
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier: qJ+28dDH/WmAzr4s4didMpOvomxW4ElIMtvzv4CM7hw=
Subject key identifier: FD:7E:DE:F2:92:F7:D6:AC:98:B2:7C:2E:CD:E2:F2:71:15:59:A5:CE
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number: A4
Signing time: Fri 17 Apr 2026 07:21:36 +0000
Manifest this update: Fri 17 Apr 2026 07:21:36 +0000
Manifest next update: Fri 24 Apr 2026 07:21:36 +0000
Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: ueBR4NoXkd7Z5TVZT5JVxrP4sIFThvEPoObgmi7x82Q=)
2: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: MpkJnjcMThfx3LCJFdT72z/oCW4Tq8SqMkjTnc2yLCQ=)
3: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: myKIfxb3meeUUBjhH7MLfyukcMOtJkJ6GsFHuLAs3O8=)
4: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: 4wnX+wvYDtSWiFQ76g2DxIqbUHqA4rZ+5fRjRHyOCaE=)
5: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: bYRZfdjC0+B7/pB57VQ0Saubsf0vMLkkrvGa49hZ1H8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Apr 17 07:21:36 2026 GMT
Not After : Apr 24 07:21:36 2026 GMT
Subject: CN=69e1df80-98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:ed:db:3e:33:a7:cc:3b:87:45:92:a3:3a:
b3:73:c7:fc:1c:8b:87:81:f3:35:e0:60:5a:77:78:
74:79:83:91:ab:8b:6c:f5:5b:1e:02:4a:e6:4e:24:
9e:73:64:b5:e4:f0:1d:07:f6:70:38:8b:6a:81:74:
38:b2:20:3f:89:db:30:3f:48:31:90:b8:f3:32:ac:
0b:5c:d6:ea:6b:91:83:27:58:f4:da:f5:dc:87:2f:
9a:23:b1:8f:5b:92:e8:75:54:9b:6c:b1:1d:12:12:
d1:45:f9:8d:df:85:14:a9:04:61:d0:d5:b4:6f:15:
f7:23:27:68:a8:10:d8:9d:2e:ef:3e:e2:55:bf:11:
a4:30:3f:28:0c:75:03:fe:bc:d7:d3:d7:5f:30:54:
6d:6d:7a:bf:f0:39:90:de:19:22:4e:c3:dc:74:13:
74:d8:7d:8d:7f:e2:ca:75:d0:5d:c5:c3:46:6c:a0:
a6:3d:92:a2:1c:4e:64:a7:16:3c:22:d8:3e:70:1a:
de:43:e8:19:c5:0e:0e:09:09:7b:69:c7:b0:cb:a4:
d2:cf:1e:48:e7:7b:07:de:4b:f0:7d:36:98:23:f1:
a5:db:d2:04:15:e8:ec:a0:62:4c:3e:2c:6f:9a:18:
c4:2d:b0:cd:dc:e3:18:08:05:b9:b3:fd:72:70:88:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:DE:F2:92:F7:D6:AC:98:B2:7C:2E:CD:E2:F2:71:15:59:A5:CE
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:57:d9:d5:e6:a4:8a:67:48:7b:d0:b9:6d:37:7c:9a:2e:5e:
29:70:a4:70:1c:73:09:c2:70:e4:0c:a1:a6:81:c3:43:d0:95:
f1:20:28:31:5a:7b:d3:cd:eb:15:9c:6c:06:ea:e0:57:e5:1e:
66:cb:79:95:b9:95:b4:b8:eb:f5:25:a0:dc:f4:c6:1b:4d:24:
0d:68:f4:10:38:87:98:7a:3a:31:b0:06:56:00:95:fe:f8:1e:
c9:15:3f:f9:b2:a6:85:79:05:8e:d0:b3:0a:c7:79:e2:cf:26:
d4:ac:38:02:6b:93:ec:76:38:03:4a:5d:af:9e:79:9c:e4:c7:
a8:8f:d1:3d:7a:c2:09:5a:e0:37:0b:a8:93:bb:5b:14:4b:52:
b2:ae:00:bc:ee:12:73:df:8f:67:06:c7:e5:bb:02:39:b1:a6:
de:7f:f6:30:cd:65:9d:97:af:d8:ec:be:68:a1:45:f3:c7:7c:
85:6d:da:e0:40:0d:b3:41:6e:76:df:24:a1:50:83:15:29:9e:
16:ce:16:f8:63:33:be:19:8c:00:79:64:33:86:78:2c:5a:8f:
74:da:96:bc:83:5d:49:92:bc:dd:53:4c:27:04:5e:7e:8b:3f:
b0:52:65:1b:01:be:10:de:6c:be:12:8c:d1:20:66:c7:01:5d:
e7:03:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:47:55 2026 by rpki-client