
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier: lL/tB+pJ5WAyApM+TvoxbdAMKa4l1bqL9EvZb4DiKY0=
Subject key identifier: 87:6D:A9:0E:5A:A1:9B:95:68:AD:EF:31:C8:21:C3:52:D5:24:83:AA
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number: 0269
Signing time: Sat 07 Mar 2026 00:10:35 +0000
Manifest this update: Sat 07 Mar 2026 00:10:34 +0000
Manifest next update: Sat 14 Mar 2026 00:10:34 +0000
Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: TwRKnS0Nau2ZTO3MUhzmA3vQnzDHfhcrXTPbOb+SI4w=)
2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: bBLigJeGoxjmDkmt5bCcINVBCGyLUX4lsMZpAacSwXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Validity
Not Before: Mar 7 00:10:34 2026 GMT
Not After : Mar 14 00:10:34 2026 GMT
Subject: CN=69ab6cfb-6002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:63:29:7b:96:7f:7b:5c:72:a7:1d:b3:80:
59:17:d2:bf:f1:4d:a0:17:d0:4b:80:68:9c:ff:14:
e4:3f:4e:e0:be:39:f1:1a:5b:33:1b:51:9c:51:77:
98:56:64:e1:76:9d:40:25:f1:66:ea:88:01:68:c6:
5b:7e:b2:1b:af:e0:26:6a:19:f7:5f:31:73:50:42:
db:5a:12:8d:9c:20:c0:96:69:a9:5d:ba:ec:88:f8:
70:91:5c:b5:16:c5:54:2a:2a:3b:29:3f:a8:23:c2:
f0:fb:3a:b0:3f:f1:81:ae:4e:71:e6:93:14:90:8f:
21:c6:bc:fb:e2:ba:f9:8b:14:4d:2c:cc:24:44:25:
86:3b:96:eb:42:a2:07:1c:bf:47:75:e6:b7:c0:9f:
f9:70:5c:be:c2:f8:b6:e6:f7:c6:7e:aa:5b:5d:b1:
51:cb:24:18:b5:2e:3d:3c:02:e8:03:a6:4d:af:a3:
ba:a9:a7:94:35:96:24:e3:ec:2a:2f:b9:9a:4b:08:
64:06:c5:bd:75:ae:44:43:86:0b:4a:6d:27:f0:0a:
d5:3b:1b:32:ae:7d:1a:b0:35:27:aa:ce:95:ca:be:
08:7d:0d:0d:ba:9d:75:fc:c4:c3:02:63:3a:ba:3a:
1e:2a:0a:83:fb:22:2a:be:50:ba:5d:cb:3d:c3:ba:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:A9:0E:5A:A1:9B:95:68:AD:EF:31:C8:21:C3:52:D5:24:83:AA
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:ed:db:a3:c5:1e:77:6b:d0:c7:2d:8a:89:12:ed:05:21:
0f:ab:17:a6:2f:71:33:99:f3:89:12:ff:1d:05:d7:42:b7:52:
68:e1:36:5a:ac:fb:54:32:4c:29:c1:06:fd:e2:9e:05:24:6d:
00:1c:3c:a3:dd:05:b7:56:64:7f:f1:17:95:da:62:8e:01:80:
77:2c:05:74:e6:76:6f:73:55:a2:4e:24:20:79:25:84:0e:8a:
68:ad:7e:bd:b9:19:e6:76:9e:68:5a:39:41:1b:f9:b1:fd:5c:
a6:37:fc:8e:f5:31:82:83:1b:1d:c5:ad:d0:60:0b:87:74:94:
d2:3e:1a:c9:ef:2a:60:70:bb:53:87:70:71:15:26:4d:dd:9c:
5f:79:90:65:b3:93:50:d4:3d:09:fe:68:42:dd:df:d5:e5:76:
98:6d:bc:29:fc:1d:68:eb:6a:6e:27:53:0c:e9:43:a3:39:dc:
c6:92:c4:ea:03:70:fa:13:7a:fb:3d:8a:b8:9b:8c:4f:3a:fa:
2a:a6:43:15:c7:8d:12:40:47:aa:b2:00:93:2b:b4:13:47:8b:
44:64:3d:fb:88:73:7b:40:73:63:74:2f:2a:c3:ca:7d:c6:55:
11:2a:f0:9c:77:62:d6:f8:00:e3:00:b7:92:7c:ee:08:77:ae:
be:e4:c3:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2
QzAyNEM0RjMwHhcNMjYwMzA3MDAxMDM0WhcNMjYwMzE0MDAxMDM0WjAYMRYwFAYD
VQQDEw02OWFiNmNmYi02MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsG1jKXuWf3tccqcds4BZF9K/8U2gF9BLgGic/xTkP07gvjnxGlszG1GcUXeY
VmThdp1AJfFm6ogBaMZbfrIbr+Amahn3XzFzUELbWhKNnCDAlmmpXbrsiPhwkVy1
FsVUKio7KT+oI8Lw+zqwP/GBrk5x5pMUkI8hxrz74rr5ixRNLMwkRCWGO5brQqIH
HL9Hdea3wJ/5cFy+wvi25vfGfqpbXbFRyyQYtS49PALoA6ZNr6O6qaeUNZYk4+wq
L7maSwhkBsW9da5EQ4YLSm0n8ArVOxsyrn0asDUnqs6Vyr4IfQ0Nup11/MTDAmM6
ujoeKgqD+yIqvlC6Xcs9w7oEzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdtqQ5a
oZuVaK3vMcghw1LVJIOqMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy
MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk
N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF7rt26PFHndr0MctiokS7QUhD6sXpi9xM5nziRL/HQXXQrdSaOE2Wqz7VDJM
KcEG/eKeBSRtABw8o90Ft1Zkf/EXldpijgGAdywFdOZ2b3NVok4kIHklhA6KaK1+
vbkZ5naeaFo5QRv5sf1cpjf8jvUxgoMbHcWt0GALh3SU0j4aye8qYHC7U4dwcRUm
Td2cX3mQZbOTUNQ9Cf5oQt3f1eV2mG28KfwdaOtqbidTDOlDozncxpLE6gNw+hN6
+z2KuJuMTzr6KqZDFceNEkBHqrIAkyu0E0eLRGQ9+4hze0BzY3QvKsPKfcZVESrw
nHdi1vgA4wC3knzuCHeuvuTDGw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:47 2026 by rpki-client