
$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier: jg2MwMW8cNSg8qAT2rbAHnc8polfQCm2uDrpo4OLJEc=
Subject key identifier: C8:9E:04:F0:4A:40:F5:6A:90:6B:E8:BA:BF:DC:8F:28:05:76:32:3A
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial: 06A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number: 069A
Signing time: Mon 02 Mar 2026 02:28:53 +0000
Manifest this update: Mon 02 Mar 2026 02:28:51 +0000
Manifest next update: Mon 09 Mar 2026 02:28:51 +0000
Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: 6lr+R+ZeFhms1QXiIAP/Z8LfQMEB2A/KjBpxbFyNJqU=)
2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: CJxCZ91gQ/TkNwvCeFeEgqG0eXQ29QCZ4qulq2Vzv/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Validity
Not Before: Mar 2 02:28:51 2026 GMT
Not After : Mar 9 02:28:51 2026 GMT
Subject: CN=69a4f5e5-c224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:5a:5d:d9:b8:63:53:c4:d3:f0:ca:cb:06:
cc:05:c4:dd:78:2e:f2:c3:64:0f:7a:55:0a:af:d6:
c9:80:ac:1f:58:69:88:53:f5:70:b2:63:3e:00:93:
98:0d:bc:6c:ae:f9:b3:31:81:c5:28:4c:3e:2a:f9:
10:ee:11:f2:bc:40:c7:4e:6a:c6:5b:2d:3a:f6:52:
ad:71:7a:46:bc:c2:f6:a1:f2:35:da:e8:63:82:3d:
eb:ac:f4:d3:90:25:44:b6:05:e0:8e:fa:03:70:aa:
9a:a2:ff:53:44:cd:d7:11:26:d6:d4:72:d0:51:82:
f9:45:d6:7f:c1:f0:6c:0a:f1:99:f9:0a:0a:5b:36:
9d:c8:2a:8b:d1:99:89:67:40:bc:ba:28:cc:1e:25:
70:23:13:71:12:71:6d:9a:70:d8:92:20:4b:d4:4d:
4c:cd:44:69:c3:a1:2a:a6:a2:9a:1c:8a:f0:b1:79:
b6:66:d8:03:30:53:5b:fd:9b:a3:73:b2:18:a6:e5:
5c:60:52:26:7e:91:fc:d5:2a:09:0d:6e:0c:b2:12:
a4:f2:0d:58:ce:83:6e:91:20:d4:b0:f4:f5:f0:d9:
21:b3:0c:f2:45:b8:fa:85:e7:4e:32:33:6b:a5:13:
e5:40:78:6d:70:17:ce:67:7d:bd:e5:2d:fa:ff:6f:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:04:F0:4A:40:F5:6A:90:6B:E8:BA:BF:DC:8F:28:05:76:32:3A
X509v3 Authority Key Identifier:
keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:a3:06:41:cb:07:02:4f:d2:54:b5:bf:4d:9c:13:ec:fa:
a9:77:51:8a:8c:78:67:f1:85:92:21:e6:64:75:ce:92:58:8e:
7f:e3:05:a9:c1:a6:5c:e5:9a:20:54:8a:1b:29:bd:ca:1b:62:
be:c7:4d:14:9d:bf:ea:44:e7:1a:8a:8b:2a:81:72:ed:56:21:
7e:6f:da:9c:95:61:a8:95:2d:91:e3:2d:15:b5:fd:8d:3b:57:
30:a0:96:48:8b:92:2b:0b:33:4a:bf:35:6a:2e:52:ae:fc:bc:
90:f8:61:50:ad:87:93:10:04:4f:b1:fa:fb:60:07:c0:da:25:
a5:58:7f:14:ca:19:44:4a:89:54:14:b2:56:a7:25:3f:63:58:
84:f7:bc:73:00:70:58:d6:c8:26:b6:64:cf:05:66:55:fd:83:
52:b4:65:f0:80:9e:23:15:fa:86:a4:50:e5:71:34:ef:72:15:
3e:de:1d:4f:2a:26:86:40:3f:82:6e:77:2d:8e:06:19:69:e3:
3b:ca:8e:2a:21:2e:cb:2c:df:a9:69:71:cb:dc:bb:fd:3f:8f:
f2:4e:88:b7:4c:81:46:83:bf:bf:d3:a2:ec:bc:2f:57:01:05:
77:fb:9a:00:49:0a:aa:19:f1:da:dc:d3:61:de:4b:04:98:81:
3b:85:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:06 2026 by rpki-client