
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier: XQRhU38F/xTr89OK23fTSEhEDmlIVRUQarSMvFP/Uxk=
Subject key identifier: BF:E5:FD:92:88:3F:04:54:8C:98:7E:DB:53:1A:74:72:DB:E2:1A:1B
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number: 97
Signing time: Sun 01 Mar 2026 08:40:29 +0000
Manifest this update: Sun 01 Mar 2026 08:40:28 +0000
Manifest next update: Sun 08 Mar 2026 08:40:28 +0000
Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: TlChQ/ALXiYKrE6wCH3Bn2Df91Td6Yho/HOoWBvPAJ4=)
2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Validity
Not Before: Mar 1 08:40:28 2026 GMT
Not After : Mar 8 08:40:28 2026 GMT
Subject: CN=69a3fb7d-6342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:bd:94:7a:b2:40:b9:55:31:d4:f2:ac:25:
e5:2f:69:60:66:8c:c8:52:05:5f:af:1e:7a:6c:64:
56:fd:52:43:5f:a3:69:69:ed:89:6c:72:40:40:58:
ca:bf:5c:f1:cd:1b:ce:90:d9:06:6b:6e:b6:f2:1e:
1f:bf:b4:5b:bd:b4:6a:db:95:6b:f2:43:15:5a:e9:
a9:47:d7:e3:ff:de:d7:e4:17:d8:5b:3b:92:0b:4d:
29:92:22:b2:08:73:1e:e2:10:78:c5:e6:99:b9:85:
ba:87:9b:92:a7:b9:4b:27:c5:10:58:d9:87:a9:b1:
14:ac:a0:20:95:63:5b:fd:c1:0f:39:91:b1:eb:fd:
64:02:88:d9:7b:05:10:2c:55:af:99:46:81:a6:c4:
1c:3d:92:7a:38:0f:1b:df:e3:a4:55:95:c4:76:0e:
78:c4:04:82:27:12:1d:cb:33:87:f5:db:04:3f:d6:
2b:bc:c1:42:f6:9d:16:69:43:3d:3a:7a:1d:2a:11:
3c:b2:4e:9c:ba:0a:fc:87:13:0c:7b:25:7c:e6:0d:
3a:3b:50:6d:ea:e2:7e:17:9a:4a:83:cb:e5:47:19:
51:66:c9:fa:15:fc:de:4d:db:46:27:d6:99:60:95:
fa:45:7f:3c:c5:f2:94:52:f8:60:f1:3e:b8:40:cd:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:FD:92:88:3F:04:54:8C:98:7E:DB:53:1A:74:72:DB:E2:1A:1B
X509v3 Authority Key Identifier:
keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f2:b3:ce:7f:39:0f:1d:21:d8:37:b7:27:39:ca:99:d2:e5:
05:59:5e:fc:26:a0:b6:5d:0c:8e:6a:74:da:bb:f9:65:37:ca:
ca:84:6c:06:19:0c:2e:31:76:71:29:77:93:d0:6e:c6:3a:d1:
e1:58:ff:bb:a9:9a:7a:a1:c3:c6:13:93:e9:bd:97:b8:84:ec:
d5:bc:34:66:97:f4:72:45:f8:94:0a:bb:0b:eb:db:be:e0:a7:
43:3b:bb:6d:d5:ca:59:d2:9d:f1:15:7f:b7:a3:ba:f0:49:70:
5d:be:06:c2:61:ec:04:e1:2f:6b:e3:06:0c:ed:22:52:18:53:
28:80:b9:f8:d5:7e:b9:4f:ff:d4:ec:96:f8:90:45:2d:b5:0a:
c0:8b:d9:31:94:54:87:70:d5:c9:b8:0b:3b:d8:d4:64:67:72:
48:86:7b:14:b1:7d:ed:23:1b:17:4d:a5:f8:dd:a6:0e:13:73:
60:27:8e:cd:b3:2c:06:3c:42:a9:23:10:ec:ed:a9:66:08:f9:
91:ef:f5:06:dd:59:83:76:c9:13:92:39:ea:f6:45:21:a1:57:
aa:67:ca:44:ed:99:21:86:0e:d9:f1:54:99:63:c6:6d:86:3b:
90:4c:c8:09:12:8d:93:5c:93:a3:ce:4d:02:32:20:b1:df:df:
00:0d:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:19 2026 by rpki-client