
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier: IEUWUFTGth7ZBqSf0CDNCYbxVQIae2C1lPF5YUrkS08=
Subject key identifier: 0F:16:54:1B:91:40:A1:46:13:49:53:DE:4E:DE:EE:BC:71:D7:19:96
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number: CB
Signing time: Sat 13 Jun 2026 06:51:04 +0000
Manifest this update: Sat 13 Jun 2026 06:51:03 +0000
Manifest next update: Sat 20 Jun 2026 06:51:03 +0000
Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: x95bPxyUHzCSzA3a5TiFPYvqeIh/v/q61nLEwY9rmfI=)
2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Validity
Not Before: Jun 13 06:51:03 2026 GMT
Not After : Jun 20 06:51:03 2026 GMT
Subject: CN=6a2cfdd8-9d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:a3:51:58:78:5a:26:09:da:2f:cd:8f:7c:
3c:80:0a:25:e3:fb:eb:9c:78:4b:c1:66:c3:c5:19:
b4:52:3e:1b:a6:60:c2:bb:89:b3:16:45:85:1d:eb:
fd:eb:9c:2e:5b:78:13:83:21:fd:a2:63:a9:35:4e:
4d:82:df:5a:6d:dd:60:ab:e7:87:40:87:63:7a:ea:
69:0a:91:8f:43:36:c6:28:9b:a9:a9:2f:84:75:5a:
93:45:b7:d6:47:4f:53:69:fc:1b:10:74:ff:6e:6e:
0c:3f:43:f8:0a:78:76:48:d4:1f:0c:bb:37:fc:bb:
10:b5:a6:5b:d5:17:90:1c:aa:60:f9:19:12:28:8f:
2f:4c:20:14:d2:99:9c:ae:0d:81:3f:bd:e1:d3:0f:
01:14:d0:23:61:7c:5a:15:e0:8c:af:3d:94:df:cb:
16:96:01:e8:da:26:bc:c3:08:2c:08:c0:29:b8:2e:
5b:84:32:5a:3d:05:6b:bd:16:6c:18:10:ea:d3:75:
48:14:d2:47:cd:1f:e6:dc:b8:8a:e8:af:f7:03:5e:
74:e4:6f:75:53:16:90:49:d8:f6:09:ef:25:f8:92:
3b:c9:ef:cd:e7:5b:57:1f:c7:2c:00:b9:f2:a1:4f:
58:c9:9f:e4:8f:1d:19:00:eb:db:10:0f:53:6a:0a:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:54:1B:91:40:A1:46:13:49:53:DE:4E:DE:EE:BC:71:D7:19:96
X509v3 Authority Key Identifier:
keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:79:16:e9:ce:06:2b:6c:fb:c0:44:3b:74:66:78:2c:28:
d6:b8:7d:8d:4d:ca:76:1e:f4:d4:3a:6e:59:a6:18:4f:f9:dd:
bf:34:36:87:2d:28:2e:b2:fe:88:91:9f:f3:03:8d:84:2e:4e:
25:d3:95:6c:2b:f8:e6:15:3c:64:cf:91:8b:cf:98:48:18:88:
72:d2:10:07:77:40:6b:05:02:ef:99:52:e2:76:9f:94:37:f9:
e2:f2:2e:0e:87:a8:e5:bf:6a:f2:ed:82:c4:f9:0d:1c:f0:7c:
3b:9c:24:ca:22:46:fc:d7:9f:1a:4e:5f:b4:e9:f1:31:83:e5:
fa:3b:67:bf:85:df:0d:7a:3f:af:11:ef:20:3f:d9:72:39:bf:
3d:5b:6d:7e:41:ac:ee:97:f6:ad:1a:1c:dd:77:1a:fa:a0:2d:
dd:21:2b:d9:9b:0e:5e:4f:06:70:c0:fd:13:14:cc:62:18:76:
a7:f9:ab:7a:e4:3a:79:9a:de:54:17:34:7a:e9:b2:32:b4:17:
fe:cb:a1:63:f5:db:66:f2:a7:80:6c:9a:c3:2b:53:35:55:ad:
50:df:a6:63:82:43:03:92:81:5b:ab:54:84:19:da:94:07:70:
93:ac:a6:4e:ed:ce:7a:5a:23:40:fd:6f:e8:6b:97:ed:da:75:
9e:6a:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:52 2026 by rpki-client