
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json)
Hash identifier: 5XHKPAKOsSzX/UfS/5Y9vDmgqCiW8FtxmoYiMxW9pjM=
Subject key identifier: FB:EF:F9:AD:BB:70:E2:25:7D:88:29:B3:98:46:E9:64:89:E7:47:D4
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
Manifest number: 0295
Signing time: Sat 13 Jun 2026 01:45:02 +0000
Manifest this update: Sat 13 Jun 2026 01:45:01 +0000
Manifest next update: Sat 20 Jun 2026 01:45:01 +0000
Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: 5Ze6rnVzTLJzgPkkVbaobuwrF8oTF1vhgcnTD7ml+ws=)
2: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=)
3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=)
4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Validity
Not Before: Jun 13 01:45:01 2026 GMT
Not After : Jun 20 01:45:01 2026 GMT
Subject: CN=6a2cb61e-6584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:eb:81:d3:fd:f1:f2:59:d8:41:d0:19:e5:
83:d7:f4:6d:69:1d:14:48:58:3d:1d:7c:74:06:8c:
78:60:be:ca:a5:3d:05:c5:bf:e9:e3:76:c9:33:18:
bb:ae:78:60:09:4e:c7:ce:d8:e2:df:2b:03:f2:3b:
14:e8:37:7e:fd:ec:03:8e:13:b3:0a:b3:a3:16:75:
2b:3a:c9:b2:01:f6:3f:e4:ea:f7:b2:ce:f4:14:a8:
9f:02:c8:3e:8a:2a:bd:52:b7:5e:f4:9f:4e:7e:9f:
56:77:61:e6:6f:e1:68:13:19:ee:db:0f:5c:bb:2e:
1d:8f:0b:86:d8:7f:e6:10:73:39:9f:f1:1f:93:cf:
f4:5a:31:c5:8f:7f:09:68:02:4a:d4:00:cc:6d:1b:
35:df:92:e0:38:dd:3f:ab:32:54:f0:40:e9:5d:5a:
1c:e5:7e:ee:8c:f5:31:2b:a8:de:4b:a7:3c:0b:1d:
26:68:0e:c7:53:59:a1:6e:88:da:37:0d:32:4c:19:
3d:93:b8:08:c7:40:80:f8:c8:df:b3:a8:90:60:56:
c1:e8:58:52:4a:84:a2:a6:64:d9:c5:20:c2:c9:b6:
e7:6f:9f:20:5b:4b:51:1c:c1:49:66:93:4c:60:22:
63:38:5e:db:2a:a1:38:6c:4e:f5:0e:23:3e:28:40:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:F9:AD:BB:70:E2:25:7D:88:29:B3:98:46:E9:64:89:E7:47:D4
X509v3 Authority Key Identifier:
keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:fa:72:05:8e:cd:e9:ff:b0:95:c0:5e:e8:84:88:f6:b2:a2:
48:27:9e:ba:24:3f:ea:49:da:d9:1d:07:15:c3:15:6d:19:3e:
01:8c:41:54:db:24:d3:d7:73:2f:95:de:c2:b6:63:5c:95:65:
d5:08:75:3e:43:68:bb:9a:9c:4d:94:12:7b:37:aa:da:c3:27:
d3:eb:18:a7:6a:c2:60:30:32:9a:c6:96:7a:d2:46:d3:ee:8b:
e9:69:85:79:c4:d7:28:2c:67:9f:1d:88:6c:77:52:57:f7:85:
da:11:56:e9:16:7b:49:e3:e5:2f:b5:ff:7e:ab:95:f4:00:71:
c3:6f:64:f7:46:52:05:be:63:d6:78:f9:1a:a0:7d:4f:8b:7f:
6b:bc:05:08:e1:04:aa:de:a2:89:2f:4e:55:85:55:53:49:e4:
6d:e2:c7:1d:72:49:fa:a0:a1:9f:ab:6e:40:ec:2b:67:7b:25:
6f:ca:98:47:72:0d:aa:b3:bb:6b:4d:59:0f:62:e3:54:9b:94:
43:13:ac:57:d8:d5:49:56:e5:b3:84:8c:b1:7c:4f:43:90:4d:
33:75:64:8c:8e:2a:85:b2:6d:f1:e7:a2:38:b8:e3:6c:cd:e2:
13:c6:f6:ff:6a:76:05:a2:e8:9d:d0:e2:83:85:0c:28:91:44:
c0:03:13:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:27 2026 by rpki-client