
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier: RvFWb+Ame5YXpN/XMhGCe61YAYDvvWURPHlugyebiN8=
Subject key identifier: 46:6D:FF:DD:A5:FD:E8:47:B5:B4:96:D0:EC:A7:3E:D1:10:41:2C:0B
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0797
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number: 072B
Signing time: Sat 04 Apr 2026 22:04:07 +0000
Manifest this update: Sat 04 Apr 2026 22:04:06 +0000
Manifest next update: Sat 11 Apr 2026 22:04:06 +0000
Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: 9gS3/nh0sDQBFePOHHYJUSvyQkE/851rQmDUiZ8T2Cw=)
2: 671FC40EE29211EE94348874C4F9AE02.roa (hash: VorX/TcJnMctyKf1znFoq4UgSn2F6EKq1vU97sOrAnI=)
3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: NOaVU4q5vDhTCfS8D0magdRbNPsrNEg2xYPHqGcyq74=)
4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: UCc+DbJCpOApyDxFAfgaNwfGqcYO0Lw+1K3uPVDAppM=)
5: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: Om4qQKnR/ADlcoIytwUPeq9RDFGoVRvj56Lkmeu3bys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Validity
Not Before: Apr 4 22:04:06 2026 GMT
Not After : Apr 11 22:04:06 2026 GMT
Subject: CN=69d18ad7-b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:5b:fb:52:81:53:29:0c:83:1e:2f:45:d7:
32:23:9a:7f:34:be:39:e4:d3:d7:63:d3:d5:86:c8:
a5:b4:b9:db:ee:24:72:6d:43:b2:f3:c8:5e:35:7e:
eb:60:ff:7e:ca:91:9b:10:2a:ec:25:d5:1b:8e:7b:
97:cb:83:23:89:23:b9:26:be:7c:b6:fc:a5:ea:0c:
41:43:09:5c:01:a2:fe:4e:e3:19:64:c7:1d:7d:74:
8e:4f:a8:85:06:44:2d:5b:46:4d:90:df:89:39:9c:
be:c5:19:9f:07:8e:b4:c6:42:f3:0c:2b:bb:3c:9b:
38:47:ab:a4:fb:d9:05:ec:3c:f5:04:7c:ea:54:f0:
56:7d:08:eb:0f:bc:fb:00:9d:9c:15:fd:f1:15:49:
1f:1f:bb:fe:1f:05:8e:85:8b:bf:e8:f4:95:4e:86:
ae:85:05:32:ae:28:db:a9:a6:5d:a7:df:e8:d5:b9:
02:6e:ce:f8:0a:48:36:43:4f:ad:15:09:83:43:45:
61:9b:9f:74:96:db:44:79:03:63:9d:03:86:09:ed:
d4:10:cb:68:02:c1:56:df:ae:bf:66:46:3d:65:5f:
f5:28:c2:a4:60:98:a3:cc:75:32:10:3d:06:4c:c2:
f3:33:21:d5:af:83:79:45:9d:a2:ac:5f:f5:a8:bf:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:FF:DD:A5:FD:E8:47:B5:B4:96:D0:EC:A7:3E:D1:10:41:2C:0B
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:0f:39:06:9b:d5:ee:a1:2a:eb:4e:31:69:f3:0d:ce:36:
12:5e:da:65:01:86:bc:22:50:67:0c:01:a8:7b:80:f5:6f:8a:
03:b0:5b:79:f4:ef:a5:a9:35:c7:37:33:ba:42:a5:93:64:1b:
ce:d1:4e:7b:7e:6e:64:27:98:ed:e0:63:31:0f:54:bb:b3:4d:
59:2b:e5:2a:20:c8:e7:4d:96:80:97:ab:ec:a3:c1:a7:9c:d7:
bf:70:8c:d3:a8:c1:4a:3f:c8:66:45:c4:4b:47:60:06:2e:d8:
c2:3a:56:7a:9e:28:ff:fb:60:d9:ba:58:12:dd:ee:8d:5c:2f:
9a:ab:56:40:12:78:f1:7a:d3:a9:e1:8a:27:03:6b:85:f6:63:
ae:e6:99:de:bc:0a:04:1a:25:85:e1:ea:06:66:02:82:f8:7d:
ea:67:79:14:d0:24:cd:13:22:23:24:40:fa:c2:b7:8d:f2:24:
7f:73:24:0a:f6:80:ef:0a:8f:2e:5e:5c:3c:da:df:f2:82:62:
0c:90:47:97:1f:98:e1:d8:e3:26:f1:37:83:09:3b:2c:14:40:
e2:e9:94:ef:eb:b6:db:9c:a8:4d:3e:c4:e1:b9:a9:8e:e3:51:
ba:e0:d0:2e:cf:62:f2:d1:12:1a:4d:34:cf:3c:3e:ce:f5:e2:
57:46:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:58 2026 by rpki-client