
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json)
Hash identifier: 9DkOSDGB8f0+LAHwN7JZ8CiIFwpuGvfcYRQahdxcE0k=
Subject key identifier: E7:4B:39:95:66:AF:C3:A0:33:6C:2C:2F:BC:C8:A7:35:05:2E:13:1D
Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 05:43:05 +0000
Manifest this update: Fri 17 Apr 2026 05:43:04 +0000
Manifest next update: Fri 24 Apr 2026 05:43:04 +0000
Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: zRK+D7cf/Mc4/V/98hnAROym4zPMtjkPoKvbb3NoHCY=)
2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Validity
Not Before: Apr 17 05:43:04 2026 GMT
Not After : Apr 24 05:43:04 2026 GMT
Subject: CN=69e1c869-3693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:1a:c0:2f:b1:17:dc:28:10:6c:aa:4d:d0:
e3:d5:f8:28:01:9a:91:14:a3:83:97:53:4f:ec:53:
cc:26:c4:56:c4:3e:47:da:8e:39:aa:79:ab:57:08:
c3:15:a6:2e:b3:4b:04:96:a7:42:5f:bf:5a:4c:fc:
b4:13:8b:b1:93:c7:6f:39:e9:23:0c:6f:63:f6:bd:
9f:ad:d8:2f:60:ca:e7:f4:af:d3:de:ce:ac:d5:76:
f4:16:ac:4f:3b:26:41:79:4a:c8:39:db:13:91:6c:
1b:bd:7c:07:29:b8:d9:dd:d2:0b:18:8d:68:c5:e3:
1d:50:88:c9:c5:ca:05:c9:eb:bc:9b:c1:f0:82:57:
85:35:ee:ea:ce:64:9e:31:34:f2:0f:80:8c:eb:f5:
51:41:a8:84:15:fd:f9:3b:24:00:f1:1f:65:47:33:
d7:29:d8:87:3a:4d:54:9f:b0:50:e4:14:fb:dc:69:
46:c5:f2:4c:50:3d:e4:7d:e2:b8:aa:cf:ed:38:a4:
99:9a:9d:64:97:5b:5e:02:ce:27:bf:d1:9b:93:54:
a2:28:fe:cd:88:5e:75:35:1c:c9:5d:17:9c:c0:53:
5c:7e:c1:dc:09:08:ed:e6:63:20:35:a1:c1:77:c2:
6f:05:d8:09:2a:76:f8:0f:37:4a:a5:d6:14:a0:9f:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:39:95:66:AF:C3:A0:33:6C:2C:2F:BC:C8:A7:35:05:2E:13:1D
X509v3 Authority Key Identifier:
keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b2:bf:c7:e1:49:e7:10:65:42:56:df:33:ae:db:8a:a1:18:
a6:ba:34:c4:1e:fd:bf:59:65:93:a3:a6:ba:6e:4b:ed:dc:b7:
a0:61:9f:e5:bd:0f:be:3a:f1:68:51:b7:9c:60:b7:2c:82:bd:
26:90:dd:2e:32:a5:45:c7:9c:f6:31:d9:9b:ab:4d:bc:64:da:
cd:44:ff:57:a5:26:e6:50:ec:b1:38:9d:8a:4c:c9:9c:b3:25:
d2:d0:8c:fe:dd:a8:60:78:e6:d9:fd:92:3a:8d:08:f3:a7:b8:
a0:90:cf:b8:4e:15:f5:0a:41:c4:07:e3:bc:ff:d2:33:36:88:
1c:07:22:9b:92:ac:43:dc:86:78:48:96:28:d4:08:c4:d7:23:
60:5f:f2:3b:96:0f:c7:9d:0b:9e:f8:80:7e:de:a1:f5:f3:4d:
33:4c:43:c4:85:ca:21:af:fc:22:8a:cd:09:07:f2:4a:8d:6b:
63:d1:5e:eb:08:e8:72:3a:14:d2:74:64:38:86:2d:98:d2:2b:
8e:b1:de:13:40:02:96:a0:c1:32:96:a7:be:15:94:a2:fa:19:
ee:7c:4b:fa:ab:72:da:a2:05:a7:93:36:f0:d2:a3:ca:f0:a4:
3a:89:30:c2:e4:30:a9:d0:07:36:5a:aa:2e:b3:1e:e9:19:3c:
6a:42:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:47 2026 by rpki-client