
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: +s16aq/uwJULEM+KAG7AqY4kL2bv8oBdYARhPaMDD1M=
Subject key identifier: F6:20:38:35:A2:10:32:01:6C:D7:58:3B:E9:59:FD:E3:32:BC:0B:AC
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: CF
Signing time: Fri 17 Apr 2026 06:30:46 +0000
Manifest this update: Fri 17 Apr 2026 06:30:46 +0000
Manifest next update: Fri 24 Apr 2026 06:30:46 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: EHWLqnqXC57mBAZc5SVZ9wlOLn17l/8o6r0U4XGtCEw=)
2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: 53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=)
3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: 2KR0aKOX1uJs95laOd7AQOJL2qLcBa6RhZbXIKQSp/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Apr 17 06:30:46 2026 GMT
Not After : Apr 24 06:30:46 2026 GMT
Subject: CN=69e1d396-9527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b8:14:6e:ba:a2:20:28:fe:eb:74:41:8b:00:
b2:82:42:a7:ee:62:7c:c2:8b:16:2c:1d:41:4a:51:
dc:fc:a9:13:6b:81:47:1e:5c:08:a8:bc:dd:10:eb:
12:cb:7e:ed:14:c3:3a:3e:7c:cf:db:a7:19:77:5c:
19:da:e4:b0:96:d6:96:b1:11:59:0f:d1:c0:d7:f9:
77:f3:97:62:26:7d:92:22:cc:f1:e2:19:ab:78:b7:
9b:6f:1a:bb:30:d4:84:5d:87:01:ce:69:e2:d5:23:
a6:0a:db:3a:0d:40:61:f9:c9:d3:38:5a:e3:25:25:
bf:78:c4:dc:f6:97:62:6d:3e:ef:56:a7:53:2d:46:
82:de:40:f6:47:e3:28:93:29:8a:e9:e9:78:2f:9e:
bf:78:4f:c4:c2:47:8b:45:04:b1:34:32:23:84:70:
40:0c:74:5c:82:4d:db:34:24:63:dd:ba:99:be:dd:
47:6f:a6:bb:9a:67:30:37:63:80:fa:2a:0a:66:36:
e7:0c:01:69:99:a0:6f:06:fa:21:07:40:8c:41:0e:
27:aa:ea:1c:0a:b6:b1:95:e0:e9:c3:9f:40:05:bb:
da:da:da:16:8c:1a:fb:73:69:14:7e:48:8d:4c:12:
f1:09:93:b3:32:ec:55:11:7e:b2:f7:a0:8c:3a:8f:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:38:35:A2:10:32:01:6C:D7:58:3B:E9:59:FD:E3:32:BC:0B:AC
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:37:b9:ae:8a:53:51:af:e1:d5:41:44:66:66:c4:16:e1:
50:f3:b9:b0:6b:c7:0a:2a:62:09:0e:78:14:99:80:0d:a8:ab:
93:ba:a5:25:4e:be:2b:66:0b:90:0b:65:6e:d4:eb:16:5a:10:
31:0d:0f:b3:d6:14:82:8d:b4:cb:9a:a3:29:8e:c7:21:18:73:
7e:65:78:d0:87:ab:0e:bc:10:5e:00:f3:72:70:55:5b:86:13:
5d:a6:7d:45:f9:ac:0b:2e:41:7b:d5:7f:c1:06:b8:49:9c:5a:
ea:0c:1a:28:d8:05:76:4f:0f:ca:90:02:b0:e7:4a:de:91:48:
8b:c6:c8:6f:e9:6b:f5:13:9f:de:2f:c5:dd:11:7e:2a:e6:b8:
55:a7:02:f4:5d:67:ba:8f:ed:da:a1:4e:f6:e9:f1:13:1a:26:
0f:d2:ab:98:df:5d:51:84:d4:d0:21:53:f1:94:54:82:5d:62:
12:dd:17:9c:11:dc:6d:06:e7:77:41:6a:8f:6e:44:a8:d4:eb:
6a:d6:7e:c0:2d:33:3a:15:06:6e:36:4a:94:fa:bd:2a:7e:85:
27:cf:2e:da:cf:8c:98:f2:b6:7d:df:0b:ef:1f:a6:60:0a:77:
68:af:b7:a5:11:dc:d1:f3:d2:c3:9f:4f:a4:a5:3d:18:3e:49:
51:80:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:24 2026 by rpki-client