
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json)
Hash identifier: 238Dt8EXW++eXYCmFjMWGfXZ/x5Yu7OoD+kmMs5+GoE=
Subject key identifier: 02:D5:5D:46:A5:E4:7A:19:5E:A9:20:02:72:EA:C1:AF:22:A2:4D:E4
Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
Manifest number: E9
Signing time: Fri 17 Apr 2026 06:09:40 +0000
Manifest this update: Fri 17 Apr 2026 06:09:40 +0000
Manifest next update: Fri 24 Apr 2026 06:09:40 +0000
Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: 8g6T6MU+TO1/WlG1ZV9CLdQB6WU1vnHEhKSaZNV/m3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Validity
Not Before: Apr 17 06:09:40 2026 GMT
Not After : Apr 24 06:09:40 2026 GMT
Subject: CN=69e1cea4-6cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:86:c1:6b:dc:31:09:3b:a6:b7:a4:d6:97:
69:c3:c0:ff:b9:21:b9:f3:a8:34:56:1a:d4:a8:4a:
84:28:2e:aa:c2:4c:a8:53:40:5a:46:6b:cd:e9:74:
dd:4b:47:48:d8:ff:e0:4c:6a:8c:51:73:d9:30:05:
f1:c1:1e:f3:f8:b7:8f:d6:32:a0:9b:5c:4f:1d:13:
7f:e6:19:f6:3b:f9:ac:86:09:eb:7f:7b:e9:56:55:
51:76:58:e3:70:f9:8d:7a:34:a0:0a:a7:62:4e:e5:
48:b1:89:75:4f:28:38:ed:88:af:20:06:8b:47:39:
bf:c5:70:5a:4f:f3:c4:d8:d1:98:0f:a7:4a:a1:ba:
4a:83:64:64:72:d6:ae:0e:42:6b:d7:53:a5:36:9d:
28:65:da:f7:5c:d1:15:ad:0a:b7:8b:ce:a2:bd:70:
b7:92:93:91:0f:69:ad:34:78:dc:53:05:d3:5a:ba:
4f:f9:37:9e:80:2f:ce:14:b4:e3:0f:cb:b1:d2:43:
48:11:ce:54:6b:0c:10:64:f4:a7:84:9a:17:4b:89:
da:0a:59:36:99:3c:09:d1:5c:26:a1:6a:6b:f6:28:
fc:28:88:bd:6c:6b:a1:ef:52:4f:db:f1:10:24:6c:
13:bf:af:a5:6b:b2:61:6e:d3:05:83:d7:ad:9e:76:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D5:5D:46:A5:E4:7A:19:5E:A9:20:02:72:EA:C1:AF:22:A2:4D:E4
X509v3 Authority Key Identifier:
keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:e0:8b:21:43:ea:97:02:b6:b8:66:80:c3:42:1f:35:72:
23:df:58:1f:5d:84:45:1c:16:7c:0f:f3:a4:c7:af:1e:21:b7:
06:eb:ef:e6:0f:95:bb:f5:21:2e:0d:31:23:68:bb:35:61:e1:
71:ec:a6:9f:83:a4:70:b5:60:07:1b:ac:9d:51:f9:7b:7f:c9:
f3:32:c9:a3:44:f7:ad:4b:e3:2b:89:e6:43:63:b7:76:f7:7b:
f8:de:1e:06:32:44:7d:c8:cd:56:75:19:82:b4:8e:7c:24:d7:
ae:03:96:a8:2a:bc:f5:03:84:2a:bc:04:02:5e:1e:8f:66:a4:
b9:13:e8:3d:c6:08:0e:c9:cd:07:7a:a4:53:e7:3d:9e:c6:ef:
35:49:fd:02:d4:b3:c4:0d:a2:ef:cd:27:b0:9c:54:df:50:26:
dd:b3:02:52:cc:2d:4a:a6:8c:d2:b3:94:bf:64:5b:fc:af:19:
c5:8c:70:43:19:42:27:af:59:56:f0:ca:a4:ae:08:91:ae:43:
e0:de:29:72:0d:f9:82:aa:de:ca:87:92:fa:8b:da:e6:f3:43:
0e:9a:cb:9f:ee:65:95:2e:26:d9:26:15:9c:c5:f4:f2:05:48:
6a:09:d9:05:aa:7e:19:e2:69:c3:31:0e:e4:6a:4b:8c:8c:21:
c7:74:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:53 2026 by rpki-client