
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier: Rz+wTde/5r100gM59yJmArVouR0RTasiK9R4wPSflMY=
Subject key identifier: A1:C6:E4:90:66:2C:B3:57:B2:E5:8E:A7:BE:0E:96:30:38:3F:A8:E5
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0A87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number: 0A61
Signing time: Tue 28 Jul 2026 20:01:47 +0000
Manifest this update: Tue 28 Jul 2026 20:01:46 +0000
Manifest next update: Tue 04 Aug 2026 20:01:46 +0000
Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 8GRSY9nXDdYMgZuP3JQ6Oyq5mDwLNfw3wCSQ0gpfz2M=)
2: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=)
3: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=)
4: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=)
5: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2695 (0xa87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Jul 28 20:01:46 2026 GMT
Not After : Aug 4 20:01:46 2026 GMT
Subject: CN=6a690aaa-e2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:8e:3b:1f:d1:7b:dd:a5:4a:cf:75:31:ee:
3e:ff:14:be:f9:4b:6e:4a:f7:8a:fb:05:fe:8e:bd:
0e:be:b2:e8:d8:bf:4d:a8:4d:5b:45:fc:27:20:33:
c0:f7:f3:d2:ac:1a:5b:35:97:12:d1:29:a7:cf:c6:
c9:b8:8d:f2:a5:ae:05:ba:91:f1:d1:92:74:89:32:
a6:ca:da:d9:e6:dd:9f:59:2a:a7:e9:50:57:4e:96:
20:cc:0b:b3:d3:43:70:6b:43:7d:e9:8d:7f:f1:22:
34:22:e8:2d:1f:91:5d:0a:34:a1:fb:62:ba:d8:37:
aa:30:20:72:93:df:6b:b6:db:8e:b7:ea:7e:fd:18:
44:f2:18:fa:92:71:8a:ec:66:b2:48:ee:2b:dd:46:
88:dd:3c:a2:da:5c:e5:d9:ef:f5:d7:b4:17:41:fb:
4e:42:29:83:09:2d:7c:ca:0f:df:ce:85:c5:09:f3:
56:fe:b9:08:f1:3b:ed:50:24:96:ca:a5:f3:c5:3f:
74:d8:67:d5:bf:f0:40:c2:43:66:04:c3:8c:e3:42:
2e:47:a1:b3:26:3d:2d:b1:2e:11:d3:47:60:6a:8a:
e4:d7:d9:09:c7:a4:62:9c:4b:ad:61:77:c4:c2:9d:
d8:9d:f8:d9:11:cc:49:8d:3a:03:3d:00:21:3f:dc:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:E4:90:66:2C:B3:57:B2:E5:8E:A7:BE:0E:96:30:38:3F:A8:E5
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8b:fa:ce:86:8d:a7:10:18:0a:73:f8:fc:d7:17:6f:7b:60:
ee:5c:9e:92:35:e9:a5:78:d9:65:12:41:7d:20:8a:c7:88:50:
74:02:67:29:40:62:58:4c:36:fa:cb:dd:c2:ce:bc:f3:60:a9:
86:22:14:eb:1f:a8:8a:8b:97:ae:9d:10:27:dd:1b:61:e2:9c:
31:1d:14:f6:01:67:23:10:5e:97:a2:40:56:00:91:49:da:f0:
93:e5:a4:18:2c:82:ae:4a:74:1c:06:b6:f9:14:39:33:f3:e8:
2d:7f:e0:32:ac:91:ff:41:47:f9:1b:14:f8:e0:18:28:52:3e:
73:02:36:4e:b1:c3:e0:bd:1d:2a:3f:0a:ff:ea:0d:8c:0f:d4:
42:7d:62:22:a8:b9:08:66:6d:d8:34:4f:a8:86:32:27:8e:fe:
87:ae:98:a9:da:f8:19:2d:f3:ed:44:a5:b4:5b:16:7b:5e:20:
5a:9c:53:c8:65:45:1f:c4:b1:af:1c:23:53:d6:67:74:a6:07:
53:fb:b0:03:26:69:1b:8b:6b:ec:d3:03:3d:12:0e:b9:f0:47:
bd:0d:aa:86:f2:f5:04:48:b5:eb:d0:d5:df:3d:fb:1f:7d:1e:
af:a4:57:69:7a:f3:e8:f8:33:fc:df:8f:a2:e8:be:1b:70:9b:
92:9d:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:37 2026 by rpki-client