
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier: WNpdod7ybm8DoVgjjIg1GCoOQJbf7umJWov0/WKoquo=
Subject key identifier: 90:E2:FA:F6:EB:95:7D:C9:F9:3D:04:27:04:80:26:DB:E0:83:47:8A
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number: 0238
Signing time: Thu 03 Sep 2026 02:53:22 +0000
Manifest this update: Thu 03 Sep 2026 02:53:22 +0000
Manifest next update: Thu 10 Sep 2026 02:53:22 +0000
Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: hNCFBiMpTKCMhpirBya4niVsRJ29Ws+YCx06oqiN7VQ=)
2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
3: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
4: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Sep 3 02:53:22 2026 GMT
Not After : Sep 10 02:53:22 2026 GMT
Subject: CN=6a98e122-c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9a:08:dc:74:6c:b8:ec:76:64:1d:75:ad:a7:
4f:03:c5:b0:df:57:46:42:04:83:74:ae:d2:c8:9c:
90:a6:20:e9:95:88:42:20:91:c1:2c:00:cc:1a:d5:
5d:fe:e7:83:13:ea:70:8f:75:1a:9d:7b:ee:60:eb:
ff:b2:86:e4:fc:ae:69:5a:20:14:85:fc:72:79:de:
6b:d5:25:87:01:d4:15:f7:c4:a2:1f:ba:63:c9:d7:
c6:99:79:e6:63:7e:4c:c4:74:42:ba:62:a3:b0:ec:
94:cc:05:2f:60:a3:b2:38:fb:69:fe:43:ce:f8:b9:
cf:cf:0f:18:2b:36:32:cf:95:62:ed:af:42:b2:38:
3c:99:32:35:48:15:6d:da:bc:25:3c:89:71:09:c7:
d7:b1:96:51:25:86:64:a0:13:36:af:61:33:b8:35:
e2:84:9e:9f:23:99:d2:f2:7c:60:dd:c1:88:d9:13:
4c:46:5c:43:88:7c:13:d3:cb:b7:ed:35:31:1e:76:
1d:62:4a:39:83:97:e3:09:39:e4:95:fb:f7:9b:f3:
81:a6:31:cd:20:fd:98:27:09:d2:45:2a:01:8c:71:
b1:33:6c:df:cb:70:2c:df:30:b1:42:0a:f5:1c:8a:
ec:26:ec:4e:3b:51:b5:97:19:a4:55:bd:93:b5:44:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:FA:F6:EB:95:7D:C9:F9:3D:04:27:04:80:26:DB:E0:83:47:8A
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:0c:a5:ae:2d:df:7d:05:70:33:7e:e5:59:68:33:5e:e2:
91:b3:3c:33:55:57:bb:53:02:f1:05:bb:41:82:56:db:0f:0c:
86:4a:3a:16:da:7c:7d:28:bf:ab:6d:07:c9:b9:80:08:83:e0:
33:92:4f:46:d2:10:3f:50:36:bd:12:74:0d:cf:72:53:21:2d:
78:8b:e9:e2:9c:e4:11:8c:7e:d3:7a:99:42:d4:96:5d:cf:6b:
6e:c1:5e:f8:87:03:20:04:9b:af:92:76:4c:76:d5:68:6b:2f:
09:4b:86:18:12:34:c7:f2:3c:d9:67:0b:ff:76:13:15:dc:ef:
ce:f9:ef:b3:ea:9c:ed:da:d4:4c:be:29:76:f5:77:da:77:f2:
59:58:f1:06:f6:60:ad:ac:54:57:b9:43:99:15:1e:be:eb:bb:
e6:cf:bf:df:9f:b4:15:c0:be:61:48:9f:40:df:f9:d4:26:7e:
eb:cd:54:d5:9f:35:f6:4b:d0:84:7a:9c:e6:12:d1:cf:97:dd:
bd:52:a4:59:5b:d6:10:20:fa:44:e8:ee:ec:e6:d7:88:89:1f:
b3:14:de:b0:60:17:f9:4c:cf:de:f8:35:13:13:65:50:b8:d9:
c6:e8:df:1b:51:0f:73:cc:0e:b4:61:27:40:97:fd:b3:3b:39:
47:19:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:41:55 2026 by rpki-client