
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier: sn9cBqrLWcdEqS8VHOSpUsvV5I60kqg9tJwG5hNJ1EA=
Subject key identifier: 32:20:3F:E9:D9:2F:94:06:26:EE:87:29:B1:7C:90:66:9C:7A:4C:AB
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial: 0F2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number: 0F20
Signing time: Sun 01 Mar 2026 23:32:59 +0000
Manifest this update: Sun 01 Mar 2026 23:32:57 +0000
Manifest next update: Sun 08 Mar 2026 23:32:57 +0000
Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: ZeRCvRw8R+wwNyz1dzQz0bOo08S4YZDOTQU3V7fZGM8=)
2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: vay/YGVV/WsH1QnstajT3hVBCLiNp9w6Bpg2Y+e345U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Validity
Not Before: Mar 1 23:32:57 2026 GMT
Not After : Mar 8 23:32:57 2026 GMT
Subject: CN=69a4ccaa-a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:24:1e:b2:12:dd:74:9d:8b:4d:f1:82:3e:
16:33:5d:fb:27:a3:33:5f:e9:f9:9d:13:6e:98:93:
86:a9:bb:52:72:0a:bf:e4:d3:fb:b3:6c:08:97:2e:
b5:1d:1d:fe:3c:f6:ee:39:f7:fb:8c:d0:6f:3f:df:
31:2b:81:09:c4:e6:12:fd:26:f2:43:1e:ef:d9:f4:
4d:4b:3c:89:ba:e7:43:fb:5b:ec:7a:a4:e0:f9:19:
fb:3d:34:c8:89:96:f6:06:f4:66:73:8e:14:95:62:
7f:54:37:5a:08:83:16:de:ee:fc:1f:c7:36:ad:3c:
70:64:c3:61:3b:e1:eb:9d:2c:1e:d3:d6:4b:81:b0:
9a:6f:56:4b:a1:c3:99:f2:f4:63:34:24:63:e8:ce:
db:bc:0a:75:86:5d:3d:1d:e5:46:7c:ed:3a:d0:20:
2a:cb:1a:20:aa:1d:02:7a:a7:64:32:1b:de:76:39:
1f:c7:1b:e3:88:70:db:e0:b7:0d:ef:a9:44:dd:64:
9f:c8:f7:9e:6f:68:65:0f:f3:1f:24:e9:38:2c:5c:
cc:64:14:4d:08:5c:e8:4b:22:b0:68:70:11:ac:1a:
b8:d2:e9:df:2d:a6:71:1a:46:be:82:54:b6:d4:e0:
f0:d8:0f:d4:d2:03:e7:9a:06:1d:c3:02:db:b7:b1:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:3F:E9:D9:2F:94:06:26:EE:87:29:B1:7C:90:66:9C:7A:4C:AB
X509v3 Authority Key Identifier:
keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:73:84:45:b1:a9:0d:e9:5a:45:55:44:49:cf:35:c4:da:
26:99:be:48:e2:86:38:bb:e2:68:f7:ab:9b:98:eb:aa:77:23:
ac:bb:d2:0d:b9:41:5a:d8:94:d7:55:55:7f:e8:72:c0:a3:77:
f7:d8:55:d3:f5:35:2a:da:ef:e3:1d:f5:2e:e8:20:29:e2:57:
53:ec:6b:8e:e1:aa:82:53:76:52:1a:d3:9d:5e:87:45:5a:0d:
f7:8d:49:13:ee:dd:3f:ee:a1:01:50:43:75:4c:43:2e:37:56:
d7:ac:a2:4b:04:63:0a:41:7c:9d:db:0c:73:9a:93:69:ac:1d:
27:d7:a7:73:b8:99:36:15:4a:ad:23:a3:7d:bc:38:d2:11:f9:
bc:ed:a8:10:41:34:89:c4:5d:1d:44:a2:7f:04:a3:c5:2b:ed:
78:5c:42:02:e4:e5:e0:16:22:0a:e6:49:2c:35:e9:33:d2:a2:
23:3c:15:67:42:47:7f:7d:08:cf:ae:77:20:0b:05:69:59:59:
1d:91:8a:ef:89:30:80:ab:95:71:d7:26:53:c9:81:41:7b:35:
ee:8f:f9:41:3e:a6:fb:23:c0:89:d8:cd:98:e1:01:42:8d:4d:
93:a5:00:d9:b4:e2:98:ec:82:a2:42:c6:5f:f8:19:bd:8b:fd:
86:1e:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:53 2026 by rpki-client