
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json)
Hash identifier: fqwev0kQy/UU49twa2PW2wRcc8FEfwd73i9bo9Rpv+E=
Subject key identifier: 09:6F:57:99:E1:C7:65:58:F4:84:BB:02:FF:35:BC:2D:0D:4F:57:5B
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
Manifest number: 0190
Signing time: Sun 01 Mar 2026 05:17:52 +0000
Manifest this update: Sun 01 Mar 2026 05:17:51 +0000
Manifest next update: Sun 08 Mar 2026 05:17:51 +0000
Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: olJ7N4ntZylTtPB349bBfnmyIsdYJtQnhYY4IocFCXg=)
2: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: ipvSSCsuIB7+MwYDiVzzG4/g5ky54F8EF1XYBBpIM6E=)
3: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: 3pfVChkV7zELWja+oHQv3Km6INJzdWSQS1Y4XK0gQXg=)
4: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: sp0oN6M3b0vKQWiSIdTtVM/z4x+pZK5BNETB2TbgZ2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Validity
Not Before: Mar 1 05:17:51 2026 GMT
Not After : Mar 8 05:17:51 2026 GMT
Subject: CN=69a3cc00-b5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:a7:6a:0a:2e:3a:72:c5:55:af:7f:32:5b:
1a:58:08:ad:1c:c7:34:34:f4:26:fb:eb:17:5d:8d:
1c:9b:6f:9b:66:30:88:95:8c:14:3d:35:30:04:6c:
7c:82:d1:37:21:a3:c6:cd:1b:c6:6e:bc:a0:04:b4:
b1:3a:a4:5f:cc:e6:30:83:33:12:85:5c:b7:ed:b5:
5a:b2:34:4f:a6:c6:eb:22:86:da:f6:ad:94:ef:ee:
36:60:d9:11:9a:ae:6b:5c:30:e1:a5:79:be:f3:e3:
c8:69:0d:0b:db:48:5e:20:69:b5:7c:e6:55:a8:c6:
e9:8e:f7:a4:0c:33:cc:87:41:9a:dd:08:06:61:c3:
64:07:7b:05:21:61:d9:3d:50:95:02:98:1d:ec:b6:
55:4f:3a:ab:62:d8:e7:69:6a:e7:1d:25:ad:0a:dc:
48:a7:5b:98:d1:d8:fe:c4:0f:1a:49:77:fb:ea:75:
14:d7:1a:a5:72:8f:cd:fd:7e:0d:8e:b9:62:df:73:
5e:94:3d:8e:17:1f:e6:af:b6:fe:72:f1:0d:b1:dd:
3f:ea:54:92:2b:64:04:50:cd:40:b6:e1:00:37:97:
43:c5:e9:09:33:1b:02:fd:50:c0:ef:ba:a3:dd:2e:
5b:9b:f1:c3:db:d2:08:cf:c2:5b:be:0d:e5:5c:46:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:57:99:E1:C7:65:58:F4:84:BB:02:FF:35:BC:2D:0D:4F:57:5B
X509v3 Authority Key Identifier:
keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9b:6c:4a:04:75:fa:62:4b:13:e7:d9:fa:ec:26:e3:f4:20:
e6:3e:d5:17:7e:d7:f7:b0:63:d8:41:b2:3a:e3:93:6b:9a:0a:
2f:be:99:c7:6f:ed:9e:c9:27:cd:14:c7:5f:b7:df:c5:bc:f2:
1a:f1:5f:b4:ae:ae:17:bc:79:47:56:b3:0c:91:d5:04:d1:41:
47:1b:15:f2:dd:fa:6a:04:3b:59:a6:dd:90:37:88:6d:68:73:
ab:d4:91:28:95:65:a3:16:ce:8c:44:d9:39:2f:61:b0:e8:74:
48:d7:1f:43:9e:b0:d9:d3:95:55:5e:15:c7:dd:38:a2:09:56:
29:85:b8:78:d9:58:9e:1f:d2:aa:5b:c3:ec:a8:17:fc:cb:ba:
56:b4:e8:1c:aa:27:d1:0a:1d:39:e8:e8:a4:3e:46:b1:31:24:
0c:49:b1:42:35:6d:ae:e9:81:58:79:4e:23:f3:47:1d:2f:69:
ed:75:15:06:39:1f:42:b3:35:3b:d7:f5:e2:77:7a:ad:1a:1a:
f8:d4:b0:f5:ca:b5:65:fa:4b:e2:75:b3:00:b8:82:4c:1c:a7:
ae:99:1e:7a:01:e7:51:f1:28:bc:bf:85:8a:b2:e8:6d:33:8e:
7e:f6:aa:fb:e6:ff:8c:29:de:4d:38:21:2f:9d:f9:9f:59:bb:
37:cb:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:14 2026 by rpki-client