
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json)
Hash identifier: pIZ5S49UKC24SIGOvI8wNHgyyelJfPTKTHkF+yY2Q1U=
Subject key identifier: 66:63:99:42:F0:9E:57:14:08:02:69:5B:B2:9C:85:80:B4:DA:C4:71
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
Manifest number: 086D
Signing time: Sat 28 Feb 2026 20:59:21 +0000
Manifest this update: Sat 28 Feb 2026 20:59:21 +0000
Manifest next update: Sat 07 Mar 2026 20:59:21 +0000
Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: LFagD17adeJ9UxxEWm2/VooVVzR0GJ6DZqfPUZn5DNQ=)
2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Validity
Not Before: Feb 28 20:59:21 2026 GMT
Not After : Mar 7 20:59:21 2026 GMT
Subject: CN=69a35729-72fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:a6:39:92:92:c8:de:7c:5c:b6:0d:88:32:
95:47:22:83:cf:3b:e9:c3:9d:41:e9:c8:6d:aa:ae:
3b:9c:a4:00:40:ab:f2:20:7d:77:50:18:c2:6f:30:
6b:40:1e:ce:7c:56:24:77:15:52:d7:4e:40:02:89:
2d:63:56:2b:01:26:bc:29:6e:af:b4:03:a3:10:e6:
21:f2:52:d7:7e:91:c0:a8:05:f3:c2:8c:95:dc:10:
c0:4f:43:a4:72:05:d7:c5:48:60:f7:34:e4:50:92:
48:f8:2e:bc:3d:c5:e7:ed:3c:1c:45:ff:cc:e9:24:
af:81:6f:00:1c:c2:d8:47:e8:cc:1f:90:1c:12:f2:
9e:33:6d:5e:37:01:23:f3:10:4d:82:e0:8e:e6:a4:
33:c0:63:ba:0e:77:96:d6:61:55:62:79:46:2b:db:
2c:ac:f5:6b:6c:8e:f9:7a:31:3f:0e:76:8b:26:0c:
30:0b:19:39:e3:b4:32:c1:cf:47:2c:cf:29:d9:d1:
96:2a:51:e1:bc:02:2e:d9:39:bd:98:be:c3:39:63:
c7:06:6e:f5:a8:c1:f7:17:ce:f5:72:43:35:ce:c9:
c7:0c:1c:f1:2c:dd:34:8a:fa:16:96:11:35:5f:45:
7a:44:84:e2:da:57:7c:22:02:a7:34:d7:c8:15:69:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:99:42:F0:9E:57:14:08:02:69:5B:B2:9C:85:80:B4:DA:C4:71
X509v3 Authority Key Identifier:
keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:7f:23:eb:73:1f:52:42:38:5b:2e:c0:be:68:58:0e:f2:e6:
56:9a:36:4a:92:59:2f:35:6d:96:ef:3a:a3:9d:03:09:62:69:
50:82:aa:04:2d:26:66:2b:c4:cc:58:b3:02:60:2a:a0:f8:de:
fa:0c:83:dd:e5:97:a8:fc:71:95:e7:3c:0d:97:01:80:13:77:
25:05:50:da:01:6d:04:b6:33:01:9f:34:6b:00:e9:d1:ae:db:
80:77:a7:e4:3a:d0:65:48:7a:f4:5c:92:75:44:c7:1c:f1:7b:
ba:39:71:f5:b4:27:86:07:e8:a9:c3:42:d9:e2:a3:dd:ef:a9:
49:d8:12:e2:b6:36:f1:fd:68:f7:9d:cb:5b:b8:f2:8a:6f:05:
a0:5a:e9:d0:14:61:a7:2d:32:ae:71:aa:62:57:32:f4:99:38:
87:2b:6b:87:1c:95:2c:b6:d2:0f:dc:37:9d:6f:13:0b:c0:85:
ca:02:b0:f9:ea:a8:76:5c:7f:26:36:e9:2f:dc:a8:c4:0a:e9:
de:ce:3c:18:ba:40:0c:22:8f:e3:f9:f7:47:86:67:e8:ed:d3:
a3:42:41:9f:80:00:5f:bf:82:d5:9d:ee:80:f6:75:df:89:9a:
db:f0:51:11:8e:91:d5:28:8c:b2:54:22:44:b3:9c:d3:89:b6:
53:46:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:34 2026 by rpki-client