
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File: 2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier: cd0kf/HI4j35B4CUOdU0Ltk/P8dXe3kT9V6zXbKBgJ8=
Subject key identifier: 72:0C:AD:51:99:F1:1C:AE:F2:6B:5D:50:D9:FF:FB:01:54:A5:D2:5C
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial: 090D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number: 0905
Signing time: Sat 28 Feb 2026 20:37:42 +0000
Manifest this update: Sat 28 Feb 2026 20:37:41 +0000
Manifest next update: Sat 07 Mar 2026 20:37:41 +0000
Files and hashes: 1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: 2z50+bl3r90ds2hQW11cpkWmzTDF/GE/qhqzjaDwCn0=)
2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: C/eVnfyL6ySkKhbG0QllU10wv4xhGd4o4YA02lTj0B4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Validity
Not Before: Feb 28 20:37:41 2026 GMT
Not After : Mar 7 20:37:41 2026 GMT
Subject: CN=69a35216-14fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:03:60:e2:4b:02:62:6e:38:43:d2:f7:64:
c6:9e:d2:6c:b4:5f:d1:ff:3d:31:d8:0b:bf:50:9a:
d1:6b:47:d5:ca:f3:7a:15:76:24:a2:fd:14:f9:2e:
b7:dc:0a:1a:2a:d3:b7:18:e7:bd:ca:53:70:1a:08:
67:c5:f0:6b:1d:ab:fd:da:c7:0a:96:3e:63:a1:26:
5f:a9:d7:ea:4e:78:8d:61:30:ef:b0:ad:15:7b:70:
03:a6:54:07:1f:2b:e9:e6:49:08:a6:17:41:1d:e1:
5c:bf:b5:a3:1c:46:0b:63:59:fb:3a:da:c2:56:c6:
81:1e:b8:3f:9f:e8:91:6b:c2:94:8d:98:a7:63:e4:
ca:48:ba:03:84:1e:2b:58:87:e3:d6:ca:9e:ae:c7:
31:4b:d8:d2:8b:e7:e7:e6:2a:73:df:45:51:aa:df:
8a:9f:e8:9a:dd:55:9d:eb:2f:a4:f7:54:15:72:4d:
60:6d:b8:23:0a:45:a7:87:f9:09:5c:b5:69:5d:05:
50:3c:2d:3d:16:3c:2b:d5:14:01:6f:a0:5b:a2:a2:
cc:e9:be:2d:bd:95:f1:b8:2f:bb:84:6b:19:7e:96:
36:30:a9:db:5c:52:79:7c:d2:f8:f6:f1:35:44:16:
66:40:4d:10:c9:1c:4f:b7:9a:25:2b:f7:b0:bc:a4:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:AD:51:99:F1:1C:AE:F2:6B:5D:50:D9:FF:FB:01:54:A5:D2:5C
X509v3 Authority Key Identifier:
keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:a2:f9:06:41:7a:96:42:68:2d:6c:19:56:c0:75:f7:cc:
d4:d5:26:50:46:7e:38:2f:fd:13:cd:25:f7:f7:29:8e:80:4c:
e0:5e:4e:66:4d:0b:cf:12:73:c4:85:8b:57:c0:a1:aa:27:52:
04:88:23:cb:fa:b9:fe:cb:df:90:1b:b3:37:79:b8:47:a5:28:
d9:25:01:ff:1a:c2:c3:3f:a6:19:c9:23:7e:59:3c:60:7e:57:
b7:c9:14:73:1f:48:16:3e:d8:7b:93:ff:73:4d:b4:50:ae:47:
1a:80:08:cd:ce:55:d2:ff:88:b7:4b:08:2d:05:44:42:8d:58:
a5:40:a5:7a:c0:7c:d0:13:b8:27:49:0e:ee:69:f2:a3:1f:6a:
7c:32:9c:4b:6d:b3:2c:24:c4:00:6e:2a:5d:1c:5c:8d:c4:70:
82:58:5b:77:7d:63:b2:9c:9b:d4:19:54:31:b2:3f:30:77:c0:
4b:9e:d2:19:1d:2b:a7:7d:bc:b8:2f:68:ce:b0:13:8a:7b:d7:
24:f2:58:f0:12:eb:1d:f8:e0:1e:ea:52:59:5b:30:2d:56:a9:
54:22:92:19:54:c0:53:75:26:42:0d:7a:ac:67:64:be:ed:43:
fa:37:95:02:dd:97:19:89:d9:15:0d:80:72:ac:86:a1:9f:dc:
16:18:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:58 2026 by rpki-client