
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier: IbOd2EMCqssHQ90hB948k+mitdX7ft3ehiroTtZK6Ts=
Subject key identifier: A0:9E:B6:D4:68:E7:A5:04:6E:83:FB:7B:A3:BA:FE:AC:74:9B:81:AA
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number: 047A
Signing time: Sat 13 Jun 2026 00:07:11 +0000
Manifest this update: Sat 13 Jun 2026 00:07:10 +0000
Manifest next update: Sat 20 Jun 2026 00:07:10 +0000
Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: HghlnHkKUUjjl8RoXO4roEYNeYjSy/yp20ojEQ602kM=)
2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Validity
Not Before: Jun 13 00:07:10 2026 GMT
Not After : Jun 20 00:07:10 2026 GMT
Subject: CN=6a2c9f2f-6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:d2:2c:f8:90:e0:68:1a:b2:a7:80:f4:01:
5a:99:a4:6f:14:34:26:fa:6e:b0:02:da:81:90:ec:
ae:13:c9:cc:d9:a6:cc:cc:8b:d9:9d:58:db:77:d2:
92:b4:00:50:bc:c6:7e:bb:50:d1:e7:c6:cd:94:74:
3e:24:57:53:9f:3b:d9:61:e1:6f:8a:62:0e:be:0f:
ec:cd:f4:e8:0b:13:cf:20:c1:cf:43:39:b8:fe:dc:
ee:85:05:19:03:0c:a6:9e:4b:f5:80:54:36:cf:84:
f5:b7:69:f2:8c:e0:8f:02:ba:77:ae:9e:1a:50:1d:
28:66:05:5e:bc:4e:e5:dc:00:f4:7f:98:01:31:d2:
37:89:69:c3:7c:9e:b7:5c:4e:0b:5d:6c:6b:9a:f6:
db:a1:68:c3:3f:43:1b:a3:a0:aa:a7:aa:21:ab:f7:
6b:6e:45:76:e6:5e:17:0e:dc:73:3f:42:1b:d3:6e:
f1:55:1f:07:24:b1:6f:45:fa:5c:96:83:1c:c9:51:
dd:38:79:be:76:10:f7:dd:f8:34:bc:16:7e:d4:b8:
4b:c8:8a:98:3a:71:96:32:d9:16:e0:69:83:88:17:
04:5e:92:7b:88:70:3b:12:47:e3:fa:76:42:b0:34:
ab:3f:27:00:49:66:30:a7:59:47:72:cc:9d:38:08:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:B6:D4:68:E7:A5:04:6E:83:FB:7B:A3:BA:FE:AC:74:9B:81:AA
X509v3 Authority Key Identifier:
keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:66:17:55:bd:f4:02:6d:63:a5:93:c9:66:42:2c:4d:43:a4:
81:9f:09:e3:cc:fb:7b:a4:a6:e2:34:7b:c7:e3:ee:a3:7e:58:
87:0a:2b:e4:ab:fd:7d:8f:01:2e:88:83:9f:c8:ad:26:13:bf:
6b:fe:2c:8e:2b:ef:23:c9:60:d9:c9:82:f4:cd:d2:78:ca:c8:
00:46:43:02:d6:27:99:33:2c:50:de:c8:a7:78:93:39:a9:34:
8f:82:e8:fc:4b:ca:bc:a3:c4:08:e9:4d:41:06:c1:8e:3e:25:
2b:c7:05:a3:2c:d8:a3:0d:10:54:24:09:c6:e0:c4:16:1b:8a:
4d:c1:61:8b:06:03:37:f5:dd:42:1e:bc:24:6a:79:d6:1d:9b:
71:35:ae:dd:3a:2d:19:aa:63:95:0a:c1:a1:69:64:15:c0:b7:
86:12:56:df:81:c2:4c:b7:cb:21:72:b5:6f:ef:d9:6d:ab:35:
26:0f:c1:50:d0:6d:dc:e1:b1:f9:f0:57:5a:99:a3:d1:82:f9:
da:03:75:02:46:c3:65:4a:ce:41:de:26:05:6e:0b:8f:da:39:
26:1d:64:f1:e5:ae:b1:7c:9d:37:70:96:a0:2f:ac:51:31:11:
25:76:0b:af:89:90:cd:3e:e6:30:71:ec:2f:eb:37:19:68:43:
f7:b6:3a:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYwNjEzMDAwNzEwWhcNMjYwNjIwMDAwNzEwWjAYMRYwFAYD
VQQDEw02YTJjOWYyZi02ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArz3SLPiQ4GgasqeA9AFamaRvFDQm+m6wAtqBkOyuE8nM2abMzIvZnVjbd9KS
tABQvMZ+u1DR58bNlHQ+JFdTnzvZYeFvimIOvg/szfToCxPPIMHPQzm4/tzuhQUZ
Awymnkv1gFQ2z4T1t2nyjOCPArp3rp4aUB0oZgVevE7l3AD0f5gBMdI3iWnDfJ63
XE4LXWxrmvbboWjDP0Mbo6Cqp6ohq/drbkV25l4XDtxzP0Ib027xVR8HJLFvRfpc
loMcyVHdOHm+dhD33fg0vBZ+1LhLyIqYOnGWMtkW4GmDiBcEXpJ7iHA7Ekfj+nZC
sDSrPycASWYwp1lHcsydOAjgMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCettRo
56UEboP7e6O6/qx0m4GqMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ
ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApWYXVb30Am1jpZPJZkIsTUOkgZ8J48z7e6Sm4jR7x+Puo35Yhwor5Kv9fY8B
LoiDn8itJhO/a/4sjivvI8lg2cmC9M3SeMrIAEZDAtYnmTMsUN7Ip3iTOak0j4Lo
/EvKvKPECOlNQQbBjj4lK8cFoyzYow0QVCQJxuDEFhuKTcFhiwYDN/XdQh68JGp5
1h2bcTWu3TotGapjlQrBoWlkFcC3hhJW34HCTLfLIXK1b+/Zbas1Jg/BUNBt3OGx
+fBXWpmj0YL52gN1AkbDZUrOQd4mBW4Lj9o5Jh1k8eWusXydN3CWoC+sUTERJXYL
r4mQzT7mMHHsL+s3GWhD97Y6Ag==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:33 2026 by rpki-client