
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier: RTDkQiUyAY3mD/50owkyNtB9S/AduUXd/WMpmnYMuOs=
Subject key identifier: 23:00:DE:32:D1:8A:F7:01:EA:1C:33:44:A4:B3:6B:D5:14:B4:01:D0
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number: AF
Signing time: Fri 17 Apr 2026 06:49:08 +0000
Manifest this update: Fri 17 Apr 2026 06:49:08 +0000
Manifest next update: Fri 24 Apr 2026 06:49:08 +0000
Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: HbYpTzGRBEz2nbQZLSHR9vymkC6Xl+tlNsx48SGCx5E=)
2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Validity
Not Before: Apr 17 06:49:08 2026 GMT
Not After : Apr 24 06:49:08 2026 GMT
Subject: CN=69e1d7e4-857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c3:4e:de:fb:77:6f:df:b0:3b:01:12:c2:e9:
3b:45:f9:fc:f8:f2:b1:ba:8e:27:c8:fa:c0:a9:a9:
57:6d:ef:ea:0f:3c:21:45:b1:73:77:5c:a8:52:31:
4f:ee:cf:7b:6e:71:2b:e4:82:31:5f:44:a6:ba:b2:
95:00:9b:67:42:42:25:2f:ea:e2:83:1e:cb:3e:19:
8e:35:2f:b5:a9:73:be:96:5b:78:21:be:2e:c5:3e:
e9:1f:c2:3f:be:dc:18:0b:63:14:55:11:a1:61:8e:
71:9b:21:ea:fe:6c:24:27:fb:c9:82:d5:ed:2f:70:
13:87:1b:5f:1b:4c:bd:47:88:2d:ea:06:e3:a4:28:
25:6f:5b:a8:a4:d6:3b:e3:a9:28:e2:f8:04:41:21:
15:2c:7c:fa:ea:e0:87:ce:d0:06:e5:92:17:f2:f2:
28:ad:d7:86:4e:65:e3:07:31:bd:e4:69:e4:ae:7d:
41:ef:ea:3a:15:7c:87:b2:6a:10:d8:af:86:53:52:
a1:57:62:39:82:50:f2:aa:f9:d5:d1:5d:67:31:a0:
34:84:cd:35:6f:e0:b9:03:64:62:e3:4d:af:40:d9:
3c:2a:7e:50:e7:b8:0f:a5:b2:8d:e7:0a:b7:9d:b2:
36:e0:e4:7c:25:d0:4b:45:5a:46:33:83:20:30:a4:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:DE:32:D1:8A:F7:01:EA:1C:33:44:A4:B3:6B:D5:14:B4:01:D0
X509v3 Authority Key Identifier:
keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:53:9d:02:a7:35:f8:65:16:76:ee:c2:04:00:05:bb:36:
0c:bf:f1:af:fe:35:ef:3b:27:7a:60:d5:8e:c1:18:c8:a9:08:
0d:ae:c1:de:0f:a6:b2:71:c6:2d:4b:5a:6f:6c:c6:b1:a7:5c:
ae:d2:41:64:24:8d:7c:ab:27:19:d6:55:81:7f:e4:d3:86:71:
6d:55:27:cd:19:d9:f7:7d:c5:30:18:3f:77:62:80:49:74:45:
61:47:64:3b:a3:1a:c1:c9:bf:15:b4:23:31:b3:e2:a0:a2:ad:
78:4e:43:f0:2e:da:f3:ae:20:5e:e2:44:9f:00:de:ed:bb:4e:
67:3c:c7:35:96:fe:94:00:41:f8:1b:6e:b4:db:22:bd:62:36:
49:ac:4b:44:b7:ca:9c:c4:c6:68:b4:aa:0f:ed:43:ae:ad:7f:
89:2b:1f:a4:25:8a:c9:cf:a6:82:2b:8e:e3:81:26:1c:9c:f0:
cf:c2:07:ea:b8:df:74:29:d9:f2:f9:8c:0b:ea:a9:8f:78:40:
f0:25:25:5f:9d:7e:08:60:96:c1:1c:86:79:c5:34:fd:b8:54:
38:9a:39:83:8d:5e:53:06:5b:79:2f:83:f1:7d:5f:72:3d:93:
e2:ea:f6:a7:42:9e:04:3e:b1:ec:59:1a:d9:ce:89:bd:3e:e8:
2b:04:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:39 2026 by rpki-client