
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft
File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json)
Hash identifier: EJ9a0UU9LaahgTyyuqqrE9XFGWXqEvyW/Z+OkRuKky8=
Subject key identifier: 6B:87:FF:C6:34:0A:6B:54:FD:2B:F2:8A:B6:2F:EF:97:EC:07:70:98
Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60
Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560
Certificate serial: 0D11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft
Manifest number: 0D08
Signing time: Mon 12 Oct 2026 17:51:48 +0000
Manifest this update: Mon 12 Oct 2026 17:51:48 +0000
Manifest next update: Mon 19 Oct 2026 17:51:48 +0000
Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: 3+h5r/PLfByGv8WHLIpHu55q+rkW+fnmekJTp5V7mSM=)
2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl
rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 17:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560
Validity
Not Before: Oct 12 17:51:48 2026 GMT
Not After : Oct 19 17:51:48 2026 GMT
Subject: CN=6acd1e34-80fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:5a:8c:e4:4a:ef:e1:d4:44:7f:98:bb:67:
31:af:2d:4a:30:bc:43:e6:a0:f6:8b:e9:32:d4:42:
b8:c6:77:62:0c:b8:19:44:29:a0:5b:e0:28:21:e3:
8f:cf:29:e2:20:92:1c:28:54:2d:1a:cf:8b:bb:4b:
74:c3:94:0e:09:5b:e3:7e:d4:8b:80:f9:7c:4e:5a:
83:23:dc:02:68:bb:1f:0f:72:da:fa:1c:73:90:5a:
87:88:81:8f:1e:16:dc:a4:c8:21:85:40:3a:6c:8e:
b8:dc:52:a6:2a:26:99:73:07:20:4d:71:7f:8a:c4:
94:5b:5d:ea:4e:4b:3a:10:3a:82:d9:d2:b7:ea:41:
ca:85:10:46:2a:5d:5b:49:28:06:c8:ef:0c:57:0d:
87:60:80:e2:04:78:23:3d:a3:f3:3d:60:92:5f:91:
73:63:33:9b:d6:97:15:55:ce:3d:b1:69:40:86:4d:
95:3f:45:05:d2:19:f0:ea:44:0c:30:a7:15:7f:4b:
dd:21:39:17:e7:dd:91:8a:28:15:31:ad:2f:62:4d:
b3:8b:10:83:29:1a:ea:60:8d:f0:5e:72:fc:5a:9d:
e1:96:2e:5a:03:70:ec:ff:2a:d9:43:2b:ed:e7:c9:
bd:0e:60:05:ac:9d:2f:c4:c1:15:fb:12:f2:61:dd:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:FF:C6:34:0A:6B:54:FD:2B:F2:8A:B6:2F:EF:97:EC:07:70:98
X509v3 Authority Key Identifier:
keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:3a:a6:ea:7e:b1:db:6b:5f:a8:3e:48:08:e2:82:d2:55:
ab:fd:02:94:1d:fc:24:07:cf:e3:da:ff:33:03:4f:7d:c0:e8:
a0:b4:b2:68:08:17:3d:49:56:43:9e:22:d6:f0:e2:0a:24:ff:
34:51:67:62:ee:5e:f4:26:06:83:89:d0:c9:ed:36:48:0e:6c:
f6:05:b4:cc:10:32:c9:bf:4c:67:ed:04:c6:7c:09:8a:c2:87:
93:a9:03:84:da:23:6d:2a:b8:05:a6:5e:60:bf:c9:0c:20:41:
43:4a:44:3d:1d:9e:44:b3:5b:44:d9:b8:48:03:79:03:3d:e0:
fc:f3:01:73:25:d2:66:88:01:cd:16:22:c4:04:2c:be:dc:32:
d9:b0:aa:c1:06:d5:d5:e3:ba:e3:ac:b9:ae:56:77:3d:2d:53:
80:68:38:38:85:28:d0:1c:90:6c:da:11:21:ac:11:97:be:f4:
76:49:91:50:24:26:dc:52:96:2f:fb:61:11:5f:1c:71:d1:56:
b5:99:bb:3e:e4:1c:06:9f:18:02:4d:27:1b:ad:3e:ec:71:e4:
8f:83:e4:a7:3a:1f:f7:5d:eb:3b:9a:72:72:4e:2e:d7:fd:91:
fd:bd:29:09:9b:9b:ab:7f:ff:a4:73:d9:75:37:9d:b0:2e:78:
21:2e:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:18:47 2026 by rpki-client