
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json)
Hash identifier: s50ZcOZdH9EhynmM9PpLnF2yLJoVkul3Xb4QGuwT2d8=
Subject key identifier: 5C:55:12:88:98:A8:FF:36:58:70:68:71:24:DD:FF:26:D3:17:C9:61
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
Manifest number: 0165
Signing time: Wed 15 Apr 2026 04:33:46 +0000
Manifest this update: Wed 15 Apr 2026 04:33:46 +0000
Manifest next update: Wed 22 Apr 2026 04:33:46 +0000
Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: 0YdbfYw4iMRI8j/pHvShnjCdQmu/IflDsuyokn7L5uU=)
2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=)
3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Validity
Not Before: Apr 15 04:33:46 2026 GMT
Not After : Apr 22 04:33:46 2026 GMT
Subject: CN=69df152a-2277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:e7:79:87:0c:77:aa:45:7e:18:63:5d:d8:
42:c1:55:a7:67:d4:ed:b5:63:ef:f0:51:91:46:bc:
64:8e:f4:57:f2:74:e9:01:b6:13:7a:60:31:7b:ab:
60:e8:15:5c:1c:7f:18:ea:66:5c:fa:8c:0d:91:7a:
da:b1:1a:da:1e:74:27:f6:d8:64:ca:63:44:0e:04:
cb:41:73:37:56:06:77:b9:89:0b:ec:8d:8c:76:fa:
e3:ac:1f:ba:87:66:38:16:55:bd:60:b4:06:5e:02:
88:33:39:6e:56:76:cf:44:58:11:d9:cf:84:46:50:
01:27:df:fa:30:20:74:78:84:78:3b:d4:48:ed:ee:
f8:b8:82:37:89:39:94:c1:73:9a:a0:63:84:78:c5:
6b:66:b1:0a:31:84:77:b3:46:8a:1f:bc:9c:01:01:
51:4c:bf:36:89:e2:49:ff:e1:0b:1e:74:22:52:2c:
62:c3:b5:12:fe:da:86:9f:32:09:54:39:ea:3a:18:
8c:4e:51:9d:d8:ae:60:5e:30:7f:b1:1b:97:0c:15:
64:e9:f1:ab:dd:24:69:a5:3c:c9:ab:54:e9:7c:f1:
54:8b:e9:75:f9:60:c9:01:76:e6:a2:d9:10:0e:58:
f3:bd:41:69:c9:3f:2b:5a:5f:b3:b1:f0:07:66:87:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:12:88:98:A8:FF:36:58:70:68:71:24:DD:FF:26:D3:17:C9:61
X509v3 Authority Key Identifier:
keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:e0:30:3f:f2:40:31:83:0a:40:a3:06:c7:b9:58:82:12:d9:
87:8c:09:60:05:3a:ec:d1:c4:a3:2a:30:9d:e9:92:7b:4d:08:
06:5f:2c:19:f9:a1:15:fa:39:da:9c:14:ec:c4:16:bb:36:f7:
45:30:36:bf:e0:a4:9b:5a:a1:d1:bb:18:ec:17:22:4b:2c:ae:
6d:81:cb:56:d5:1c:16:03:06:e4:8c:e3:a9:56:69:53:35:bd:
42:c5:71:d3:95:d3:ed:e5:7d:64:c9:a1:b5:93:a3:bb:62:3c:
6c:47:c4:b5:fe:54:66:18:dc:ed:d4:33:5e:16:b3:76:e8:52:
0d:33:4c:b8:6f:2e:da:42:20:5c:24:38:a0:48:b6:94:fa:79:
ee:55:97:d9:34:57:a6:aa:10:fa:a6:94:f1:c0:aa:16:fd:52:
8a:e7:d2:f7:d6:98:da:da:e7:d8:09:c7:19:cc:65:4c:5a:e5:
30:4d:05:41:4f:dc:c6:d4:be:df:df:54:89:62:43:01:8b:74:
6b:a2:36:e0:d2:47:f4:4d:5d:d2:0b:e6:51:51:72:f7:9d:39:
66:0f:6f:69:3e:1b:86:61:23:c0:5c:0c:80:e6:81:9d:4b:db:
b7:6e:7b:ff:34:63:5d:67:58:97:48:e8:8c:de:d9:ae:2e:41:
e7:86:e4:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE
OTRGNTBBMUEwHhcNMjYwNDE1MDQzMzQ2WhcNMjYwNDIyMDQzMzQ2WjAYMRYwFAYD
VQQDEw02OWRmMTUyYS0yMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi9/neYcMd6pFfhhjXdhCwVWnZ9TttWPv8FGRRrxkjvRX8nTpAbYTemAxe6tg
6BVcHH8Y6mZc+owNkXrasRraHnQn9thkymNEDgTLQXM3VgZ3uYkL7I2MdvrjrB+6
h2Y4FlW9YLQGXgKIMzluVnbPRFgR2c+ERlABJ9/6MCB0eIR4O9RI7e74uII3iTmU
wXOaoGOEeMVrZrEKMYR3s0aKH7ycAQFRTL82ieJJ/+ELHnQiUixiw7US/tqGnzIJ
VDnqOhiMTlGd2K5gXjB/sRuXDBVk6fGr3SRppTzJq1TpfPFUi+l1+WDJAXbmotkQ
DljzvUFpyT8rWl+zsfAHZofV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxVEoiY
qP82WHBocSTd/ybTF8lhMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1
MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt
bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANuAwP/JAMYMKQKMGx7lYghLZh4wJYAU67NHEoyownemSe00IBl8sGfmhFfo5
2pwU7MQWuzb3RTA2v+Ckm1qh0bsY7BciSyyubYHLVtUcFgMG5IzjqVZpUzW9QsVx
05XT7eV9ZMmhtZOju2I8bEfEtf5UZhjc7dQzXhazduhSDTNMuG8u2kIgXCQ4oEi2
lPp57lWX2TRXpqoQ+qaU8cCqFv1SiufS99aY2trn2AnHGcxlTFrlME0FQU/cxtS+
399UiWJDAYt0a6I24NJH9E1d0gvmUVFy9505Zg9vaT4bhmEjwFwMgOaBnUvbt257
/zRjXWdYl0jojN7Zri5B54bk4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:07 2026 by rpki-client