
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier: 26YluXP2GGgbtEXbCzb2Ga3oyYjJjVLK9R7GexUdWBo=
Subject key identifier: C0:2F:56:CC:6D:3D:65:4B:1C:5A:52:08:44:31:03:19:AC:DE:C7:7D
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0A70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number: 0A4A
Signing time: Fri 12 Jun 2026 19:46:42 +0000
Manifest this update: Fri 12 Jun 2026 19:46:42 +0000
Manifest next update: Fri 19 Jun 2026 19:46:42 +0000
Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: m6MliEKmHQp+oGaKhki0ZMiZR3gyJhqfSmKTyZxzG6o=)
2: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=)
3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=)
4: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=)
5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Jun 12 19:46:42 2026 GMT
Not After : Jun 19 19:46:42 2026 GMT
Subject: CN=6a2c6222-1fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:89:51:0c:0a:c8:cc:ce:5e:40:24:6e:a7:
97:16:d9:25:da:07:96:a4:3e:a9:c6:dd:e8:d9:51:
fe:69:7f:d2:f0:f7:4c:95:69:e8:c6:06:e4:51:ad:
7e:cf:9a:b2:24:c7:d1:ee:7f:2c:f0:25:25:78:d0:
b3:72:62:06:ce:57:03:8b:a7:f1:41:64:76:49:d4:
f9:b5:60:87:65:57:57:cd:45:e3:f6:66:75:25:c8:
0a:dd:0e:2d:5b:3d:eb:2a:1e:3c:1b:1e:cd:0d:1e:
8b:22:fc:7b:73:40:ec:4f:63:5e:63:e3:a2:9e:f2:
77:d9:6c:b3:4c:75:24:58:d7:6f:83:ca:55:ce:84:
16:21:b3:9a:75:7f:ca:9f:9f:cd:f4:c3:91:14:5f:
08:90:a9:eb:48:a9:93:7a:70:50:7e:a2:62:7b:30:
fa:df:e8:60:d8:41:49:9d:0c:64:ed:80:5a:05:07:
43:32:ef:74:0b:3f:54:14:35:fb:a0:43:ae:f5:2f:
17:89:36:51:92:ba:cd:96:5f:94:bb:6b:ee:34:75:
e3:0c:15:55:ce:57:c7:24:8f:a4:ec:35:f4:2f:f8:
fc:42:6f:e5:e7:4b:28:81:f1:f9:a9:02:84:49:b3:
21:07:76:07:9a:18:f8:36:af:19:85:f4:f7:5d:e9:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:56:CC:6D:3D:65:4B:1C:5A:52:08:44:31:03:19:AC:DE:C7:7D
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:20:33:85:dc:d0:fe:51:2f:29:12:00:ae:fe:3a:2c:2b:fe:
10:10:b9:e8:3e:5e:15:53:90:d9:16:a0:72:6a:f0:7a:3d:e0:
26:69:45:67:12:c2:5e:d3:2e:36:6f:f4:ac:3e:6e:67:b4:64:
8d:96:29:75:8b:54:16:fe:9f:2a:69:b5:58:d7:43:1e:f6:d5:
f8:de:21:60:60:9c:b8:bf:7c:02:7c:fb:f2:d8:2e:6d:3b:63:
5b:a4:b9:ec:e4:71:94:e9:e6:03:ed:a1:ce:7b:b1:5d:93:56:
a2:ad:cb:21:f1:a0:4d:8f:d3:39:73:c2:0c:f7:8c:a3:7b:5e:
d8:67:6c:64:dc:e4:9f:db:8c:4b:14:f4:26:4b:7c:60:f5:31:
c3:e4:83:05:88:a0:0e:0c:a4:7b:27:1b:44:11:1d:8e:e9:e9:
54:50:44:8f:e2:02:32:42:b1:2f:34:64:3c:b7:fe:76:1f:aa:
a0:e8:f7:89:2b:fc:31:dd:5b:6a:a0:ab:43:af:06:b8:a7:61:
13:ab:82:c1:50:11:53:7a:68:a7:fb:48:68:19:4c:5a:7e:24:
26:27:38:1a:33:7f:df:94:d1:40:2f:9d:c9:57:6c:fd:7f:f1:
d8:62:57:c5:19:1a:84:4f:72:89:4d:74:df:d8:2b:bf:2e:6a:
05:3b:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:57 2026 by rpki-client