
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier: MgN0faE4sIlprMVJ/OC+SbGBMKeJ8MlIAA/NW4PsoKw=
Subject key identifier: 2B:AE:3C:DF:E2:6A:9C:E9:40:09:11:EC:B6:33:12:68:E5:E7:F8:D5
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number: DE
Signing time: Fri 17 Jul 2026 07:45:23 +0000
Manifest this update: Fri 17 Jul 2026 07:45:22 +0000
Manifest next update: Fri 24 Jul 2026 07:45:22 +0000
Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: n1CvHYeid80AHCusV1KwAf7eLbtYyraplLIObCWQA4s=)
2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Validity
Not Before: Jul 17 07:45:22 2026 GMT
Not After : Jul 24 07:45:22 2026 GMT
Subject: CN=6a59dd93-0e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:65:1a:e4:a5:d3:7a:6a:7c:c2:13:37:45:
d6:e1:07:ee:7d:50:51:36:bb:e5:11:78:f1:8a:93:
d1:ff:60:75:c2:ea:76:af:3d:b2:dc:ff:56:7e:65:
19:85:47:7b:fe:f6:63:86:61:32:74:1e:99:aa:ae:
40:fb:82:65:ca:67:29:f1:1c:84:a8:95:ff:8f:d7:
46:2e:42:16:86:49:f8:78:04:b3:b5:b0:3b:94:f6:
24:44:88:8f:0b:1b:aa:f5:c5:88:be:14:5d:34:b0:
d0:5e:6a:a3:00:34:d2:78:17:32:2b:dd:3b:26:57:
d1:0b:44:a4:55:60:e3:30:14:fe:13:85:a7:78:77:
a9:a6:fc:1c:ba:da:37:e2:6c:ba:98:1a:10:1c:fe:
5b:6f:50:2d:d8:f8:7b:f3:ec:1b:79:2a:b3:92:54:
47:be:cf:5f:96:dd:86:a9:29:2c:a7:fc:c3:e2:83:
b6:c2:0c:ba:f7:3c:ee:4c:03:45:91:df:30:ac:c1:
d5:08:d4:9d:60:23:95:73:d9:8a:27:27:f2:b2:e9:
8a:6b:be:0e:d3:31:07:dd:6e:dc:b4:e4:10:61:84:
29:d2:8f:c6:f7:a1:0e:e6:ba:66:bc:c4:bd:a6:98:
fa:c8:94:2b:f3:ae:0b:8e:a0:c4:eb:51:17:fc:19:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AE:3C:DF:E2:6A:9C:E9:40:09:11:EC:B6:33:12:68:E5:E7:F8:D5
X509v3 Authority Key Identifier:
keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:49:b1:57:98:ca:cb:ba:03:37:19:6d:94:3d:95:78:ce:
cb:ac:6b:0a:63:36:29:a5:69:a4:bb:06:67:22:51:f3:94:15:
78:73:0d:da:f7:92:81:a2:a4:0d:98:42:50:de:d1:67:f8:f7:
44:d3:35:87:a4:78:f5:e8:b4:c0:46:02:4b:5c:2f:b1:97:46:
cc:bd:f2:c9:55:7c:63:79:e4:12:10:9e:f1:2d:ee:0f:f6:a3:
f6:d2:72:e1:12:b3:6c:8c:72:99:ec:bf:25:43:ba:04:c3:64:
b3:2a:9c:8b:ae:a2:05:cd:d4:d7:c9:a5:97:03:0b:c8:d6:6b:
2f:ec:f1:de:b9:97:71:c5:b0:d5:b5:8b:91:71:97:94:dc:ff:
4e:c2:67:9c:39:02:df:15:39:54:9a:a5:f7:03:f4:15:50:b2:
1f:ec:df:9f:0f:0c:61:c4:99:87:1f:9f:38:3a:ef:e8:e2:6a:
33:89:d0:97:95:bc:98:11:44:05:da:dd:b3:30:2c:14:91:a9:
ee:19:2f:42:3c:27:46:17:c2:d0:82:0e:79:04:0f:c1:c0:1e:
be:a9:4a:26:41:bf:e8:25:4d:0b:6f:b2:bc:5d:b2:98:83:18:
b7:ca:41:9e:05:aa:6b:ff:56:42:ca:25:3e:23:38:92:9b:14:
14:c9:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:59 2026 by rpki-client