
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier: teKlES2rTY2l1bHNshe4X7UaZDCDGapm8vAGARg/v2U=
Subject key identifier: F9:3C:CC:0D:23:11:E4:3C:DA:8E:CA:25:2A:6B:0A:D7:12:55:AE:5D
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial: 04C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number: 04B9
Signing time: Thu 15 Oct 2026 00:17:25 +0000
Manifest this update: Thu 15 Oct 2026 00:17:25 +0000
Manifest next update: Thu 22 Oct 2026 00:17:25 +0000
Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: W0d0j8yswJeGh5qNhOECAtXPXOB3hYPGC+Ah9jemGp8=)
2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 00:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Validity
Not Before: Oct 15 00:17:25 2026 GMT
Not After : Oct 22 00:17:25 2026 GMT
Subject: CN=6ad01b95-8af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:43:2a:d0:13:1c:06:f5:69:81:bf:f3:cb:
94:b3:50:e9:7e:77:33:1e:e5:fa:bb:43:79:63:76:
a1:e6:99:be:6c:85:14:d3:13:fd:33:89:98:29:e9:
06:f3:e2:eb:f4:01:7c:b9:de:49:10:34:f8:d3:d5:
50:32:2d:85:b5:43:14:36:1a:6f:0e:f2:f4:da:47:
44:56:be:9c:97:38:a8:6f:63:5a:ba:7a:0d:1f:3f:
ee:65:a0:6d:a5:f4:f4:b0:51:24:ae:28:2e:41:f9:
c2:c5:5d:2d:cb:b1:1d:f0:2d:3f:f6:e5:1a:1c:91:
1a:0f:4a:46:30:28:88:86:97:28:2f:a9:1d:ab:d7:
4f:f2:84:ff:a3:75:a5:e6:ea:76:cd:b5:0d:47:d1:
e5:ca:24:03:d9:15:74:95:46:41:02:25:07:c5:26:
88:0c:6d:45:0a:dd:fe:15:37:81:44:3c:9d:4f:18:
21:fe:25:37:18:f7:5e:8c:fd:73:54:00:61:b3:db:
ff:db:89:ce:7f:9f:d9:81:fb:d0:dd:83:b1:c9:66:
c7:a5:48:5f:f1:ca:35:f4:7b:fa:da:dc:8f:5f:2f:
4b:58:cc:ce:44:f7:8c:d8:a4:d5:54:70:eb:a6:5b:
d3:20:fe:6c:2d:76:6e:69:e8:cf:e4:7d:a5:5d:2a:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:CC:0D:23:11:E4:3C:DA:8E:CA:25:2A:6B:0A:D7:12:55:AE:5D
X509v3 Authority Key Identifier:
keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:8f:d0:27:e3:06:1b:58:9e:d5:17:64:2a:6b:13:9b:8c:d9:
d3:ea:ae:b9:9d:f5:d4:90:95:cd:13:d0:ef:74:90:5c:cb:1f:
78:13:7d:6e:fc:f4:73:36:55:41:2e:72:ac:40:87:d0:77:5e:
10:c9:48:21:b2:26:a9:e7:46:b4:49:59:b7:b5:43:b3:56:ed:
f5:8c:c8:67:d2:cf:9d:d9:eb:18:49:55:7e:36:88:7e:af:aa:
92:c0:1a:ef:b6:28:ba:38:40:de:88:04:69:12:9b:2d:3f:81:
17:8b:7e:56:86:4d:3c:6c:82:83:e5:4c:6d:68:93:ab:32:11:
42:da:f1:72:18:e7:21:7f:f8:0e:12:52:85:b4:12:b0:e0:e7:
a4:72:eb:ce:80:da:5e:7e:1d:6b:8b:95:e7:3b:99:01:9c:0d:
a3:2d:23:26:93:62:23:e2:b1:ca:da:5f:09:c0:71:5d:78:32:
d2:e3:3f:59:84:b6:7c:62:3c:a0:90:76:d0:69:a4:ae:c7:d0:
ef:9a:e7:4e:5f:c5:72:a8:90:90:43:77:99:b0:8e:d2:d6:dd:
9d:d4:90:c2:24:93:ce:bc:2f:a9:3e:a1:7e:34:de:04:52:89:
d7:33:02:ed:f4:74:05:a2:2d:4a:92:e0:f4:41:da:25:ce:f2:
15:93:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:57 2026 by rpki-client