
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: 5sclfwcf2WM8S0QnHpaAlFuyRAXGdIfpxNyAoAq7LsM=
Subject key identifier: 64:CF:0E:67:B0:11:12:E3:F3:50:D3:11:74:5E:97:70:16:F5:6F:A5
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 055C
Signing time: Tue 22 Sep 2026 23:04:23 +0000
Manifest this update: Tue 22 Sep 2026 23:04:22 +0000
Manifest next update: Tue 29 Sep 2026 23:04:22 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: xZk6ny4soc9jx+MvYWYQ0+ZOJbddrFL5gWJXlS8M7us=)
2: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
3: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=)
4: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Sep 22 23:04:22 2026 GMT
Not After : Sep 29 23:04:22 2026 GMT
Subject: CN=6ab30977-907e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:2a:a6:e5:26:5c:0a:9c:a1:ab:70:e5:95:
25:c1:10:8c:a7:8f:91:28:7d:2e:f0:d5:6b:c7:bc:
6b:fc:07:12:84:f0:40:12:75:53:c1:5b:dc:ad:d8:
a9:61:81:48:cb:4f:94:f8:6e:5a:54:03:32:59:60:
f8:64:58:f3:2c:c7:41:e8:72:d9:91:45:96:ed:29:
c0:ab:c3:91:8d:f8:b4:8b:b7:df:00:6e:44:be:1c:
30:bf:26:5b:ab:20:87:90:6d:17:60:b4:33:77:5c:
59:a3:e2:6f:cc:1f:79:15:09:35:95:80:d9:db:fe:
ae:86:d5:35:84:b4:6c:6f:e9:24:6e:10:6f:7f:55:
e0:07:9b:f8:5a:d2:d6:61:ba:6a:4e:a8:00:62:4b:
be:4f:ce:46:b5:d3:56:a3:fc:e6:31:df:e6:ec:89:
81:44:07:7f:60:73:6f:0f:f6:41:e5:30:e0:73:a4:
40:31:7b:07:72:0c:15:d5:c3:10:ed:0a:89:d4:66:
a4:2c:4a:95:d7:3e:64:94:b4:6c:e8:d4:0b:36:c0:
46:e7:5c:6d:eb:aa:26:90:3e:b0:34:6a:dd:93:82:
cf:e4:c0:d9:c5:dc:27:c3:73:3d:80:4a:4c:b5:bd:
36:ee:6d:3b:0f:c5:5b:12:73:db:f6:f1:63:0c:59:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:0E:67:B0:11:12:E3:F3:50:D3:11:74:5E:97:70:16:F5:6F:A5
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:cb:27:ac:da:1d:23:d1:b1:bf:f8:b4:2f:37:11:fe:10:
26:6d:42:4b:bb:f7:5e:cb:3e:5c:d6:34:6b:b5:36:02:83:ae:
58:70:97:d7:0e:e4:e1:ac:58:f3:eb:bf:21:c4:a7:e9:be:45:
bd:d3:43:7e:a8:66:c7:1d:a8:11:f7:e4:4e:75:2c:96:82:a3:
80:6e:2a:8d:d1:91:1d:9b:4c:b3:3f:cd:b0:4f:17:28:00:fc:
83:c7:e5:df:86:64:08:de:e5:c5:b5:6e:b2:9b:91:bf:78:61:
00:52:94:09:44:13:3a:6a:0d:9d:41:1e:2a:14:bb:7c:6f:94:
78:16:16:b2:b3:72:22:69:20:60:75:99:3e:f6:f9:0c:52:3a:
f3:93:31:6d:1f:09:45:69:b1:c6:94:31:e0:66:43:ce:a8:1b:
dc:52:8e:8d:d1:73:26:0b:57:c0:25:4e:da:a0:eb:a7:77:56:
5b:f5:2e:55:c1:39:56:ee:ba:c7:81:dc:25:04:f7:02:0d:01:
39:2b:d6:9d:f5:80:af:8c:87:87:1e:2a:88:77:34:97:88:75:
bf:34:0f:88:6a:eb:21:d2:65:bb:49:26:ce:68:eb:30:65:7e:
96:dd:e7:51:bf:b9:00:ba:7a:d6:8a:ea:9a:67:8b:9c:a1:d5:
5f:b6:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:58:20 2026 by rpki-client