cf:55:b6:34:ab:77:
c3:ab:7e:73:5f:fa:6d:bf:80:12:e2:5a:34:8d:ef:
a1:e7:0c:b8:e0:68:aa:70:c4:74:c0:2f:ba:c2:9f:
d5:13:5a:4e:ce:2a:e8:d7:31:f5:fb:e3:60:98:81:
2a:83:fd:70:85:34:3b:77:b7:40:cf:d0:43:ff:3d:
b7:73:61:96:1b:41:76:67:b2:e8:77:ca:c4:8e:ce:
e1:06:f9:46:f9:bd:fc:bc:f6:4e:45:70:09:09:90:
7a:c4:aa:ad:40:df:96:00:8b:99:2a:39:3b:6b:4c:
61:c0:85:21:c4:6e:cb:fb:e1:15:27:34:f2:0f:ea:
30:4e:e1:93:e3:70:6e:ac:2f:59:06:e8:c9:77:3b:
fd:8b:99:8d:fb:47:93:82:c6:f5:27:44:30:98:b1:
ed:1d:7f:6c:79:45:bf:7b:07:ed:5f:0e:0d:ab:2c:
53:3f:2d:9c:dc:55:b8:15:21:66:26:ac:17:9c:6f:
40:95:f7:8d:91:cf:86:f0:3d:ed:33:78:4f:63:82:
20:12:0c:ce:62:6b:33:4c:60:43:fd:5c:89:b8:9a:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:3C:15:78:1D:5C:D9:15:02:7D:90:9E:AC:BF:EF:AF:D6:04:62
X509v3 Authority Key Identifier:
keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:88:53:6f:1c:49:93:cf:1b:9d:bc:a3:d1:1e:57:ea:ff:53:
3f:27:22:6c:ff:3d:a4:55:c6:3d:ea:3f:c2:49:9c:08:a8:6e:
bc:14:78:48:d1:8b:df:04:04:d0:70:8f:7e:06:e4:dd:cd:bc:
c6:31:3e:7c:22:dc:24:85:ee:12:1c:27:78:57:f8:f7:81:6b:
ac:f3:2a:99:25:52:77:00:7e:db:75:72:e4:77:9a:c4:6d:b7:
a0:12:64:54:f8:0a:a6:c2:b5:ba:d8:79:4a:9c:96:8e:80:f9:
19:ec:e1:07:df:01:60:50:20:4e:05:04:93:00:6d:c5:1b:0f:
7c:56:03:f8:3e:b8:ca:81:1c:cd:e5:52:2e:b9:51:e2:b5:e5:
7a:d0:b6:82:2b:c9:b0:92:95:25:76:6d:55:36:c6:7e:04:96:
bb:81:b6:8e:c2:34:a0:98:b1:40:89:fd:d5:9b:46:4d:df:6c:
63:e6:48:2b:61:db:dd:16:4f:e6:42:40:ee:98:6f:b0:17:df:
5b:db:90:63:a6:e9:79:37:6b:a2:da:ca:3b:12:52:de:8a:33:
69:d6:ae:60:66:ba:e5:9e:21:d5:74:71:e6:95:bd:d3:90:2a:
ec:ed:cc:7f:31:f3:97:81:63:84:e6:a0:73:7c:94:b2:11:9c:
2e:d8:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:43:28 2026 by rpki-client