
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: j8LOLBjwTNDCxwZEbPUkPfshoRA7pq9iSsK+tAFEN5w=
Subject key identifier: 2D:73:C2:89:06:AC:5B:40:2F:BA:58:60:51:48:B8:1C:D0:DD:05:B6
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 355E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 3555
Signing time: Mon 22 Jun 2026 14:53:44 +0000
Manifest this update: Mon 22 Jun 2026 14:53:43 +0000
Manifest next update: Mon 29 Jun 2026 14:53:43 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: QDnKbRXUJYiSDtjdaGn/rO6UCl45feR53HcrrE9E8R0=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 14:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Jun 22 14:53:43 2026 GMT
Not After : Jun 29 14:53:43 2026 GMT
Subject: CN=6a394c78-8972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:82:67:95:19:e7:30:8f:b1:09:3b:1c:45:
77:41:ed:fc:f6:5e:00:12:c7:04:16:d7:d3:24:59:
ec:4a:9f:fb:a4:fc:48:d1:f2:ae:2a:fa:74:4c:37:
04:d6:ae:6e:e1:4a:d0:fe:df:af:0b:87:71:43:67:
20:e8:5f:13:2b:5b:9e:56:85:0d:87:94:05:61:c9:
4a:0a:2e:7b:a2:6d:7f:e6:07:07:8b:67:1d:25:82:
91:76:64:45:97:ae:f8:74:3d:55:63:6a:ad:85:1d:
fe:0a:ad:35:da:9e:51:49:ce:73:93:33:1e:66:ad:
be:f9:28:27:e5:d0:a3:1a:49:bd:89:f7:03:c6:75:
62:4b:1f:c2:d3:96:2c:fa:de:2c:38:fa:c5:46:10:
03:fd:86:7e:bf:97:58:fc:9f:a7:03:a7:a4:ed:3b:
e4:71:2d:8c:ed:e6:04:21:d9:49:da:31:6a:27:9d:
da:cc:06:bf:44:6e:21:8a:c2:e4:8a:6c:9a:84:62:
48:c4:5e:40:02:b5:7e:1b:a3:b0:82:2c:62:30:4f:
0d:4e:7a:84:05:e2:bb:73:05:85:e7:3c:ed:35:00:
21:7a:d8:57:ca:1d:7a:b0:64:5b:47:ae:35:75:91:
b9:1a:e4:fc:9c:f0:37:5c:08:fd:94:41:5e:b1:3c:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:73:C2:89:06:AC:5B:40:2F:BA:58:60:51:48:B8:1C:D0:DD:05:B6
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d4:ee:10:76:10:cb:3c:5d:f5:5f:4b:f6:e7:76:7e:8d:af:
49:5d:17:76:d2:f8:4b:36:9c:70:4e:7b:15:8b:83:f2:29:77:
c8:ba:b2:c7:00:bc:5d:94:40:36:df:d5:99:40:59:b3:4a:c9:
20:25:6e:0d:7c:a0:06:c0:84:8f:31:1c:e8:73:fd:e4:23:0d:
43:f9:d6:2d:09:11:be:87:4d:c9:8d:39:d8:6a:20:05:b6:f8:
6d:7b:01:5f:63:86:3d:ef:f4:7d:1b:00:1e:2b:e4:82:c3:fa:
fc:42:eb:ee:a0:b4:fb:fd:f9:2f:54:80:41:2e:1e:13:c3:55:
1e:97:c7:e7:cc:6e:90:74:1a:02:c7:d8:c5:07:4d:6b:c2:29:
e4:eb:cb:f1:39:9d:56:27:83:f8:9a:2c:f6:a4:cc:da:98:f3:
21:9b:98:0a:a1:51:82:97:b2:32:af:ec:1b:05:ad:09:eb:c4:
ba:f0:fc:94:5e:01:74:c6:e6:14:42:83:6f:e9:db:f1:84:bb:
54:7f:86:21:83:d1:73:e9:6c:9c:4f:40:5f:07:2c:e5:a7:78:
b3:4e:fd:6e:15:5c:43:3a:01:98:79:7a:4c:82:c6:92:aa:38:
1e:d6:7a:8f:56:b9:58:95:c5:ec:a5:68:33:bc:98:04:25:ab:
66:53:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:39 2026 by rpki-client