
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File: 2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier: s7dyDqBGAiMdCmw8pMcU15X+E47X/2UXnTZLxmhVqg4=
Subject key identifier: EF:B4:D7:31:95:6C:97:F9:39:25:AC:A8:A6:B2:E6:DE:42:26:9C:13
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial: 092A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number: 091F
Signing time: Thu 16 Apr 2026 20:10:08 +0000
Manifest this update: Thu 16 Apr 2026 20:10:07 +0000
Manifest next update: Thu 23 Apr 2026 20:10:07 +0000
Files and hashes: 1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: KcFBQuAWurv2QMtRma+qwsj5as7wSXpUxQcdQC99VhA=)
2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: EyWfbNnEsrxHEUpiCzDnooEQ3bS3mUYqOnIyKFcWkxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346 (0x92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Validity
Not Before: Apr 16 20:10:07 2026 GMT
Not After : Apr 23 20:10:07 2026 GMT
Subject: CN=69e1421f-2bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:21:c3:ec:77:51:38:3c:14:1b:0a:55:3b:
8f:95:f4:da:78:d2:3d:c2:1b:cc:2c:4a:1f:1c:f5:
6f:02:bf:71:05:ae:51:ff:55:e5:6c:8a:d1:5e:ad:
ab:48:5d:0c:93:07:9d:31:96:82:2e:d5:8f:eb:1c:
4e:31:e6:fd:d4:a5:e2:79:4a:14:82:6e:2b:1c:df:
8a:97:70:47:d1:8e:8f:a5:1e:dd:73:2d:63:c8:9c:
56:59:67:00:9a:67:d6:82:a5:8e:47:d6:7c:9d:be:
d7:2c:9f:26:73:a4:d8:96:0b:2f:02:d4:3b:ad:f5:
b9:db:df:6a:ce:8d:c7:58:61:47:d6:52:35:9d:fb:
05:1e:df:be:35:f2:01:73:13:2a:68:2d:ee:62:bc:
8a:93:22:dd:56:23:68:05:cc:4d:04:ba:e7:f8:2f:
b1:42:5c:ff:6b:a3:85:01:2a:84:b4:1b:1e:5b:53:
10:bd:f5:ec:47:49:02:8f:39:83:a1:fe:29:8f:c5:
4e:77:31:10:2d:2d:2f:5b:7a:50:78:b2:1a:b7:a4:
4b:55:fd:d3:cf:33:8e:41:bb:6b:14:18:7c:c0:75:
63:b6:3a:63:ae:b8:22:cb:6b:fa:22:6f:fd:be:00:
b0:fd:42:b1:f1:65:9a:16:d1:80:f9:b8:9e:40:ed:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:D7:31:95:6C:97:F9:39:25:AC:A8:A6:B2:E6:DE:42:26:9C:13
X509v3 Authority Key Identifier:
keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:e1:63:65:de:38:2f:b7:c9:f0:20:2a:56:9c:fd:e4:d7:
f0:0a:85:d5:38:75:98:1f:9f:57:35:ca:4d:c8:39:80:e0:d9:
9a:9d:8c:2c:c5:fc:45:4d:5e:04:64:11:e3:21:11:34:35:04:
10:56:26:90:19:d2:34:08:95:83:60:33:68:13:91:bd:e2:d5:
2a:58:f9:bd:92:32:d8:3b:9d:17:b5:e5:22:45:3a:2d:2e:f1:
ea:e5:64:66:df:89:57:0a:81:98:70:1e:66:68:3a:55:03:ee:
4e:d9:a2:84:0f:fd:f3:e0:da:2e:f6:cd:b1:58:b2:8e:dd:1c:
9a:d5:c6:eb:bd:66:03:69:0a:e6:1d:69:02:c0:29:9d:c9:2d:
c4:c0:2d:e5:03:cc:5a:da:fb:3f:70:0e:ff:3b:50:b7:f4:6d:
11:e1:3a:8a:2d:9a:68:3a:da:7a:d2:a3:25:bb:5f:2e:63:86:
2b:b0:3e:f8:39:4c:a1:25:01:a6:2c:d4:22:e9:e4:1e:c9:75:
de:8c:7f:35:7b:3c:1b:19:a4:6f:7e:f2:ad:70:06:b0:83:90:
6a:09:3c:09:d2:fe:c0:ea:7a:90:0e:1e:96:a9:bf:ce:5c:e4:
3d:fe:83:9a:55:44:86:8a:4a:9b:62:28:b2:70:a6:70:6e:f0:
93:75:17:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIxNjUxMTAvBgNVBAUTKERBMDQyMjhEM0VFQjQ1MUZDMEYyMjMzNjY5NzE3MDU3
RjhBQjM2NjkwHhcNMjYwNDE2MjAxMDA3WhcNMjYwNDIzMjAxMDA3WjAYMRYwFAYD
VQQDEw02OWUxNDIxZi0yYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5Ahw+x3UTg8FBsKVTuPlfTaeNI9whvMLEofHPVvAr9xBa5R/1XlbIrRXq2r
SF0MkwedMZaCLtWP6xxOMeb91KXieUoUgm4rHN+Kl3BH0Y6PpR7dcy1jyJxWWWcA
mmfWgqWOR9Z8nb7XLJ8mc6TYlgsvAtQ7rfW5299qzo3HWGFH1lI1nfsFHt++NfIB
cxMqaC3uYryKkyLdViNoBcxNBLrn+C+xQlz/a6OFASqEtBseW1MQvfXsR0kCjzmD
of4pj8VOdzEQLS0vW3pQeLIat6RLVf3TzzOOQbtrFBh8wHVjtjpjrrgiy2v6Im/9
vgCw/UKx8WWaFtGA+bieQO31GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+01zGV
bJf5OSWsqKay5t5CJpwTMB8GA1UdIwQYMBaAFNoEIo0+60UfwPIjNmlxcFf4qzZp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE2NS82QTNFQjhCNkMy
QjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJSX0E4aU0yYVhGd1ZfaXJO
bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnUWlqVDdyUlJfQThpTTJhWEZ3Vl9pck5tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjE2NS82QTNFQjhCNkMyQjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJS
X0E4aU0yYVhGd1ZfaXJObWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPaDhY2XeOC+3yfAgKlac/eTX8AqF1Th1mB+fVzXKTcg5gODZmp2MLMX8RU1e
BGQR4yERNDUEEFYmkBnSNAiVg2AzaBORveLVKlj5vZIy2DudF7XlIkU6LS7x6uVk
Zt+JVwqBmHAeZmg6VQPuTtmihA/98+DaLvbNsViyjt0cmtXG671mA2kK5h1pAsAp
ncktxMAt5QPMWtr7P3AO/ztQt/RtEeE6ii2aaDraetKjJbtfLmOGK7A++DlMoSUB
pizUIunkHsl13ox/NXs8Gxmkb37yrXAGsIOQagk8CdL+wOp6kA4elqm/zlzkPf6D
mlVEhopKm2IosnCmcG7wk3UXPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:19 2026 by rpki-client