
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: 9WMHQ3BqVMgrFqkqPRpePloM5vehMhRRsLZqAa3k1co=
Subject key identifier: 95:A4:27:8E:AB:55:2C:D1:F2:1F:C4:00:87:89:D3:88:D6:30:9C:50
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 0260
Signing time: Sun 25 Oct 2026 02:43:56 +0000
Manifest this update: Sun 25 Oct 2026 02:43:55 +0000
Manifest next update: Sun 01 Nov 2026 02:43:55 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: 8pP/2k+wzncOKc1rQtxy1ys9qxhX5luVVUpVx88oovc=)
2: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
3: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Oct 25 02:43:55 2026 GMT
Not After : Nov 1 02:43:55 2026 GMT
Subject: CN=6add6cec-c9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:d0:0e:0f:dd:ab:c6:2f:67:a2:ff:5b:03:
69:2d:f6:86:3e:06:ab:d4:6b:51:b6:20:97:89:9c:
da:d3:28:d8:66:78:95:7f:37:6d:74:69:68:6e:f7:
20:6b:f9:35:54:7e:db:21:cc:a8:1c:aa:f8:df:bd:
c6:e5:15:f5:d2:1b:e2:0b:31:68:86:56:45:01:ee:
f1:aa:95:2e:d3:a2:2f:1a:c6:23:7c:f9:88:1a:92:
59:7c:a8:57:5b:47:05:be:3f:ce:b2:98:2e:fb:60:
b0:f3:f7:27:95:5f:23:97:29:1a:30:98:c4:45:2a:
80:91:9a:04:26:0f:0e:ef:42:54:df:66:d8:94:d1:
2c:4f:df:73:a5:57:6f:cd:66:eb:0c:e1:70:63:0f:
4c:7b:33:99:21:b6:3c:66:56:ad:95:ef:e8:8e:54:
1f:4b:ac:d7:c8:a8:5b:ce:0b:bc:84:3c:e1:ca:45:
e0:8e:d8:96:97:df:0e:07:ee:60:1e:e3:02:46:fd:
2b:4f:0c:c8:31:2f:c6:a2:d1:88:9c:ac:b9:d9:32:
e9:55:ce:74:cc:db:44:be:cd:17:0b:8a:36:06:5d:
78:93:8d:02:1c:e7:cd:0d:cc:38:8b:9c:7d:82:89:
9d:8e:80:c3:af:3a:58:32:19:18:e2:f2:a8:11:cf:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:27:8E:AB:55:2C:D1:F2:1F:C4:00:87:89:D3:88:D6:30:9C:50
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:5c:99:78:df:0e:17:b6:ce:58:9a:98:c0:24:3c:9c:02:
83:89:0e:35:f5:c5:85:65:5c:5a:be:9b:97:4c:de:aa:ae:d8:
02:ae:84:68:28:20:9b:f7:89:78:04:c3:89:67:ed:4a:8b:e8:
a7:ff:92:b9:94:3c:9a:a3:a2:13:34:1b:66:c1:11:af:37:a9:
47:e0:22:26:4c:d4:75:20:8e:fc:e0:59:d1:1d:e8:a5:48:8f:
29:cc:53:c9:00:07:a5:df:e4:2a:a6:d0:d0:64:f9:62:86:42:
40:fa:2f:32:1a:59:11:b9:43:37:7a:2b:35:b2:1f:49:b7:0a:
e3:cc:e0:b4:cc:98:dc:70:2b:35:d8:31:17:bf:a1:cf:99:6a:
dc:83:4e:d7:8e:04:c3:44:af:fb:f4:1f:09:fa:c1:49:78:92:
2e:30:3c:01:b3:f1:56:a4:b9:3f:81:3d:71:e2:79:c1:0b:ad:
6c:06:a6:d4:6d:2e:5b:16:2e:b0:1e:57:d2:6b:75:5f:be:62:
4b:05:79:af:0a:d9:77:fb:ef:49:ab:e7:42:81:aa:86:76:e0:
cb:86:32:6c:1b:5a:4c:b9:d5:36:6d:37:b8:41:40:29:56:41:
65:1c:cb:b4:84:4b:93:50:10:83:9e:06:55:16:0a:97:c2:2c:
97:fa:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:57:23 2026 by rpki-client