
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: Hh7m7Ucv1tpLHcbpmBVROEkJ6x4xIQyCknBf5sF8LQw=
Subject key identifier: 4C:EF:B4:46:26:1E:D3:A1:76:39:CF:81:9B:7C:39:B1:67:C9:02:33
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 025B
Signing time: Mon 25 May 2026 02:14:24 +0000
Manifest this update: Mon 25 May 2026 02:14:23 +0000
Manifest next update: Mon 01 Jun 2026 02:14:23 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: oJpDGoCZ43c9iOA0V38qvJylhXPpKzC1LYinSddJFSc=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 01 Jun 2026 02:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: May 25 02:14:23 2026 GMT
Not After : Jun 1 02:14:23 2026 GMT
Subject: CN=6a13b080-5bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:54:f6:f0:94:54:46:c0:70:6c:8d:61:ac:
44:7e:e6:87:84:aa:22:f9:44:cf:45:d8:fc:0f:80:
f4:1c:37:fa:9f:4d:b1:54:fd:38:a4:65:47:34:6f:
2c:0c:06:22:d7:81:ff:67:a3:b0:72:d1:2e:21:d8:
30:05:89:a4:b8:8f:ed:a2:bf:32:76:d1:81:84:d0:
6b:e5:88:c1:c9:3b:e3:4c:0c:dd:f2:40:6a:37:46:
2e:81:99:fe:49:e9:d0:47:91:1c:af:f3:6a:6c:fb:
be:53:de:c9:22:21:94:64:99:fc:c8:0c:24:ad:ac:
ef:52:2f:d7:1f:ae:a9:54:a7:0b:aa:59:65:23:d0:
cb:4f:b6:d7:62:2d:a6:ca:50:66:fe:3b:80:8f:59:
46:d4:d9:4e:75:49:d0:98:94:cd:5a:15:58:3b:40:
54:dd:85:29:2e:21:4e:92:ec:35:df:bd:9f:56:0f:
c1:95:c8:77:1b:d2:4d:0b:70:7a:6f:1f:8c:f2:99:
3c:20:1d:02:03:41:15:ac:b4:4f:7c:4e:4d:33:2b:
e1:50:5b:9f:5a:5b:6f:fb:e5:c0:f3:a0:a9:1f:4d:
47:3d:20:82:0d:72:5b:58:90:27:45:13:00:38:33:
9d:32:78:54:52:a9:96:f9:2e:bc:4c:8a:27:48:a4:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:B4:46:26:1E:D3:A1:76:39:CF:81:9B:7C:39:B1:67:C9:02:33
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:09:91:e4:9d:d5:27:bf:b4:5d:2f:5e:2d:cb:5c:4b:af:0b:
e2:30:03:fb:22:74:56:bd:a2:3e:64:ed:78:ae:c3:df:ab:1f:
49:91:9b:ca:42:60:49:4f:80:f4:da:6c:86:39:0e:c6:40:81:
59:9b:fb:06:20:d7:7e:58:88:1d:0f:7e:f5:d2:9b:7e:18:0a:
33:86:b1:46:fb:c3:8a:80:ac:15:18:13:14:17:97:60:3c:2d:
b5:7b:26:38:b3:97:6c:62:94:20:f8:35:e7:e7:fd:86:fc:c1:
72:14:b7:8e:a1:67:1b:76:3e:52:6d:0a:d8:a6:06:2b:23:fc:
18:d3:28:69:ef:c7:58:60:67:4f:23:e3:8a:01:8b:38:b5:0e:
dd:eb:f0:20:f2:f9:d4:4f:7c:e3:51:85:89:68:eb:2e:17:33:
57:28:db:67:29:f7:7f:3a:1e:9e:af:4c:2c:e2:91:4c:ed:9c:
a2:72:2f:c0:6f:85:89:ac:f5:e2:71:e6:e8:01:3f:26:44:7c:
da:10:b1:81:04:8e:6a:64:bf:80:fa:85:ee:5b:25:3b:e9:bb:
76:e4:9a:cb:06:ba:24:8d:5d:28:03:e1:3f:b6:11:08:dc:23:
da:69:a6:b4:01:5b:7e:25:bb:99:c9:a2:6e:ef:2b:b0:f2:c3:
80:b9:65:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4
MkYxNDVBNEEwHhcNMjYwNTI1MDIxNDIzWhcNMjYwNjAxMDIxNDIzWjAYMRYwFAYD
VQQDEw02YTEzYjA4MC01YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4b1U9vCUVEbAcGyNYaxEfuaHhKoi+UTPRdj8D4D0HDf6n02xVP04pGVHNG8s
DAYi14H/Z6OwctEuIdgwBYmkuI/tor8ydtGBhNBr5YjByTvjTAzd8kBqN0YugZn+
SenQR5Ecr/NqbPu+U97JIiGUZJn8yAwkrazvUi/XH66pVKcLqlllI9DLT7bXYi2m
ylBm/juAj1lG1NlOdUnQmJTNWhVYO0BU3YUpLiFOkuw1372fVg/Blch3G9JNC3B6
bx+M8pk8IB0CA0EVrLRPfE5NMyvhUFufWltv++XA86CpH01HPSCCDXJbWJAnRRMA
ODOdMnhUUqmW+S68TIonSKT+eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzvtEYm
HtOhdjnPgZt8ObFnyQIzMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy
M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4
ay00M0lRMTNNOUtDOFVXa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWwmR5J3VJ7+0XS9eLctcS68L4jAD+yJ0Vr2iPmTteK7D36sfSZGbykJgSU+A
9NpshjkOxkCBWZv7BiDXfliIHQ9+9dKbfhgKM4axRvvDioCsFRgTFBeXYDwttXsm
OLOXbGKUIPg15+f9hvzBchS3jqFnG3Y+Um0K2KYGKyP8GNMoae/HWGBnTyPjigGL
OLUO3evwIPL51E9841GFiWjrLhczVyjbZyn3fzoenq9MLOKRTO2conIvwG+Fiaz1
4nHm6AE/JkR82hCxgQSOamS/gPqF7lslO+m7duSaywa6JI1dKAPhP7YRCNwj2mmm
tAFbfiW7mcmibu8rsPLDgLllUg==
-----END CERTIFICATE-----
Generated at Tue May 26 01:35:46 2026 by rpki-client