
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier: GYF8tHQkpByZHYRSO3K5KSgumkXzf/GSkL+EiiS11uk=
Subject key identifier: A8:4B:19:84:AF:3D:60:7E:B9:3C:21:B3:78:B3:4C:09:E3:39:57:B8
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial: 0446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number: 0441
Signing time: Sun 01 Mar 2026 01:02:16 +0000
Manifest this update: Sun 01 Mar 2026 01:02:15 +0000
Manifest next update: Sun 08 Mar 2026 01:02:15 +0000
Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: qgBGg7wGvWHSuQs7pP5d18or7n5igU9WItLtkY4H6MQ=)
2: 97D35382924311EC927C972FC4F9AE02.roa (hash: zuRVUVZ4oHP5FjkV3A62oHScUVN3Hx+6pzgHV8nmjoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Validity
Not Before: Mar 1 01:02:15 2026 GMT
Not After : Mar 8 01:02:15 2026 GMT
Subject: CN=69a39018-9169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:62:ca:08:f2:21:fd:32:eb:f0:63:2d:57:
b7:27:1b:92:0f:9b:fe:ee:9b:d2:76:40:64:5e:d8:
c5:4e:ff:ac:dd:5f:2c:aa:bc:23:fd:31:2a:dc:15:
ca:e4:24:f9:61:12:78:35:16:a0:35:d2:e8:04:dc:
a4:fb:23:60:b6:58:1f:0d:fb:3e:43:ba:72:3f:77:
83:60:82:a9:b8:ea:b3:8c:76:eb:8f:86:1e:3e:74:
88:87:0b:9f:f7:5e:2c:50:cc:4c:05:c4:e5:d1:db:
4c:c5:7d:c7:0a:42:77:6c:9a:f0:90:d0:27:d8:e7:
b9:87:bf:38:1e:ca:5c:6a:e0:09:71:97:b0:85:b9:
a7:b8:0c:f7:4a:bc:d3:25:74:a0:aa:6c:1d:96:99:
40:a5:04:d2:ce:39:d2:b2:4b:a5:44:73:9c:05:18:
44:25:76:f4:65:30:fb:30:7b:c4:f6:98:27:47:6c:
5e:51:80:eb:ff:1a:e3:7b:e8:ce:89:7f:59:34:ab:
8a:dc:d2:55:c9:f0:f2:5d:d8:18:80:a0:4a:a7:7f:
f2:08:aa:e4:9d:d6:bc:da:aa:74:d5:cf:b5:13:c7:
f9:c3:8c:f7:d1:dd:70:6b:90:b2:54:b6:06:6a:55:
ab:f8:dd:a2:9c:84:2c:e5:89:97:dd:f4:93:44:ee:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:19:84:AF:3D:60:7E:B9:3C:21:B3:78:B3:4C:09:E3:39:57:B8
X509v3 Authority Key Identifier:
keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:ee:bb:3a:f0:73:c6:65:60:5d:0f:fc:9c:69:01:48:a8:
06:47:f0:66:1e:c4:df:de:54:4a:48:f3:a9:6a:93:cf:9e:1a:
58:5d:b0:de:e3:4b:8f:c8:3a:ed:ec:be:e6:0c:71:ee:0f:cc:
da:7d:e3:e9:0d:bc:37:98:f7:58:cc:b4:d3:65:1d:38:9a:74:
9b:9d:07:28:e6:02:f6:b4:bd:cc:c9:5f:73:84:24:ed:94:a8:
0a:e4:2b:73:2d:53:bb:e8:4b:17:d2:8b:f6:24:47:f1:93:1f:
8b:c0:3c:24:83:73:76:3b:ad:9e:73:d3:2b:f6:7b:fb:db:8b:
57:eb:a7:c6:1e:0a:61:fe:60:ac:4a:b3:63:c0:f7:0c:87:bf:
f1:2b:f2:e4:56:4d:32:d8:f5:21:b0:11:22:d5:81:d6:76:bb:
08:1d:ea:c5:93:1a:9f:98:d4:d3:22:16:5f:06:f4:c2:2b:8a:
d2:91:17:49:8f:c2:61:8d:18:b7:e1:d8:52:af:de:71:35:61:
58:95:90:94:2b:1e:bb:a3:61:0d:77:b5:f2:31:61:13:7d:26:
f9:0d:11:01:68:45:52:77:21:54:ac:bd:91:76:a2:bd:b8:4b:
6c:77:7d:a0:34:77:9b:b8:af:d2:b9:f1:ba:3c:b5:8b:c2:e3:
a3:08:4e:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYwMzAxMDEwMjE1WhcNMjYwMzA4MDEwMjE1WjAYMRYwFAYD
VQQDDA02OWEzOTAxOC05MTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAllZiygjyIf0y6/BjLVe3JxuSD5v+7pvSdkBkXtjFTv+s3V8sqrwj/TEq3BXK
5CT5YRJ4NRagNdLoBNyk+yNgtlgfDfs+Q7pyP3eDYIKpuOqzjHbrj4YePnSIhwuf
914sUMxMBcTl0dtMxX3HCkJ3bJrwkNAn2Oe5h784HspcauAJcZewhbmnuAz3SrzT
JXSgqmwdlplApQTSzjnSskulRHOcBRhEJXb0ZTD7MHvE9pgnR2xeUYDr/xrje+jO
iX9ZNKuK3NJVyfDyXdgYgKBKp3/yCKrknda82qp01c+1E8f5w4z30d1wa5CyVLYG
alWr+N2inIQs5YmX3fSTRO7BpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhLGYSv
PWB+uTwhs3izTAnjOVe4MB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ
ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdqruuzrwc8ZlYF0P/JxpAUioBkfwZh7E395USkjzqWqTz54aWF2w3uNLj8g6
7ey+5gxx7g/M2n3j6Q28N5j3WMy002UdOJp0m50HKOYC9rS9zMlfc4Qk7ZSoCuQr
cy1Tu+hLF9KL9iRH8ZMfi8A8JINzdjutnnPTK/Z7+9uLV+unxh4KYf5grEqzY8D3
DIe/8Svy5FZNMtj1IbARItWB1na7CB3qxZMan5jU0yIWXwb0wiuK0pEXSY/CYY0Y
t+HYUq/ecTVhWJWQlCseu6NhDXe18jFhE30m+Q0RAWhFUnchVKy9kXaivbhLbHd9
oDR3m7iv0rnxujy1i8LjowhOFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:26 2026 by rpki-client