
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier: bzLdbpswX7rS63ZGdvoceF0jkFq4jac6noyH4gTnmOs=
Subject key identifier: 02:83:56:0C:72:78:25:AB:B8:4E:F1:41:AB:C2:3C:1B:E7:76:EC:5A
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number: 0264
Signing time: Sun 01 Mar 2026 01:19:10 +0000
Manifest this update: Sun 01 Mar 2026 01:19:09 +0000
Manifest next update: Sun 08 Mar 2026 01:19:09 +0000
Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: YBnLEWVYojCWFdgzU/N5bKmWziwPH3FKO+OKgkJIchw=)
2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Validity
Not Before: Mar 1 01:19:09 2026 GMT
Not After : Mar 8 01:19:09 2026 GMT
Subject: CN=69a3940d-1203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:2b:8d:b9:c6:4a:76:d4:ad:9c:a8:2b:b0:
9b:3b:12:b5:d7:06:08:2c:df:76:a0:b0:f5:10:4e:
06:9b:14:25:ac:39:e8:15:68:fd:1a:13:f6:ae:3c:
45:ee:52:ce:45:a8:70:b7:2f:46:f4:50:3e:75:4e:
de:81:f4:5b:da:fc:0f:f1:85:f1:4d:72:8f:17:0c:
fb:2c:81:cc:58:8c:0f:41:a6:4f:28:61:ae:e7:aa:
ca:7f:65:a7:11:04:ce:d1:a5:e5:80:6b:46:c2:3c:
41:70:5b:ed:ba:19:f1:fd:6b:23:28:2f:c7:d2:d4:
2a:2a:cd:81:6e:72:30:3e:55:51:d3:62:d2:f7:b2:
f6:85:74:2e:84:15:80:66:02:5b:be:c2:13:51:7e:
fa:75:f7:d8:5d:c8:6a:d1:75:da:2b:39:87:15:09:
34:96:6b:ae:21:c2:ba:9d:46:95:b2:f5:80:f0:f6:
42:d7:d4:8d:22:fe:8a:17:2c:d2:a9:b4:ff:4d:50:
dc:4a:07:0f:c9:4e:88:bb:a5:1d:2e:dc:a2:b9:41:
3f:9e:5e:d2:20:4b:53:c6:44:d3:10:e0:3e:e9:a0:
d4:81:97:e1:5f:27:f3:79:0f:33:8a:2a:1e:f1:d9:
ea:e0:03:02:57:3a:02:be:2d:4f:f7:9c:b8:3c:ba:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:56:0C:72:78:25:AB:B8:4E:F1:41:AB:C2:3C:1B:E7:76:EC:5A
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:cf:b2:86:09:9e:52:03:1a:02:b0:17:89:45:1e:99:5a:
cc:f6:16:7e:82:da:9d:a0:56:14:7b:e9:db:07:e5:84:c4:a5:
78:9b:fc:33:7d:8f:62:e1:65:2d:15:c9:6f:a5:97:96:54:42:
42:e7:5e:99:10:09:c5:fe:b6:8d:9a:ab:83:c1:8e:e2:70:ca:
fa:15:ab:c2:0f:35:69:7b:85:4e:3d:db:bc:65:dd:45:63:89:
a1:c9:67:e8:68:10:67:0b:7d:cd:d2:4b:d4:8a:92:9d:09:a4:
e4:b3:89:e9:22:08:06:40:18:fe:dc:2d:76:46:03:f0:f6:05:
87:d9:68:40:05:d0:4c:de:f1:5f:c2:76:e4:9b:c6:f9:52:0e:
57:49:24:8f:67:f8:4e:51:1c:a3:79:3d:ee:31:55:73:99:df:
15:5e:9d:12:b9:b7:2a:00:d0:5c:bb:83:8e:db:a2:aa:47:4a:
62:6e:96:4f:cb:dd:be:74:01:79:8e:12:75:84:bd:1f:74:33:
91:c2:f3:35:d2:86:0a:7e:68:6f:07:cf:b1:83:7c:1c:62:ef:
d0:02:bf:4d:be:91:a6:a1:48:59:54:13:54:0f:d8:e6:06:02:
2a:49:2f:87:b6:57:33:15:50:eb:bb:07:42:40:3e:b8:27:7c:
cb:f0:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:25 2026 by rpki-client