
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json)
Hash identifier: Lub8BpoSxXhT4q3DQKxgUovwELIX1ZkScwaIou8CgDs=
Subject key identifier: 0D:72:97:02:BC:E3:4E:6F:36:B0:21:3E:9E:AA:8F:EC:56:8F:58:84
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
Manifest number: 0279
Signing time: Fri 17 Apr 2026 01:45:07 +0000
Manifest this update: Fri 17 Apr 2026 01:45:06 +0000
Manifest next update: Fri 24 Apr 2026 01:45:06 +0000
Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: yFgLATZMVb+nf55oWh+yBN4nQPqE0mWiDhi2FEICuG8=)
2: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=)
3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=)
4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Validity
Not Before: Apr 17 01:45:06 2026 GMT
Not After : Apr 24 01:45:06 2026 GMT
Subject: CN=69e190a2-7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:aa:e7:17:26:d1:20:87:33:7c:3e:95:e7:
1f:2b:83:05:1f:d3:8a:dd:0d:de:e8:19:2a:13:44:
31:53:5c:f1:67:2d:e0:0f:1e:11:a0:5a:88:ea:69:
81:bd:94:f0:d7:08:25:88:eb:d4:14:0e:41:14:e6:
c2:61:94:81:13:d9:36:e7:e3:4c:24:31:01:37:f1:
0b:5a:c9:51:ad:38:c4:9f:3e:97:1f:f9:36:2d:5c:
6a:27:c4:19:9e:4b:78:54:2f:b6:fd:b4:b4:54:53:
3e:fa:02:a3:ea:7e:57:4b:ed:32:ec:4b:db:91:fb:
50:76:cc:7e:a1:f6:eb:d5:d5:3a:04:c4:b6:cb:1c:
8c:ea:cf:94:f5:d8:24:fe:1f:fc:1c:e7:d3:99:53:
98:a1:f1:f1:d0:d0:ed:24:28:3b:77:14:f9:84:a2:
2a:b0:ae:52:12:e4:19:ba:8f:a5:e5:6d:aa:c7:40:
b3:80:f1:43:a5:68:7c:2e:e1:0f:ee:81:59:39:87:
f7:c1:40:e5:c5:6d:df:a9:ea:1f:4d:6c:e4:b0:02:
3c:4f:3d:8e:4e:e6:4f:1e:d2:ff:31:fa:5e:87:82:
6b:19:6f:1c:f9:ef:cf:e9:a6:89:65:59:8f:78:ec:
c3:ad:66:9f:51:d8:5c:1b:45:6e:15:b9:fb:0c:b0:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:97:02:BC:E3:4E:6F:36:B0:21:3E:9E:AA:8F:EC:56:8F:58:84
X509v3 Authority Key Identifier:
keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3d:67:77:55:63:59:a0:48:e3:0c:6c:3b:4f:86:bd:4e:45:
7e:3b:d7:44:ed:e2:d2:3e:62:5d:79:06:5d:64:75:aa:3c:fe:
48:d7:7d:db:d2:47:41:b8:58:7b:06:1e:fc:eb:ff:c2:19:8b:
11:26:4b:d5:a2:b6:19:a3:36:a3:ac:e1:13:42:98:c8:b2:51:
62:44:8e:0f:13:17:6f:52:1d:c1:09:65:41:7a:80:ce:02:2d:
ed:21:e7:3a:c2:f5:a5:16:5b:2b:f3:f7:bc:21:62:6b:b2:02:
b0:b5:97:ca:66:6c:af:d3:81:72:aa:1a:52:28:b0:de:8c:a3:
74:42:42:ba:88:81:bf:4e:a7:94:62:f8:1e:86:d5:d4:c2:1e:
06:ba:ce:ac:d6:08:83:19:fa:23:51:e9:05:10:7e:47:f1:17:
e4:7c:8f:52:e9:71:80:9b:d1:55:b7:eb:07:f8:f8:0e:8b:0a:
e5:0c:da:04:8e:49:9d:69:ba:fc:a2:fd:fc:07:7b:04:f5:2d:
4c:39:f2:ea:3b:2e:19:85:fa:10:eb:ae:c6:5d:89:35:84:3e:
ac:d6:5e:29:24:b1:9c:6b:36:14:d0:b3:a6:1a:8b:a9:5e:f9:
9a:f6:bf:df:77:f4:cc:b0:91:2a:36:ec:46:59:c9:33:ad:13:
81:f1:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:32 2026 by rpki-client