
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json)
Hash identifier: eT69V9lFuFsPQ5aeOQDMxS/axhEKiJme65wcEgR/pfQ=
Subject key identifier: F9:74:E8:C8:BE:C9:F1:2A:DF:C5:A8:12:5E:21:14:DA:0E:79:5D:0F
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
Manifest number: 6E
Signing time: Sun 01 Mar 2026 09:16:25 +0000
Manifest this update: Sun 01 Mar 2026 09:16:24 +0000
Manifest next update: Sun 08 Mar 2026 09:16:24 +0000
Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: m8cAWCbXkUi3vqn6obPHBH5/cNoU3TL6IGXp5/E4g9c=)
2: 4197AB74735611F080D68151C4F9AE02.roa (hash: KJWSfbOSquMIKpz7QMLAGjevQAyuwiO61hki9DtvT9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Validity
Not Before: Mar 1 09:16:24 2026 GMT
Not After : Mar 8 09:16:24 2026 GMT
Subject: CN=69a403e9-cc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:65:f0:c8:23:ba:fd:8d:f7:cd:40:ae:bd:
7b:c4:39:bc:0e:5c:e5:4c:6d:b8:5c:4a:f0:3f:e0:
16:bb:31:d9:42:50:e0:74:ef:6b:fc:b3:26:b5:cc:
5a:37:60:58:bc:b7:80:ef:42:fe:e0:d6:99:4b:cf:
bc:5d:86:7c:fd:5d:26:53:3a:e5:f5:85:98:32:2f:
85:58:d0:fa:03:7d:e5:88:05:e7:8d:74:a1:77:34:
0f:98:28:ed:b4:2f:0a:e5:ce:67:8e:c4:ab:cf:8b:
42:90:6a:7c:d7:87:21:81:96:13:43:cd:f8:fd:e5:
11:a3:dc:58:97:20:b7:6b:03:3d:6e:33:5e:1a:e4:
b3:39:7a:5f:81:47:80:98:df:7c:46:72:77:f0:3c:
fc:69:e4:8d:b9:3a:c4:c5:60:93:df:55:e5:63:67:
58:3b:ac:91:52:b8:4e:af:a8:c7:6a:44:7c:b1:01:
5a:16:97:f0:86:60:c9:dd:19:cf:88:ef:59:84:a8:
a8:0e:18:15:93:fd:f2:75:97:20:88:bf:8e:ac:aa:
5c:09:e8:f1:f9:04:3e:6c:15:fc:9e:a8:88:6d:5f:
2e:81:87:f8:2e:09:92:8b:5b:28:f6:ff:6a:3b:b8:
b0:9c:77:fc:7e:fc:73:39:db:74:ad:e6:17:4b:b7:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:E8:C8:BE:C9:F1:2A:DF:C5:A8:12:5E:21:14:DA:0E:79:5D:0F
X509v3 Authority Key Identifier:
keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:98:42:91:82:0d:7e:60:20:37:b9:0b:fa:3b:3f:c1:d8:b7:
d8:0d:25:43:7b:50:ac:3d:3f:ab:7a:b9:4f:08:05:44:4d:59:
8d:7f:51:04:4e:aa:aa:65:56:2a:d7:57:63:11:c6:d4:7f:46:
cf:22:a1:fa:be:ab:cd:ec:ab:78:94:0f:ba:63:6b:5d:ab:20:
3e:d0:11:4f:78:cf:dc:3e:01:2d:b4:7d:5b:0a:5c:35:4f:5f:
52:c0:e0:23:b1:4b:63:03:0b:bd:b6:5f:f0:db:c0:dc:e5:1f:
3f:03:8a:70:65:7a:39:41:b8:ef:9b:ec:f1:2a:3c:76:48:c5:
aa:03:c1:5f:d8:1c:b9:89:76:44:8d:98:07:08:fa:c6:19:85:
f0:fa:28:3d:a7:63:3b:7b:8d:72:49:91:81:94:88:01:55:82:
fd:19:cd:0a:fe:c2:57:c4:8f:5c:34:57:bd:e6:78:26:d5:a2:
cb:70:2e:ab:09:74:e3:94:6a:43:d2:d5:a1:69:5f:80:fb:19:
b0:1e:07:3c:ec:e8:b0:2a:d5:24:86:d2:77:1c:7a:dd:a7:30:
93:65:78:8f:f3:ea:13:8b:28:ed:6a:5d:b0:4d:58:f2:7c:7a:
22:cf:18:6c:1f:11:25:7d:55:29:48:a2:67:b5:96:c8:84:cd:
75:41:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:41 2026 by rpki-client