
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json)
Hash identifier: qATQ/0/dVlwrjwj1wZYpqdzCDM0sHkcMDG8U160VTVw=
Subject key identifier: 43:37:4F:D8:74:F3:B9:80:93:6F:B5:7B:11:87:8B:92:1A:25:82:B9
Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
Manifest number: 0170
Signing time: Fri 12 Jun 2026 23:02:20 +0000
Manifest this update: Fri 12 Jun 2026 23:02:20 +0000
Manifest next update: Fri 19 Jun 2026 23:02:20 +0000
Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: l0nSqlMrno6K+Hj2sNt5p9UXGYz0s7ERl7JDaCQySJk=)
2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: 2/r4oR0iCi4LexUGtmPzKzEWeEmDyv6SAtyEMBATvFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Validity
Not Before: Jun 12 23:02:20 2026 GMT
Not After : Jun 19 23:02:20 2026 GMT
Subject: CN=6a2c8ffc-4908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:8a:19:f2:68:9f:47:ac:d8:ac:78:63:46:
5c:c6:10:fd:12:d0:4c:7a:33:5e:62:33:e8:bb:f3:
d7:3a:b6:d5:38:1e:4c:bb:59:80:db:3f:5e:eb:b6:
a7:35:a9:93:f9:ca:b6:b4:93:02:3c:5b:0e:48:9e:
06:9f:61:cb:52:89:02:62:22:4f:e0:f4:7c:78:af:
3b:40:93:ce:61:23:79:58:fb:a3:fe:5b:3e:78:09:
f9:92:ec:94:c8:0c:a7:df:7b:40:9d:64:28:b8:af:
79:64:33:e1:07:31:27:9c:1c:09:8e:f4:b4:09:01:
1f:76:7c:90:1c:c2:9e:92:86:04:85:3f:00:fe:fe:
0f:68:b9:44:00:83:75:52:b3:a7:9a:3e:14:6a:60:
b6:ae:4d:74:41:ed:96:6b:44:e7:7d:3c:60:91:60:
58:25:d4:ab:35:23:10:6d:99:44:15:41:36:b8:b0:
aa:3a:68:d5:a3:68:e2:1e:4d:c2:5c:d2:8f:73:43:
c8:0f:3d:c8:6a:b0:97:6d:19:65:28:c5:63:6a:cf:
af:37:9b:d6:11:f1:64:84:5c:93:30:b0:50:ca:c1:
51:8e:99:5f:d8:1e:82:b9:b6:b5:83:7b:3d:cb:9c:
6e:07:a5:c5:d4:5b:a2:b1:8d:38:5f:b1:48:48:2a:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:4F:D8:74:F3:B9:80:93:6F:B5:7B:11:87:8B:92:1A:25:82:B9
X509v3 Authority Key Identifier:
keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:07:eb:ec:08:e3:26:6d:6c:31:a6:6a:30:40:c0:e6:45:0f:
71:e2:77:f7:3d:ea:38:0e:50:3b:29:88:e1:d2:bd:8c:ed:2a:
ea:9e:5b:07:8f:1e:ed:31:88:21:2f:4f:f8:f8:5e:ad:0e:c2:
53:30:c8:f0:56:e1:5a:a7:ab:49:42:82:cc:05:73:d8:1a:11:
42:d3:fe:ae:ab:81:0b:4f:40:b7:56:8d:f5:0e:f6:a2:17:8a:
b8:df:d6:bd:b1:2c:84:2b:9c:d9:58:89:86:00:a2:f9:07:e0:
fe:9c:97:9d:21:fd:de:4c:20:34:1e:bc:fa:52:86:cf:94:14:
50:6b:c7:7f:3c:a4:24:64:f5:ba:1d:72:ea:d1:9f:60:fa:42:
8c:6a:78:f2:05:c9:79:5a:87:57:18:1c:00:04:ab:e8:bb:32:
56:4b:aa:76:18:c9:3b:9d:6b:3a:aa:fa:11:af:cb:35:e7:7e:
23:a2:c3:1d:24:aa:cb:1b:9d:db:ee:db:73:38:fe:33:ca:ad:
c7:42:fa:fb:1f:91:65:1b:6e:47:77:7a:ff:b3:d8:3d:49:19:
21:1a:52:b9:d9:ca:18:c0:02:fd:7d:56:97:04:be:5e:dc:5a:
2f:ce:db:c3:cd:0a:70:3d:65:88:76:4b:7e:e1:b4:a0:9d:73:
1c:97:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:57 2026 by rpki-client