
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier: Ztsc2KreU9svd8g0dxzYO4qTlOyVuxBB/mL6RlsD+aE=
Subject key identifier: E4:EA:46:58:05:24:A8:F8:4B:A9:9B:42:1B:C5:56:ED:CB:DF:A3:2D
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number: 0278
Signing time: Wed 19 Aug 2026 02:33:43 +0000
Manifest this update: Wed 19 Aug 2026 02:33:42 +0000
Manifest next update: Wed 26 Aug 2026 02:33:42 +0000
Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: Lsd26M0dprsVkCQOCGioQe7cIgRxGF14zqDrKUFvwJI=)
2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=)
3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=)
4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: Aug 19 02:33:42 2026 GMT
Not After : Aug 26 02:33:42 2026 GMT
Subject: CN=6a851606-de8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:4f:c4:98:72:b6:b6:dc:b0:5c:5a:e4:0b:
2c:3f:22:e2:14:97:24:07:26:e2:14:0d:b8:2c:42:
c2:51:59:db:60:1a:72:58:e3:6c:97:b8:43:be:b1:
96:42:35:59:ab:47:1e:8c:d3:5a:8f:5b:74:fc:e2:
c3:ba:e3:64:4f:53:a1:cc:dd:bb:62:28:2c:c4:be:
40:ed:47:9d:0c:9e:11:d4:22:91:6b:b4:6b:2f:20:
d4:29:c2:0b:3c:ab:8d:a7:0b:21:75:97:e5:3a:3e:
3e:a3:21:93:b3:b5:39:c5:61:1d:15:73:3d:d3:8b:
2f:08:f7:0b:19:85:e5:3d:d8:58:0b:e7:e1:91:56:
9b:37:c4:17:68:31:d6:c9:af:37:68:22:3c:ef:62:
79:f9:25:bc:56:d1:88:96:58:41:11:ca:d9:51:0f:
91:ab:15:1f:a9:5a:be:89:af:b7:8e:48:c4:46:8d:
6a:10:08:90:8e:43:f9:b1:97:92:6f:74:e8:9f:4c:
56:4c:b8:38:04:7e:8a:8d:5f:03:d4:8d:ab:ac:cc:
e1:9b:dc:28:d1:b6:3f:2e:73:50:ab:6c:98:0a:79:
bb:ff:28:84:22:b8:9a:f0:d9:a3:ec:bb:c5:26:7c:
cb:b5:ea:fc:61:27:4e:1c:cd:ef:c6:58:b6:a2:20:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:46:58:05:24:A8:F8:4B:A9:9B:42:1B:C5:56:ED:CB:DF:A3:2D
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:a4:2d:50:5f:d6:89:2a:1a:af:ff:f9:6c:a2:32:34:2e:
1b:3e:93:f8:6e:0e:2f:ee:42:4d:2f:a4:77:4b:ba:1d:7a:27:
70:c0:d0:a4:f7:ca:80:22:89:7e:54:dc:ab:94:d0:1d:76:f8:
4d:94:f1:94:ee:fb:7a:1f:c3:c3:f2:be:93:e5:17:0d:16:56:
42:7d:3b:34:ad:fc:66:ff:0d:54:30:c6:a9:c3:9a:b4:fc:02:
3b:d6:99:63:1c:b8:03:3f:c9:5c:95:7c:af:60:53:13:f6:52:
72:db:d0:1d:2f:dd:d0:42:85:9a:88:82:1c:c3:07:42:9d:f6:
b5:44:05:03:4b:1c:63:2c:b8:f4:4b:53:9f:ad:92:09:63:ab:
33:67:c1:1d:be:3f:4f:85:a5:b1:03:4f:6d:eb:37:a7:c6:69:
21:fa:b0:c7:10:b8:92:32:41:7f:59:bd:ad:1e:fc:d4:df:8b:
1f:b9:a1:fa:bb:8c:f8:82:d3:03:b2:74:81:6d:83:99:79:81:
98:52:f8:dd:f2:41:55:43:3f:e1:f0:38:24:d5:b9:e0:24:b3:
9d:35:80:5f:23:49:86:de:9a:53:d6:70:4f:fb:55:32:5f:94:
47:9d:c2:4c:34:b7:78:fa:e2:b2:3d:a3:1a:d7:b2:4d:66:38:
67:5d:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:10 2026 by rpki-client