
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json)
Hash identifier: HSHgTBe26A1dhgVYFbw34weN7X/BjpTntn1bgoi5PX4=
Subject key identifier: 18:5A:F9:DF:09:99:8E:32:60:CA:CE:A4:5D:05:72:22:DE:67:49:5B
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial: 057D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
Manifest number: 056F
Signing time: Wed 20 May 2026 23:22:34 +0000
Manifest this update: Wed 20 May 2026 23:22:34 +0000
Manifest next update: Wed 27 May 2026 23:22:34 +0000
Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: bnoxA+zVOyuNTEsp/n47pro6iiPfuVAweaTkK4LHz4g=)
2: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: 5f9ml2EUZAGAD2c6U/Z9/PW0M3VyIhaGC3vHQZLyq8I=)
3: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Validity
Not Before: May 20 23:22:34 2026 GMT
Not After : May 27 23:22:34 2026 GMT
Subject: CN=6a0e423a-e261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:cf:78:24:95:b1:11:e3:3f:61:c3:b0:84:
fd:35:43:35:19:72:a3:fe:90:ea:d8:50:60:f5:f4:
07:2f:92:ec:05:65:74:f6:78:d0:88:21:18:1e:75:
cf:3e:6a:bd:d4:75:7a:88:99:5c:93:d0:85:ef:f8:
8d:c2:90:73:27:5a:7b:a9:91:5f:36:93:5b:0a:35:
6f:7f:ec:4d:73:e6:7e:8f:f1:7f:bd:31:2a:f8:d1:
06:30:df:f3:19:91:01:53:7d:cc:72:5e:73:73:4d:
6e:ef:18:97:fb:f8:14:a6:c1:7b:c5:6b:b9:54:97:
26:83:51:76:ad:2a:bd:ff:3f:c9:da:54:14:45:91:
9e:22:de:2f:58:45:d7:f5:88:d3:a7:6d:76:7f:e3:
92:01:b2:7c:3b:88:70:0c:4e:23:90:f7:96:ab:d9:
97:43:6b:4c:63:9a:5f:f6:89:0d:f9:da:dc:ba:1d:
d9:1a:6c:57:d2:11:cc:f8:3d:94:15:96:cc:4e:1c:
df:ae:f7:3d:3a:f6:cc:a7:ec:12:30:56:47:f3:70:
a1:97:b2:27:fb:bd:6a:24:7b:a3:7d:3f:43:ee:1e:
c5:f7:57:a0:66:b9:75:45:f4:c5:58:f9:e2:93:bc:
61:17:55:1c:7a:29:d2:5b:24:d2:2d:93:24:94:17:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:F9:DF:09:99:8E:32:60:CA:CE:A4:5D:05:72:22:DE:67:49:5B
X509v3 Authority Key Identifier:
keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:a1:3b:e0:fa:22:c8:ec:c3:7b:d3:21:bb:ef:1f:3e:45:25:
1e:da:6f:d7:35:af:19:38:66:a3:2c:39:35:6a:49:76:f3:f8:
50:bd:6a:bf:df:ac:8d:4c:92:5f:bc:33:c5:44:12:b0:11:90:
f3:f8:43:a8:6d:ce:8e:5d:24:2c:40:70:63:b3:82:dc:15:99:
f0:a4:2f:95:4d:09:28:d5:7b:bf:c2:da:f7:d7:5e:a5:59:98:
24:61:46:65:94:78:74:85:ab:65:cb:cc:77:6e:8e:41:29:f4:
ea:59:4a:ff:c5:b4:f4:73:7a:0d:c3:26:51:05:c7:ac:37:92:
5e:18:a4:d5:f9:97:aa:7e:58:83:65:43:59:fd:4f:b2:b9:21:
1f:eb:99:43:95:bd:95:ae:3c:89:aa:16:52:a3:25:8e:2d:c7:
32:62:18:b5:17:7b:68:98:ec:79:71:0d:3e:f8:2d:8a:be:72:
97:07:d1:3c:a0:58:d2:c5:4b:7a:c1:49:2f:59:5c:ba:5c:cc:
f5:e6:e5:38:dc:33:bc:c8:1f:ee:39:a1:45:8f:25:ed:48:9c:
da:16:04:23:7c:db:4f:12:42:cf:f2:00:46:27:f9:b7:7d:dc:
c1:eb:7a:58:3e:b4:7b:b5:66:79:61:9c:8c:e8:6f:93:45:ad:
2e:8d:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:22:54 2026 by rpki-client