
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json)
Hash identifier: G3ZZnP9Y14EC9gAZnooIcyEy0gj94l+LElY8sqJTXrc=
Subject key identifier: 18:8C:2A:A0:39:7D:3C:FB:FD:2B:59:B5:1A:99:86:16:88:B5:CE:26
Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
Manifest number: 021E
Signing time: Mon 02 Mar 2026 00:49:37 +0000
Manifest this update: Mon 02 Mar 2026 00:49:35 +0000
Manifest next update: Mon 09 Mar 2026 00:49:35 +0000
Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: duehMw9isYlc9XDtS09SN/trEcxnLbxSIGpJmr57pVc=)
2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Validity
Not Before: Mar 2 00:49:35 2026 GMT
Not After : Mar 9 00:49:35 2026 GMT
Subject: CN=69a4dea1-e10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:1b:22:42:c7:95:3b:6a:92:41:39:1d:e0:
3b:7e:30:f9:fd:26:06:41:81:d6:d2:db:78:59:6c:
84:16:ab:5c:4d:15:33:99:c9:44:4c:bb:9d:77:4c:
0b:e6:a7:7d:c9:d0:a6:11:44:e8:21:d0:7a:10:2f:
37:b9:b2:d5:17:85:c4:24:d2:7d:9d:ec:f7:33:a4:
0c:23:e7:c9:23:1f:be:bc:ca:62:d6:20:fc:eb:c8:
a0:4b:15:b3:a0:4a:2f:29:6d:37:05:45:e3:87:b4:
25:8f:9a:12:54:b5:45:33:30:f5:8a:e4:4e:7d:f0:
14:87:5a:c3:f6:16:a0:26:6d:ee:9d:a3:06:2d:1e:
f7:9e:79:1f:11:23:40:10:b5:27:af:77:26:63:52:
0d:2c:cb:34:51:f4:56:ae:c9:a1:c9:c7:d4:1b:eb:
ce:1f:2a:d7:fa:95:3c:9c:da:b8:d2:05:db:4a:a6:
17:54:8f:09:55:dc:7b:58:41:d4:77:cd:19:c3:0e:
19:64:48:67:15:05:55:c2:d5:64:ab:03:27:3c:35:
45:b6:4b:39:ee:7b:25:fa:47:b7:8b:c4:00:80:87:
5b:e8:ea:a5:e3:fe:bd:4d:88:7f:ec:0d:1e:a1:bb:
af:a1:96:f3:ca:30:34:8f:a4:0e:51:f1:12:00:8e:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:2A:A0:39:7D:3C:FB:FD:2B:59:B5:1A:99:86:16:88:B5:CE:26
X509v3 Authority Key Identifier:
keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ba:2f:83:e7:75:92:78:f7:3e:53:39:29:87:61:2e:63:70:
2a:c5:71:1d:ba:e2:14:38:cc:c7:6f:4e:c4:d5:b5:c9:39:f1:
64:a1:b2:64:40:0a:ed:c9:e0:4a:ef:e1:0b:a9:53:49:f0:84:
6b:a7:75:11:93:cb:44:03:7d:95:7f:16:7b:6f:83:64:60:b4:
08:a3:4a:cf:7f:6e:cf:c6:e6:f6:c2:2c:78:d0:b0:33:4d:1b:
76:d3:11:a6:bf:68:21:ee:33:a8:09:c4:74:82:6a:f9:e2:58:
7b:4b:cb:65:5b:1c:fa:6d:f4:97:f8:f4:55:1f:2c:ad:2d:79:
6e:20:68:d4:d0:5a:b0:cf:bb:ce:c6:bb:ad:ed:b1:65:ad:6c:
23:99:7f:3b:11:5f:d6:4d:b7:0a:10:66:c3:89:0f:1a:fd:c3:
fa:2a:e4:67:e5:b1:15:fb:7a:33:5f:29:37:43:c0:65:67:ab:
87:e7:a0:90:90:83:7f:c4:1b:0d:d6:9c:61:62:91:76:84:b8:
f4:da:86:3a:7a:b9:dc:a0:7d:b7:4b:e5:13:71:65:16:ff:09:
19:98:17:96:7e:11:5e:4a:96:b0:4f:41:73:34:14:bf:e3:d0:
94:91:27:76:48:22:23:89:9b:32:7a:37:51:fd:0c:64:d0:32:
e9:15:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:32 2026 by rpki-client