
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier: Qc2RfHkOcnQoXoBEegTx9vFwC7pVdp3PRszUhJNVx8I=
Subject key identifier: E2:D6:8C:47:91:22:B4:FF:D4:EC:CF:6F:22:41:BC:7E:6A:C2:EA:56
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number: AE
Signing time: Mon 13 Jul 2026 02:23:28 +0000
Manifest this update: Mon 13 Jul 2026 02:23:27 +0000
Manifest next update: Mon 20 Jul 2026 02:23:27 +0000
Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: o0hNTO2szjNbEnaEtDSe2R9Rb3BCbtH8NM2JEre9rHk=)
2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 02:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Validity
Not Before: Jul 13 02:23:27 2026 GMT
Not After : Jul 20 02:23:27 2026 GMT
Subject: CN=6a544c1f-4393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:f9:27:8a:0a:a5:91:18:77:f8:dd:f4:b7:
17:c9:cb:f9:07:e2:4e:45:9f:1f:4f:e6:77:88:7a:
9c:35:7d:01:36:a4:db:33:75:c3:13:0e:63:05:df:
0b:55:21:0e:6c:4e:6f:f2:32:63:58:65:06:f1:df:
f9:68:4e:8a:76:f2:31:63:75:bb:81:bb:b3:17:ed:
89:62:92:6f:67:d6:16:7f:69:1f:58:a1:6f:cb:d5:
25:68:b7:d7:d5:1a:0a:0a:f5:9f:9c:43:ea:ca:11:
89:60:6c:30:0d:1e:5f:90:d8:27:ae:57:73:c3:c8:
16:69:05:27:f8:44:a2:3d:77:6e:3f:dd:81:e3:72:
e5:17:ca:62:f7:4e:1c:c7:fd:f2:e5:1c:56:da:05:
01:00:2b:d7:1d:ef:3a:53:f6:a1:1c:b5:26:07:55:
1c:ff:1e:90:e0:f4:7a:3a:43:eb:c8:7f:29:5b:f8:
d3:f5:fd:b0:ed:8d:ed:f0:50:25:9a:66:f3:1a:9e:
ed:86:a3:21:d8:14:5e:4f:34:3c:63:ea:7e:d4:71:
b3:99:d3:2f:97:cc:16:24:57:35:09:fd:9e:07:b3:
f5:3c:15:6c:a2:03:51:68:14:02:c8:93:06:f6:62:
af:10:a6:d7:1d:03:82:65:9d:55:c9:3e:0b:1c:8f:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:8C:47:91:22:B4:FF:D4:EC:CF:6F:22:41:BC:7E:6A:C2:EA:56
X509v3 Authority Key Identifier:
keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:52:3e:87:47:92:c5:a3:07:80:91:df:e5:56:7c:52:bd:db:
a5:2c:b2:3b:19:c7:c0:26:3a:52:6b:87:16:45:96:e3:a0:95:
85:b0:6f:aa:c7:2b:26:cd:c9:a3:83:51:ef:ad:27:44:75:88:
2b:aa:47:0e:6d:63:c7:16:96:59:0d:23:5b:27:05:25:1c:1b:
8e:73:f4:53:df:43:5c:ab:ea:4c:31:11:b7:d5:4d:b0:6f:ac:
5a:d2:b4:f2:a0:aa:58:04:92:85:e5:d2:8a:75:b2:3f:3f:55:
18:58:b0:20:2e:e9:c4:a0:00:96:de:31:9a:67:c1:53:67:de:
2c:51:e8:42:d8:03:44:21:f3:e7:b7:c4:6c:0a:b7:42:b2:98:
06:03:b7:cd:20:99:8b:91:fd:70:9e:ea:e0:f7:13:47:25:d0:
98:fb:67:31:2a:c1:b4:33:5a:1e:5f:d3:06:62:90:0b:fb:45:
52:bd:85:f7:0a:eb:48:3a:f1:64:c0:12:bd:78:e2:3f:60:9b:
74:f6:02:25:d6:64:86:24:13:00:f8:2b:40:5d:a7:a4:84:d0:
d2:20:9e:ba:98:46:c1:aa:9f:80:c3:99:56:f7:8a:c5:00:c8:
fa:56:9b:6b:79:4b:d3:c1:86:34:6b:51:38:3d:7e:7c:f0:75:
16:62:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:35:04 2026 by rpki-client