
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File: 2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier: 6U3y02mHKwa3MCLZ57rApKZwmi/mYdgTPnwVvIWSSo0=
Subject key identifier: F0:5A:A5:92:07:8A:89:79:A7:20:75:98:33:24:BD:B7:DF:C8:AB:23
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer: /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number: B2
Signing time: Tue 13 Oct 2026 07:44:53 +0000
Manifest this update: Tue 13 Oct 2026 07:44:52 +0000
Manifest next update: Tue 20 Oct 2026 07:44:52 +0000
Files and hashes: 1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: cVm3Ls+YcZpd1iG+myYniGaGR4swoaHNh3yC1n4lu4o=)
2: JzJnSdklHtqRb5n_07qN21tlKkw.asa (hash: BbSaRokX1FejlIti0bqfCe5bvM22EnMzB7ypMvPdUp8=)
3: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Validity
Not Before: Oct 13 07:44:52 2026 GMT
Not After : Oct 20 07:44:52 2026 GMT
Subject: CN=6acde174-00db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:41:ba:ad:f5:83:ff:3d:96:f6:d9:40:7a:
dc:05:3a:0b:9e:44:e9:49:28:2c:7d:b9:12:cd:17:
b0:0f:8a:0f:e0:e6:2b:16:a5:61:6f:a8:f0:e6:d7:
0f:79:96:05:cf:b6:29:49:f8:b0:72:2f:12:b3:be:
ac:37:f8:f8:5e:d0:2f:46:42:ad:c1:cd:14:b2:8e:
04:1a:9f:14:59:a0:5d:e0:be:b7:75:a5:b2:77:44:
db:19:ea:0a:93:af:ed:c0:15:3c:12:52:80:e0:03:
b2:59:91:6f:2a:8f:0e:04:d5:ab:00:8e:fd:5a:dd:
1e:d8:d2:62:6a:36:a4:53:8c:5d:87:f8:2c:eb:37:
65:d3:f5:aa:50:e7:f6:cf:5f:4f:53:32:f2:dc:b0:
ba:07:75:7a:06:c1:67:5b:83:25:de:cc:9e:bc:cb:
32:f8:03:92:81:d1:af:19:8e:9b:3f:88:23:8c:a4:
6e:e5:f3:b4:8b:df:4c:0c:c3:2e:a5:67:0e:f4:f1:
9b:15:b1:f1:91:c7:80:4f:53:d6:a8:e2:27:ed:19:
bb:28:0c:96:f8:d6:38:a5:27:da:46:3f:ab:60:59:
84:1d:66:54:9d:8c:3a:2e:b3:4f:e9:70:e7:56:4f:
94:3b:f8:38:ea:d9:27:a9:91:45:68:95:46:f3:9b:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:A5:92:07:8A:89:79:A7:20:75:98:33:24:BD:B7:DF:C8:AB:23
X509v3 Authority Key Identifier:
keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:40:8c:85:7e:01:01:b4:41:3d:5c:06:7d:14:7e:f8:7d:
ba:9e:1b:d4:68:fb:23:8c:2d:43:23:2f:23:79:f2:cb:95:08:
0b:13:4f:fe:1c:3d:8a:5c:e1:17:b2:08:65:97:90:98:85:55:
1f:5c:2d:9b:b4:67:59:5e:40:73:c4:8d:fa:0b:86:8f:7d:fb:
7b:fb:64:1f:5a:ef:07:e5:53:4f:62:ac:3d:52:6e:dc:30:3e:
57:40:f1:8c:97:94:af:b2:e6:15:4b:e2:59:8d:64:89:8a:98:
4d:c7:5f:0d:c1:e5:3e:cc:07:85:1c:39:20:b9:59:b8:4c:56:
ba:42:e7:7d:d4:46:69:f8:a5:20:18:72:ad:fc:c5:b6:36:cf:
2d:98:76:a3:f5:4e:07:d9:24:e0:3f:e8:1b:e5:0a:ac:48:29:
a2:3a:ae:4b:28:81:69:80:f8:c8:21:7a:d8:3e:dd:91:e2:a9:
68:0f:a2:85:73:90:71:de:e2:b2:be:98:1b:83:cc:09:40:cc:
19:58:e8:92:42:2d:34:f3:d2:3d:f8:8b:59:94:08:21:8c:a2:
6d:f2:27:a7:2e:ab:9d:49:c7:14:9a:7c:c5:d7:bf:59:53:5b:
4f:92:27:d2:23:f4:43:73:50:46:fe:a9:79:05:c8:e6:d8:49:
91:3f:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:22 2026 by rpki-client