
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json)
Hash identifier: gPKhzVZEiGU9pVSgIuZA9U65Pui0kGUrWMWXgz70MEI=
Subject key identifier: 1B:9D:29:58:C8:75:B4:BD:FF:32:A7:A7:E3:CA:1A:0D:9C:95:CE:AB
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
Manifest number: 8F
Signing time: Mon 02 Mar 2026 01:22:55 +0000
Manifest this update: Mon 02 Mar 2026 01:22:53 +0000
Manifest next update: Mon 09 Mar 2026 01:22:53 +0000
Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: fGmEXeP0fdAkGlk3yCRynbWnSSE9KtbOY1EnaE5eFL4=)
2: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=)
3: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=)
4: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=)
5: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Validity
Not Before: Mar 2 01:22:53 2026 GMT
Not After : Mar 9 01:22:53 2026 GMT
Subject: CN=69a4e66f-7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:ff:75:7b:0b:fb:d3:13:06:9a:10:f5:b5:
17:cd:e3:3f:cb:6b:9d:61:19:a9:bc:1a:f6:9b:4c:
1f:f2:49:01:d3:dc:88:b1:65:20:39:9d:3f:6c:af:
22:e4:5b:0c:54:e2:8d:eb:69:26:8e:83:b9:b8:40:
b8:4a:5b:5a:4f:f2:a6:66:c8:ad:e9:7f:18:3a:d6:
ed:d1:23:2a:a2:ef:4d:e9:71:5c:96:fc:8a:87:d0:
57:c5:92:2c:5d:43:f4:33:61:e2:12:9f:10:02:8d:
02:2a:46:db:bb:f9:c6:99:fd:b9:2b:81:9c:e4:28:
82:49:f5:0f:2b:92:01:21:e3:da:67:eb:ae:77:60:
09:b0:04:d9:0b:d5:96:17:2c:fd:f1:92:32:d3:e9:
fa:81:29:a9:60:9c:ec:a3:e0:32:42:f1:78:8d:85:
fb:2c:c7:01:28:d1:d8:0e:37:d7:15:29:59:2d:68:
37:db:9a:a9:45:a5:a4:b2:66:42:e9:b0:11:18:78:
28:30:09:fa:19:c0:2f:dc:13:b9:ee:cc:bf:ed:5b:
8f:5c:2f:0d:38:e6:90:10:a8:f8:9d:68:a4:6d:25:
f3:b9:d6:f0:30:cc:22:5a:6d:55:5b:19:28:91:cc:
92:60:a3:26:c9:a6:3f:76:9b:03:a9:73:f1:81:8f:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:29:58:C8:75:B4:BD:FF:32:A7:A7:E3:CA:1A:0D:9C:95:CE:AB
X509v3 Authority Key Identifier:
keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:33:ce:e5:5b:15:25:dd:b9:39:71:5a:c3:73:63:fa:30:
0a:59:5e:12:90:17:c6:fe:89:5a:99:61:ba:51:b2:3c:33:0f:
d2:d9:9f:e1:65:05:c7:82:94:dd:48:24:10:48:22:ce:96:d8:
d9:6a:25:1b:ba:2f:a6:af:c7:85:1f:a4:d7:a6:d8:e6:bf:b7:
6c:a9:44:a0:d3:41:99:85:da:34:0c:ae:bb:ec:e8:70:95:08:
a5:d3:e9:2e:cf:0e:53:b3:f0:35:bf:6f:31:5e:e2:dd:a3:2f:
8d:b9:69:df:8e:e2:b6:ef:03:dc:e6:e2:8f:0e:e1:2a:4d:2f:
84:fe:fd:e6:78:a5:ce:02:41:29:48:a7:d3:97:01:54:af:c0:
78:7a:a2:15:8e:a2:fa:2c:92:c4:c8:94:85:da:99:d2:88:22:
96:0e:93:ad:22:8c:a2:5b:72:ca:0c:aa:d7:a9:ec:5b:cb:62:
59:af:d1:24:0c:0c:b7:5d:43:29:c6:fe:ef:d2:00:1e:bf:f6:
0e:d1:d9:01:7b:41:ec:79:04:27:42:63:c8:a0:bd:5d:35:d9:
c6:f2:fe:6c:0c:39:2b:3f:6f:15:2b:6b:f4:62:7e:53:26:a4:
fc:64:6a:ad:71:3d:29:33:48:d7:4f:73:d5:ea:5c:82:61:b2:
ac:47:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:27 2026 by rpki-client