
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier: 7HsUcpmhy46vaw3CBgZxWR2uhH5HPsr+q3kIcEsCs00=
Subject key identifier: B4:6B:A3:4A:37:1E:18:FF:24:24:8D:ED:12:34:02:4F:9B:DC:DE:BA
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number: 020A
Signing time: Fri 05 Jun 2026 03:23:37 +0000
Manifest this update: Fri 05 Jun 2026 03:23:37 +0000
Manifest next update: Fri 12 Jun 2026 03:23:37 +0000
Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: hLPozj82zG/GgzQl775B9IGwVcdJTk/kFgeVpBrNwa4=)
2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
3: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 03:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Jun 5 03:23:37 2026 GMT
Not After : Jun 12 03:23:37 2026 GMT
Subject: CN=6a224139-25ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:e8:3f:9b:75:cc:e6:56:92:5a:e8:4f:8a:
f3:6d:84:0f:c9:2a:31:7b:62:ba:cf:19:8a:c9:3a:
38:57:6f:44:0a:17:40:b4:12:f3:bb:21:14:5e:6d:
08:37:d8:80:85:38:5d:95:cd:2e:fb:81:a1:14:c1:
1b:94:0a:93:e5:8d:fd:70:dc:97:6f:9f:6b:09:dc:
94:4d:2f:19:0b:e5:15:3e:88:83:91:92:48:d2:07:
e1:f6:4b:67:fa:d5:e6:a2:e4:8c:7d:9d:d1:6f:a2:
c6:d7:2e:59:33:f9:fe:7e:45:ce:d9:96:b7:30:07:
f0:d4:fd:90:83:f0:9e:e3:9a:1f:94:43:bd:c2:9a:
24:98:bd:37:57:99:85:15:50:b1:0d:92:c6:b9:6e:
a4:43:d6:eb:4e:b8:fe:12:27:c9:10:60:0d:19:43:
f7:ca:c1:34:36:0d:ac:98:5c:a5:40:94:91:c6:6b:
a0:8c:7d:34:88:ab:91:50:4c:ac:b0:6f:a2:fb:c5:
0c:4f:99:40:b1:88:0f:f1:1e:60:51:f4:84:d9:8b:
d8:e8:75:28:79:db:80:0a:db:08:4a:f2:70:6e:62:
68:62:ec:f9:7a:c8:eb:35:40:97:d5:d4:df:89:9f:
e0:6e:21:83:b7:ce:97:1a:b7:61:63:e8:dd:18:c4:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6B:A3:4A:37:1E:18:FF:24:24:8D:ED:12:34:02:4F:9B:DC:DE:BA
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:56:5f:e9:c5:74:eb:13:09:3d:f2:18:80:3f:17:10:87:78:
9a:40:02:13:b3:1f:22:1f:76:ef:d2:6d:30:2e:b2:ae:6b:9e:
cb:5e:8c:9a:7d:73:06:ea:7e:fd:b5:e5:0f:30:2f:ed:88:8b:
a0:bb:95:94:d9:26:aa:39:e7:87:56:31:20:4e:9f:8a:61:0f:
83:21:29:4e:0d:e0:ee:cb:2b:5e:24:64:9e:f2:19:b9:55:2e:
5e:5b:ed:aa:58:57:43:1b:cc:4e:02:5e:31:9f:c5:18:bb:34:
f8:c7:25:85:98:eb:63:fc:30:9c:0c:ac:45:d1:15:33:62:fd:
fa:ab:5f:ae:5a:2e:2b:aa:7e:a8:c1:b9:69:84:ef:af:ec:4a:
98:8a:47:9a:ca:ea:5f:bb:8a:a5:cc:61:87:d7:7c:fb:26:66:
66:22:38:2c:b5:d9:df:54:4d:4f:22:20:07:62:29:9e:a2:c6:
e5:23:30:cf:1b:81:40:42:69:83:4b:da:89:5c:9f:c1:9b:8b:
90:bf:28:ea:a4:45:d5:98:46:5e:d3:19:66:bf:bc:09:72:25:
54:1c:c3:a0:1e:68:21:2f:5b:af:7d:42:77:3c:26:38:7b:a1:
ef:86:ec:34:d4:7d:4b:1d:10:a8:0e:b0:b9:49:40:f4:76:e0:
75:4d:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:25 2026 by rpki-client