
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: JJpaKVqObhMRzcDY5f14vbX65tfUc2NPb1DpwVEFUdU=
Subject key identifier: 46:A9:78:77:EB:81:E2:89:A2:1A:29:AF:84:DD:E6:41:20:CF:A3:AE
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 03AB
Signing time: Wed 19 Aug 2026 01:00:33 +0000
Manifest this update: Wed 19 Aug 2026 01:00:32 +0000
Manifest next update: Wed 26 Aug 2026 01:00:32 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: CfbTVin5PQolCeiVyk1vCSrrkTo1R2xc/YS2o4DvCNk=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Aug 19 01:00:32 2026 GMT
Not After : Aug 26 01:00:32 2026 GMT
Subject: CN=6a850030-f66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:b9:9f:22:ae:17:ca:2b:4e:3f:04:08:29:
e2:4e:2c:46:94:98:e7:45:7e:76:e4:ac:d3:30:8e:
6c:46:6d:65:eb:96:03:f7:95:d4:c1:b1:d4:f2:9b:
ee:9f:f6:7e:3c:46:90:de:82:d6:f4:21:ff:c9:33:
b7:bf:dc:cf:04:96:75:90:d3:ac:7b:73:e7:28:91:
ea:0b:03:3c:1f:4d:41:c7:7f:8a:da:b4:af:df:e9:
ed:33:13:a1:de:e1:76:44:3b:0b:10:c5:cd:2a:d1:
76:c8:78:9c:ac:f5:64:c3:e0:94:d3:e6:60:74:38:
87:9a:8a:87:8e:ea:49:df:e9:8f:bc:dc:42:73:72:
22:1c:07:1a:05:6e:41:a8:eb:01:15:42:f6:d9:77:
a4:03:6b:cc:b4:ab:a5:0a:c4:b1:37:c8:aa:ae:79:
06:0b:98:be:3e:1e:10:e6:ae:58:48:94:5c:8a:fc:
25:7a:39:6c:b3:1c:aa:76:af:f7:1e:45:a0:71:85:
a8:72:d4:cb:75:6d:b3:b8:8a:22:92:50:b3:f7:a1:
84:b1:45:54:57:04:d7:2a:22:31:e8:65:07:e0:de:
cd:e6:ba:2a:20:86:ab:d4:a6:9f:80:92:9a:1d:c9:
d7:ed:a2:d7:e3:a2:7d:64:79:2b:a7:39:cd:1a:82:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:78:77:EB:81:E2:89:A2:1A:29:AF:84:DD:E6:41:20:CF:A3:AE
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:1e:2b:24:fb:d1:e4:08:7f:db:25:3b:4c:72:fe:8c:81:
d0:22:6a:82:0a:06:d0:41:ef:6a:22:2a:5d:b3:4a:a8:7c:cd:
ec:e6:50:86:1a:02:db:ea:84:65:f3:39:b7:f3:ee:cf:64:16:
fb:fe:af:61:b0:30:cf:fd:1d:1f:78:d6:64:01:6a:38:ae:97:
e2:78:59:17:b6:a6:8f:9e:69:d6:27:77:8e:b2:f9:2f:fe:93:
bf:6a:f0:e2:38:b7:99:69:12:6e:dc:b4:fa:15:fc:74:74:9c:
ae:79:af:29:4b:fc:4d:56:b4:0f:b8:bd:62:c9:c0:1b:d4:5b:
f1:b7:6b:a4:e2:7e:83:96:87:8e:2e:3d:bf:a0:2b:3e:b1:10:
6a:05:3b:20:c0:3e:47:71:e2:b9:4e:27:c5:b1:fc:52:f8:82:
88:62:8f:5c:79:ba:84:91:e8:77:01:d4:ea:51:36:dd:40:a5:
40:0c:8a:4b:30:06:a9:a5:3a:5b:28:e9:1a:81:da:9e:33:a5:
61:54:fe:09:91:af:36:82:e1:4b:d6:69:79:ef:ef:9e:c6:cc:
4d:d1:fe:6f:7b:be:8a:cb:10:92:c1:76:65:1f:34:fd:98:8b:
78:b2:b2:fe:16:d2:7a:b0:45:38:74:53:60:77:49:f5:56:8f:
1b:3c:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:46 2026 by rpki-client