
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File: 2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier: f9T33DXb1vcC2BY7sMoN/KnP9bDufcpOPiVQBES7TIc=
Subject key identifier: 2C:AF:DC:0F:B5:6F:6A:DF:14:60:A6:70:51:D9:49:B8:16:0C:09:D0
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer: /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number: 3F
Signing time: Sun 01 Mar 2026 09:52:50 +0000
Manifest this update: Sun 01 Mar 2026 09:52:50 +0000
Manifest next update: Sun 08 Mar 2026 09:52:50 +0000
Files and hashes: 1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: ltWbny0bkwCQWbqzts+b9+ole4EunuaXl8aA5MwVEhw=)
2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Validity
Not Before: Mar 1 09:52:50 2026 GMT
Not After : Mar 8 09:52:50 2026 GMT
Subject: CN=69a40c72-31b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:e7:04:00:3c:fa:c4:7b:37:2d:98:85:71:
b0:4f:88:32:4f:13:04:a9:2b:4a:ab:6c:11:e1:cd:
4a:d9:63:48:79:5c:a4:b4:58:f2:ce:05:12:26:71:
57:26:ad:11:d2:03:ad:b3:92:36:18:65:5b:1b:56:
a5:7b:c1:46:f5:33:d7:a4:a4:33:df:e6:0c:5d:42:
e4:d2:80:14:e7:31:fc:a0:8e:25:98:d1:79:35:a6:
ae:bf:2c:dd:ab:32:81:da:40:69:c6:8f:85:6a:15:
9b:1b:9c:48:0c:f6:ed:dc:df:61:07:83:2a:5d:bd:
0e:65:4f:df:71:a5:45:34:a4:58:6f:25:68:f8:37:
38:79:3f:0a:7f:77:7f:3b:ee:2d:e5:03:59:06:df:
e2:73:bd:e7:e6:91:81:93:b6:f8:8a:56:83:6d:9b:
da:22:d7:a2:04:b3:db:f9:bf:97:ab:4e:45:44:52:
a0:4f:3f:c4:cd:74:f5:f1:a5:bd:af:9e:f8:47:4f:
63:ab:d9:1f:db:36:f2:28:46:7b:35:55:53:b0:48:
c4:8b:ad:f3:ec:91:f9:95:45:bc:c6:5d:65:e5:0b:
3b:ee:42:df:8f:98:e0:35:4a:61:14:7d:cb:86:54:
44:ad:97:5d:db:56:e3:de:8f:23:bd:d1:ef:9e:02:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:DC:0F:B5:6F:6A:DF:14:60:A6:70:51:D9:49:B8:16:0C:09:D0
X509v3 Authority Key Identifier:
keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:3d:94:4b:52:62:8b:09:42:3c:1c:4b:76:09:6b:ae:02:74:
c6:a9:ed:2e:8b:43:e1:2a:88:be:e0:ef:63:a0:83:80:ab:ff:
9e:68:5f:24:de:ea:0a:1f:3e:31:98:76:b5:2e:6a:3a:59:02:
84:c8:a7:33:85:8e:e4:35:7d:87:92:d7:5e:58:a1:56:9a:26:
f6:31:2b:bc:1e:3c:17:d2:ac:6e:77:6c:e3:23:00:69:e4:6c:
f1:aa:51:05:65:af:54:18:75:56:62:9f:90:25:b8:22:15:5e:
1e:9c:c8:00:41:bb:80:1c:e9:68:bd:c6:51:e3:2a:ef:d0:5e:
31:78:d3:e8:80:55:e8:65:0a:d3:7f:dc:f4:39:94:6a:10:9f:
f4:f1:37:c9:06:dc:b1:19:b8:eb:7d:ff:16:8e:a6:e6:47:4a:
ff:88:fc:e2:41:6f:4b:94:3f:56:55:f7:23:8e:a3:bc:a3:30:
cd:e4:58:2e:84:d9:d1:ed:7a:72:e7:58:ea:c4:68:c9:a2:27:
55:2a:91:7c:49:b2:21:97:c2:6a:82:e3:42:8c:e5:2f:db:c6:
43:d7:ed:c2:ac:72:d2:a8:f9:6e:c5:da:e4:41:c4:20:19:f2:
f7:2a:8c:2c:f0:17:ff:29:de:19:65:42:5e:12:d7:d8:9f:27:
66:1c:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:28 2026 by rpki-client