
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json)
Hash identifier: PIgpkxwPit6+9gBZD3QXiPdAWz/YA2ZLvA1xx95E1D8=
Subject key identifier: B5:95:B9:1B:FB:80:DD:3F:CF:5D:47:F3:02:ED:44:DB:93:63:27:0D
Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
Manifest number: 0237
Signing time: Fri 17 Apr 2026 02:19:56 +0000
Manifest this update: Fri 17 Apr 2026 02:19:55 +0000
Manifest next update: Fri 24 Apr 2026 02:19:55 +0000
Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: Qxg+tj6Gm9yNAeOvtSPkRsyrd5x11qb9QdBZefXLnss=)
2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: ayWEsS+ZrZ8bPfPsMRSq4bj/hoO5bdoB3syH3D04L4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Validity
Not Before: Apr 17 02:19:55 2026 GMT
Not After : Apr 24 02:19:55 2026 GMT
Subject: CN=69e198cc-6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:c6:5d:e8:e1:8c:0b:ea:7a:a7:2a:62:c9:
51:12:32:6c:bb:90:a3:e4:d7:5e:84:4d:f6:e0:a2:
25:7c:86:c1:9b:1d:f5:a6:55:84:4c:3b:2b:5d:89:
06:be:f7:df:e2:0d:6f:e8:08:4a:54:6c:63:b7:2b:
21:77:22:45:81:74:2f:ac:12:74:43:ec:6b:a5:bc:
04:e8:6e:67:f6:46:a9:54:c2:d8:e9:ad:98:19:63:
32:ee:fc:a2:05:e3:4c:a1:c3:49:c9:5b:95:bb:a7:
e2:1b:69:0d:61:6a:2e:a2:a7:cc:ac:49:9c:72:78:
83:35:88:6a:7b:b4:34:e6:24:3a:64:12:32:30:8c:
40:32:5d:1a:7a:c9:5b:35:ef:01:09:da:56:0c:24:
93:db:c2:05:db:75:a2:33:05:4a:97:b0:06:e2:ff:
d7:64:cd:c3:27:d6:0f:ef:72:08:92:5b:20:9e:da:
8d:23:bb:33:8c:39:db:5d:27:74:51:b6:ff:55:a7:
5e:f6:fb:76:a6:15:d4:eb:83:00:96:c5:56:24:63:
90:b8:3a:1a:fc:4e:fc:b2:1c:ea:21:0c:59:4c:74:
d0:b3:a7:7f:2d:70:ff:3e:c3:59:46:af:5d:10:35:
e1:42:7c:66:e2:ca:a5:fd:b5:9c:0e:21:42:a3:85:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:B9:1B:FB:80:DD:3F:CF:5D:47:F3:02:ED:44:DB:93:63:27:0D
X509v3 Authority Key Identifier:
keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:7e:b9:95:18:e9:f2:39:f6:5e:18:ab:46:6b:4b:90:56:07:
69:0c:a6:07:96:65:d2:77:ef:c1:54:d6:cf:02:ab:85:2a:3d:
a7:8f:38:c3:b3:22:1d:d9:68:75:f3:14:d5:a4:8b:29:42:7c:
14:98:e6:4d:d1:44:b9:1d:66:c2:12:c5:75:05:d4:90:30:85:
58:22:11:62:12:1c:e7:57:c7:a4:cc:c6:09:b3:35:f7:ce:a6:
98:46:dc:e9:8a:e6:ed:1b:ec:85:e8:17:5e:a3:bb:bb:8c:8b:
0f:7b:af:2f:0b:48:8d:c0:9d:12:09:33:6e:28:70:21:26:a8:
91:31:ea:56:e1:08:47:75:79:b5:4e:3f:a0:34:54:e4:86:c1:
9e:96:22:21:e4:35:fc:dd:c5:21:24:d8:28:4c:54:40:e5:c7:
c0:c6:fd:ab:cd:f9:ce:82:0a:7e:cc:da:ad:65:e7:9f:26:b9:
5f:08:63:88:26:20:ba:cb:a6:7d:bf:81:46:20:47:a5:76:a0:
0e:89:d0:e7:9c:75:6b:6a:1c:ee:48:81:90:a7:42:a4:1a:98:
48:86:e9:59:0e:53:45:ec:6a:1b:de:a1:01:65:a5:87:b5:28:
8b:c9:a4:2b:97:38:1c:0e:d7:af:c1:60:14:f9:32:9b:09:a7:
28:d8:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:52 2026 by rpki-client