
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier: QLZk8M0HOLyQV4pTms+ASR7BT21xdpM+AB0tdMguJGw=
Subject key identifier: 2F:62:F8:BF:2C:95:2F:AF:C5:68:B4:54:12:D9:CA:C9:A8:44:22:01
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number: A6
Signing time: Sun 01 Mar 2026 08:32:23 +0000
Manifest this update: Sun 01 Mar 2026 08:32:22 +0000
Manifest next update: Sun 08 Mar 2026 08:32:22 +0000
Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: P7QMiqA19h6xwVN8qW7R8glBHEb0FGeBsT/wvG4+RmI=)
2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Validity
Not Before: Mar 1 08:32:22 2026 GMT
Not After : Mar 8 08:32:22 2026 GMT
Subject: CN=69a3f997-4ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:59:89:cc:ee:cf:40:5d:0a:34:50:df:a4:
04:00:50:26:a8:c9:53:44:24:56:90:f6:96:21:ed:
96:c8:ae:3f:b5:bc:21:8f:78:dc:c5:eb:5f:86:12:
e5:3b:4b:11:81:40:91:63:b1:cd:b8:02:a3:d4:66:
89:72:71:3c:6d:43:65:6e:49:4d:c1:dc:c3:dc:a0:
c2:a2:e4:04:f5:29:7f:80:e6:dd:69:39:46:7f:e9:
1e:c9:42:cd:e3:0a:88:1b:94:51:b1:e9:e1:58:b2:
07:21:67:a0:76:83:cb:28:3f:de:c8:4b:0d:f7:6a:
f5:da:a2:df:99:ca:b8:5e:f6:4b:36:fc:24:8f:a2:
67:fd:24:f8:c9:c8:6e:d1:0d:59:30:37:aa:58:00:
27:44:9d:ba:71:1a:52:0c:c0:33:64:8e:66:e9:31:
80:18:a3:44:f1:af:66:42:55:62:8e:c2:1d:13:7b:
ca:51:ce:14:7e:f9:62:5d:44:2b:c4:de:ab:1f:ac:
fa:4d:a3:bb:92:fa:d0:9e:61:2a:7d:3c:f3:d0:3e:
84:95:89:d8:cd:bf:99:fe:2b:5d:5d:7e:39:da:c5:
91:79:1b:c0:b6:46:c2:2a:46:90:3a:46:cd:f1:9a:
76:10:07:d6:03:a4:05:84:ab:95:68:44:80:5e:eb:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:F8:BF:2C:95:2F:AF:C5:68:B4:54:12:D9:CA:C9:A8:44:22:01
X509v3 Authority Key Identifier:
keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:64:03:a2:19:2c:8f:ec:02:aa:32:70:0f:80:3f:9f:e3:
b9:0a:cd:22:e8:e0:4d:17:51:53:af:a2:c2:eb:6a:c5:b8:94:
5f:f7:ec:c4:1f:16:ec:d9:91:0f:0e:d4:39:9a:6d:cf:9b:06:
b9:97:70:19:bc:3a:ef:66:3c:2c:02:10:10:5b:cf:2b:ef:78:
80:ab:82:f3:a0:f3:12:3b:b1:58:b8:5d:50:7b:0d:0f:31:b1:
44:17:1c:72:de:52:da:d6:52:a9:21:27:61:ad:39:9e:f2:ab:
2f:98:c1:27:bc:aa:93:16:f0:eb:c6:f5:5d:dc:76:68:8b:e5:
98:04:73:36:8f:82:32:1e:57:3f:9b:8d:5c:53:4b:00:a5:73:
ea:40:49:cf:ca:24:81:36:86:6f:16:73:3a:8d:d6:21:f4:78:
22:a1:11:9a:ab:99:9d:80:6f:a9:cd:75:8d:fb:c3:0a:85:c2:
e7:04:b9:83:ca:76:a6:df:97:87:d8:6f:fd:3b:fb:d0:29:b7:
ec:28:80:67:11:3f:fc:f8:8e:a5:d7:b8:49:d9:49:64:da:6c:
eb:f4:c3:c4:be:0f:4a:f9:7d:9f:f5:ac:71:35:9f:37:51:0f:
c1:19:3c:04:20:2e:c4:68:d4:f1:fe:46:f3:26:a4:01:db:35:
a1:e6:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:57 2026 by rpki-client