
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: Rlbd/c6Z6IIS+s5StiyikvNLCueRInskFlXaBIN7vJY=
Subject key identifier: B0:85:D1:65:72:E6:E5:14:CC:2C:F6:08:FF:83:59:F2:66:1B:58:E7
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: EB
Signing time: Sat 13 Jun 2026 06:33:33 +0000
Manifest this update: Sat 13 Jun 2026 06:33:33 +0000
Manifest next update: Sat 20 Jun 2026 06:33:33 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: pvmxsvCwGQtSRPzu5hKtc/g7HJ7I8VXpaK7HiMU3Ybc=)
2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: 53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=)
3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: 2KR0aKOX1uJs95laOd7AQOJL2qLcBa6RhZbXIKQSp/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Jun 13 06:33:33 2026 GMT
Not After : Jun 20 06:33:33 2026 GMT
Subject: CN=6a2cf9bd-0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:f3:a4:0d:bd:14:3f:d3:4e:02:7f:17:80:
d1:69:c2:a4:ee:f0:44:99:78:a8:7f:8c:1b:d2:b0:
4a:e0:bc:86:80:b6:8c:3e:13:21:7d:29:31:7f:78:
92:15:7f:85:17:57:8c:ff:64:bf:72:c5:bd:53:a1:
fd:d7:68:38:74:79:40:2e:c5:e4:1a:8f:f4:7a:4d:
ea:cc:b3:4e:1b:42:a5:46:3b:a9:0a:68:1b:24:67:
55:94:46:4b:cd:64:d8:b5:03:52:95:ab:d2:57:e5:
75:54:80:f6:f2:1e:9f:09:64:3b:12:e9:d3:35:e0:
3a:8b:11:a1:dd:5f:35:de:7e:37:9e:f1:3a:06:7a:
41:2b:f1:55:a2:50:19:59:30:14:95:cb:1c:c2:58:
b5:5f:5f:77:08:f6:5e:3c:2d:90:df:27:5b:1b:b4:
84:bd:b6:64:1e:0e:b5:58:7b:b1:4a:49:0d:f5:f8:
44:9a:c5:46:10:f5:16:46:d5:06:c6:fe:aa:87:bb:
77:78:66:aa:6a:44:6c:1e:65:b8:09:68:b0:c4:64:
e0:e9:4d:4f:d4:f0:0c:e9:66:27:05:84:a5:f0:07:
7b:b4:8b:f5:0c:c8:7e:93:84:b2:70:06:48:94:a8:
81:31:e3:a3:17:17:d3:50:ef:2a:99:54:22:50:26:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:D1:65:72:E6:E5:14:CC:2C:F6:08:FF:83:59:F2:66:1B:58:E7
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:8a:c1:01:b5:5b:fe:86:9a:01:c7:61:77:55:6b:bb:5a:
35:6c:10:ab:97:01:6f:5c:e5:bd:f5:44:01:6b:92:31:e1:41:
d8:17:ac:9f:e1:8f:b9:7c:aa:d3:da:af:86:50:18:2a:41:90:
ff:fe:43:0c:6f:fd:28:13:05:ea:dc:a8:ae:12:c1:58:3c:d1:
1e:95:7f:7d:93:a2:b2:b9:53:9c:3a:12:3a:34:bf:43:5a:c0:
8f:04:11:1b:11:82:be:11:47:80:33:56:2c:e4:4e:18:fa:33:
a7:d7:9c:e2:74:d3:fc:a1:7f:7e:4e:43:d7:82:6b:bf:a1:56:
8d:55:00:59:db:8b:07:0d:3e:04:c6:18:56:8d:78:32:1f:6e:
23:6c:fa:45:d3:39:54:04:c6:92:30:42:f7:0f:61:9c:76:de:
ca:f3:77:3e:84:1d:8b:d5:e5:03:3a:73:8b:2b:e4:07:ca:b3:
76:91:90:cd:3f:ef:7b:89:c2:67:be:eb:3b:04:32:ab:26:12:
9b:bf:41:d0:ac:c3:7e:2c:2a:31:af:41:50:d2:1d:d6:16:f5:
60:9d:36:d7:b6:78:51:f0:68:f2:6e:56:6b:47:b1:86:b1:41:
2d:7a:36:92:d6:5f:9c:d5:ec:73:2c:35:40:ca:5e:16:33:f6:
09:ad:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:26 2026 by rpki-client