
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier: J+xQzy3WfGWLpgWzGi737TWEPatccd8YkuAJlZDJzSw=
Subject key identifier: BD:85:CA:19:B8:A5:45:A6:F5:E5:01:6B:A1:71:7E:9B:1D:CB:74:87
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number: 8A
Signing time: Sun 01 Mar 2026 09:16:33 +0000
Manifest this update: Sun 01 Mar 2026 09:16:32 +0000
Manifest next update: Sun 08 Mar 2026 09:16:32 +0000
Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: jq1Fo8SKYE72hl3CqF6cwI0ddLNIifmbbvEalVr4QsY=)
2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: A5PJU/2MonNgPS/zrgxcCbEJrRPstF8HrjTYn0csfys=)
3: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: d/+adXM53jhzhnOgosOvMBJYAel7wXf5omaL/+hpgK0=)
4: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: 8gA37mRatzR/4g4mY6fjVlCeOjPiJPmSXHGYNQb+n78=)
5: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: vS2Vx6VXO5Nyq1OCzKcCc2oi73u64UNW1qpU6OAZqiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Mar 1 09:16:32 2026 GMT
Not After : Mar 8 09:16:32 2026 GMT
Subject: CN=69a403f1-8810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:ca:c1:ed:16:95:54:de:81:f3:41:72:2c:
37:0a:3f:a2:d3:ca:03:c3:8b:13:78:5e:8d:9c:ce:
66:c9:75:2d:f1:fe:bd:d4:97:0a:6b:7b:c8:29:5a:
be:84:37:2b:5e:1c:c5:ea:93:53:c2:ca:ff:0c:36:
21:17:dc:24:1c:63:90:92:c4:f1:23:d9:a8:af:2c:
99:06:c2:d5:da:8c:6c:d7:63:fb:1a:a3:29:e0:da:
bb:87:f0:e4:10:75:38:06:83:82:04:49:ab:b8:77:
8b:69:41:15:df:10:f7:d3:56:24:f9:e3:9e:5f:59:
38:88:9d:a6:a2:79:d2:27:35:58:f2:bd:f9:6e:ad:
bf:9b:3f:b1:34:d7:64:81:66:f0:1c:80:5a:21:61:
32:fe:07:92:d7:52:8a:57:45:38:a2:0a:9e:a2:b3:
67:73:fc:4d:e9:4d:7c:cf:af:4c:72:5d:5c:ba:32:
76:35:e3:e1:fb:08:9e:61:ff:e5:1d:16:2f:87:5e:
ee:ee:16:a0:d7:3c:79:5e:a8:ce:20:3e:ac:0e:01:
99:25:1e:52:ac:dc:30:04:9f:9c:36:33:6b:95:ca:
1b:cb:7d:38:80:5c:ca:2e:e4:d2:92:c4:59:dc:5e:
1c:28:5d:2c:74:f8:19:b9:bf:96:09:a6:3c:af:bb:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:CA:19:B8:A5:45:A6:F5:E5:01:6B:A1:71:7E:9B:1D:CB:74:87
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:56:ae:d9:99:43:ce:e5:9a:62:77:f3:de:a2:7b:91:0b:4e:
d4:43:a2:8e:6b:ae:5e:2f:c2:09:74:4c:49:f5:0d:09:d0:91:
23:5b:76:47:ba:11:f1:72:06:49:b2:88:41:6b:91:ce:06:25:
cf:f3:42:85:66:9e:57:dc:e7:ba:fc:d0:39:f1:e2:39:b1:21:
91:b5:e2:b1:96:45:d4:6b:36:05:58:9a:da:61:1e:22:df:8b:
2d:d0:4a:76:db:0d:6f:b9:ac:23:b5:0c:cd:79:af:4b:2f:28:
56:72:de:fc:c0:8c:7f:84:7d:47:7c:ff:75:f4:a2:53:70:a9:
ce:aa:2e:f6:9f:fd:da:f9:ba:f7:06:8e:dc:72:d5:5a:d9:17:
6a:f3:10:72:94:e0:86:8c:7b:00:9e:36:03:59:1d:51:ef:22:
35:3d:11:3d:7b:0c:77:ce:18:58:89:8e:80:cc:6a:2c:a9:64:
b9:8a:49:a0:e0:87:fd:f7:0f:33:fb:3a:9a:a1:05:ad:8b:50:
88:38:8a:4b:52:32:3f:06:51:e3:61:19:ed:ce:8f:96:fc:0f:
c7:ac:ed:44:2b:ff:6f:3a:bf:50:47:59:38:60:45:8a:ea:b8:
46:37:80:3a:2c:ce:43:f4:10:76:b6:1a:dc:81:03:a0:a5:30:
16:51:32:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDRTIxMTAvBgNVBAUTKERBRTFDRTBBREE2N0I0NDcxM0M2MUIxRkFFQzRGNUQ0
RDY3QTE1OUYwHhcNMjYwMzAxMDkxNjMyWhcNMjYwMzA4MDkxNjMyWjAYMRYwFAYD
VQQDEw02OWE0MDNmMS04ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl3fKwe0WlVTegfNBciw3Cj+i08oDw4sTeF6NnM5myXUt8f691JcKa3vIKVq+
hDcrXhzF6pNTwsr/DDYhF9wkHGOQksTxI9moryyZBsLV2oxs12P7GqMp4Nq7h/Dk
EHU4BoOCBEmruHeLaUEV3xD301Yk+eOeX1k4iJ2monnSJzVY8r35bq2/mz+xNNdk
gWbwHIBaIWEy/geS11KKV0U4ogqeorNnc/xN6U18z69Mcl1cujJ2NePh+wieYf/l
HRYvh17u7hag1zx5XqjOID6sDgGZJR5SrNwwBJ+cNjNrlcoby304gFzKLuTSksRZ
3F4cKF0sdPgZub+WCaY8r7ty6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2Fyhm4
pUWm9eUBa6Fxfpsdy3SHMB8GA1UdIwQYMBaAFNrhzgraZ7RHE8YbH67E9dTWehWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUNFMi81MUNEN0ZCQTcy
Q0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRFY1R4aHNmcnNUMTFOWjZG
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUNFMi81MUNEN0ZCQTcyQ0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRF
Y1R4aHNmcnNUMTFOWjZGWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcFau2ZlDzuWaYnfz3qJ7kQtO1EOijmuuXi/CCXRMSfUNCdCRI1t2R7oR8XIG
SbKIQWuRzgYlz/NChWaeV9znuvzQOfHiObEhkbXisZZF1Gs2BVia2mEeIt+LLdBK
dtsNb7msI7UMzXmvSy8oVnLe/MCMf4R9R3z/dfSiU3Cpzqou9p/92vm69waO3HLV
WtkXavMQcpTghox7AJ42A1kdUe8iNT0RPXsMd84YWImOgMxqLKlkuYpJoOCH/fcP
M/s6mqEFrYtQiDiKS1IyPwZR42EZ7c6PlvwPx6ztRCv/bzq/UEdZOGBFiuq4RjeA
OizOQ/QQdrYa3IEDoKUwFlEy+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:27 2026 by rpki-client