
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: VgGXe8gj0ANlgFsM/VrbF1jkUa9k4fWWUp3o4a4NpSc=
Subject key identifier: 4E:72:19:58:49:72:0D:04:46:68:32:9F:4F:79:1F:DF:63:51:7E:FF
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 0116
Signing time: Sun 01 Mar 2026 23:10:24 +0000
Manifest this update: Sun 01 Mar 2026 23:10:24 +0000
Manifest next update: Sun 08 Mar 2026 23:10:24 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: v3YC6o+haCMOuMoogxKgC6mSTV52A1k85cE6u9FqH1I=)
2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Mar 1 23:10:24 2026 GMT
Not After : Mar 8 23:10:24 2026 GMT
Subject: CN=69a4c760-8485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:d9:19:f5:07:52:1b:db:0d:0f:41:8b:5a:
5f:b9:92:92:8f:41:bb:11:28:9b:f5:ea:04:50:18:
25:4a:c2:ce:09:01:59:0f:25:33:21:7d:dd:42:ed:
fd:d9:12:c5:48:e7:22:cc:8b:93:de:4d:d3:28:cf:
8b:18:c5:80:c4:fe:f5:d5:69:cb:0e:54:91:3e:ad:
14:18:6a:00:21:d9:e1:e2:7b:86:7b:0c:fe:07:89:
f3:9d:60:2a:cd:71:85:77:bb:78:f4:2d:d9:63:ec:
fe:6a:ee:e8:d7:6b:5b:34:41:84:1b:77:b9:3e:69:
97:ef:1e:2b:94:9f:05:7c:de:5f:2c:a5:26:1e:16:
de:06:28:6c:ad:e8:fd:5b:46:5d:64:23:07:fd:4a:
2b:94:f7:f2:55:f7:00:a5:68:94:99:18:c5:10:2b:
51:fd:49:f9:70:0b:17:85:d9:4b:82:1d:96:ca:bc:
ab:63:98:f1:8b:bf:53:29:7d:cd:6c:45:30:15:d8:
e7:91:65:86:28:11:97:7e:ff:e9:51:89:ac:79:c2:
41:2c:81:e1:f4:41:bb:56:a7:32:42:2c:bd:ed:cd:
cb:8b:b3:43:e2:fc:a1:78:9b:e5:90:d0:ac:d2:c5:
d0:f0:dc:c5:17:5b:17:b0:32:d6:91:6a:10:f2:5b:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:19:58:49:72:0D:04:46:68:32:9F:4F:79:1F:DF:63:51:7E:FF
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:86:b8:eb:18:e5:d7:90:e7:bb:e9:b6:68:95:88:b1:d5:85:
0f:44:62:aa:64:1a:a6:52:1d:54:a1:68:c7:00:4f:0a:d2:9d:
f3:ed:0d:34:c6:1f:60:ef:03:92:0b:24:ca:82:a7:f7:fa:3e:
c1:aa:5f:8a:a5:65:cf:1e:a6:54:2a:38:5d:02:a8:cd:17:37:
ac:ae:eb:66:8f:23:4b:5d:4e:70:6e:e9:a6:c6:c5:f8:bc:a0:
db:1b:0a:d8:e0:6c:f8:dd:b0:ce:71:e3:5f:8d:29:9d:86:ae:
e9:da:eb:27:ad:8f:3a:68:f8:c3:df:c6:9f:f0:fc:c0:c0:5a:
2a:e1:06:dd:3b:3c:fe:92:a0:b2:c5:b7:05:56:5e:4f:72:34:
07:09:0c:3b:67:e2:12:ac:17:c2:44:06:0c:94:70:d6:a2:5b:
d3:2d:48:55:6d:1a:be:18:77:b7:5a:74:2a:6e:6f:73:37:d3:
2e:f6:75:c6:14:85:85:f9:16:f5:b7:f5:3a:9a:f0:7c:a9:ec:
1f:db:ab:97:09:67:57:4a:49:04:b5:1c:d2:37:a2:3a:5b:76:
b5:5a:28:43:b5:f9:a3:69:9e:8f:d2:02:82:07:9b:d5:f1:ec:
f2:ce:49:4d:f9:24:dc:9f:b1:51:e1:d2:7b:b3:ac:b3:87:26:
96:66:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:31 2026 by rpki-client