
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier: 8dc2FTwQbP+W+NNGHDKcy3ez08ZR9qsBoBMxQloGBMg=
Subject key identifier: 52:B2:C0:D7:17:A6:E9:31:C1:61:9B:C8:72:E7:E4:63:F8:0A:85:82
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0785
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number: 0719
Signing time: Mon 02 Mar 2026 00:43:12 +0000
Manifest this update: Mon 02 Mar 2026 00:43:10 +0000
Manifest next update: Mon 09 Mar 2026 00:43:10 +0000
Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: B90dUi5JIcXODbt2Ua0OQpoJXb1Kru3DbT2xhimoHDk=)
2: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: NOaVU4q5vDhTCfS8D0magdRbNPsrNEg2xYPHqGcyq74=)
3: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: UCc+DbJCpOApyDxFAfgaNwfGqcYO0Lw+1K3uPVDAppM=)
4: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: Om4qQKnR/ADlcoIytwUPeq9RDFGoVRvj56Lkmeu3bys=)
5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: VorX/TcJnMctyKf1znFoq4UgSn2F6EKq1vU97sOrAnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Validity
Not Before: Mar 2 00:43:10 2026 GMT
Not After : Mar 9 00:43:10 2026 GMT
Subject: CN=69a4dd20-46a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:03:1c:d9:45:0a:96:ae:c6:87:c9:5c:27:
48:2e:75:af:a8:cf:64:4d:33:23:4e:b1:26:42:0e:
f7:55:3d:91:22:f2:bf:ae:21:12:98:0b:f3:35:90:
a9:88:64:e9:72:14:d6:47:b0:61:66:b3:32:c3:76:
bf:07:1c:66:d8:f4:6a:b6:fa:16:be:b7:bc:41:a4:
f0:1c:cd:e4:5f:44:65:0e:72:15:c4:7e:11:f1:c1:
8a:c8:25:88:85:d3:84:24:a7:6e:53:20:c4:02:cf:
8b:71:aa:36:dc:03:51:f3:bd:36:77:e9:51:6a:c9:
2c:06:ce:f0:eb:50:35:38:b0:ab:f7:af:46:82:44:
f2:1d:69:8e:c6:a1:9c:e4:60:40:1a:da:c6:98:92:
9c:b9:06:03:82:d7:12:8f:d3:f3:29:4c:97:44:32:
c9:82:e5:fc:d3:50:c2:cb:c9:c1:f7:e4:dd:3d:e0:
8f:82:dc:8f:67:35:46:ae:c2:60:64:d0:5d:c0:d8:
58:51:cb:35:e6:14:61:eb:e0:3c:b3:a2:62:44:ac:
9e:5a:a9:27:39:e3:c0:65:fc:21:43:78:3d:89:63:
39:e9:33:7e:35:31:7b:f1:b1:51:dd:f1:f2:b8:ae:
18:e3:db:80:a8:39:dc:d7:3f:df:00:7d:6e:04:f3:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:C0:D7:17:A6:E9:31:C1:61:9B:C8:72:E7:E4:63:F8:0A:85:82
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:33:02:6b:2e:e3:9f:d3:57:c5:c4:77:e8:16:73:04:12:
50:96:8e:20:bb:dd:ce:92:fa:93:e9:bf:8e:3f:cc:2b:6d:35:
13:fc:21:42:ef:06:3d:03:60:bf:56:7a:14:79:28:73:5c:a4:
73:5a:54:bd:19:3a:54:0f:b4:73:4a:9a:22:ac:82:c3:4a:c9:
9b:e1:77:33:17:37:d0:a7:de:0a:77:da:4a:3d:ca:d7:33:dc:
28:a8:08:25:6f:68:ca:3b:82:c3:c1:a7:00:00:20:47:98:cc:
86:ca:92:55:bc:7c:02:2c:67:1c:20:24:0b:28:ef:12:61:e1:
ec:ed:5b:18:fb:ea:4e:91:97:b0:e4:21:3b:e8:fc:1d:c1:18:
ab:17:cd:d0:0d:7c:ea:0e:33:96:0d:0b:3a:ef:8c:9c:01:7f:
b9:38:8c:d0:2d:3b:ee:82:46:13:58:5e:52:06:c8:57:c1:3f:
7b:1b:d7:d1:fa:2b:d6:d8:fa:25:dd:3a:e6:ea:bf:bc:aa:4a:
41:88:d3:65:9f:a7:84:03:56:a5:36:aa:aa:35:a7:6b:7f:9d:
18:ba:71:bf:f6:22:5d:61:a7:f4:a6:bf:01:41:b8:25:7d:1d:
3b:f8:df:a2:18:75:69:88:61:c7:a9:90:52:9a:5e:b1:5f:50:
93:92:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:43 2026 by rpki-client