
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier: NOLBOXsZxhVciZXEZ1/BsBwc3WjnVhYMsAnevshj4Fw=
Subject key identifier: C0:21:19:E1:B0:FB:A3:5A:9C:F3:EB:54:13:0C:8E:8A:97:4E:CF:10
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number: 0299
Signing time: Fri 05 Jun 2026 00:30:31 +0000
Manifest this update: Fri 05 Jun 2026 00:30:31 +0000
Manifest next update: Fri 12 Jun 2026 00:30:31 +0000
Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: 0nm0bUcv0rpSqAxTmtVQ6UpqUEkFxeqMC1cGh6nluk8=)
2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Validity
Not Before: Jun 5 00:30:31 2026 GMT
Not After : Jun 12 00:30:31 2026 GMT
Subject: CN=6a2218a7-3330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:37:f8:b0:30:09:40:fb:15:32:12:df:a8:
72:91:8d:4e:d1:01:bd:a0:6a:01:18:f4:e8:8a:09:
86:6a:6c:5a:46:df:85:4c:9e:85:50:45:4f:45:0b:
64:f0:38:e3:4e:49:83:11:9b:84:03:4a:55:50:0e:
2e:9e:36:91:13:6d:9a:52:b2:88:f0:a5:4b:ec:aa:
21:b0:36:38:d0:f0:e6:25:3e:7b:65:a9:85:55:92:
e9:fb:6b:38:c5:55:9b:bf:81:d1:9b:7f:08:b6:88:
4e:fe:14:12:a0:fd:e8:29:ed:6a:78:c8:46:ef:23:
f1:07:1c:45:8d:91:ec:fe:c6:41:c1:19:7b:b8:d1:
f1:c7:0a:31:64:a3:00:13:2e:7e:cb:bc:c8:9f:fb:
a1:d9:7f:f1:28:c9:b3:ca:03:b5:50:6f:96:e1:4d:
fa:79:69:30:97:e9:13:c6:38:51:dc:9a:e8:c9:24:
d2:81:dd:8d:c8:8b:8d:ab:b5:db:21:d9:10:ee:f1:
ea:92:4b:a7:0e:e8:b4:61:26:ff:0a:16:85:7a:63:
69:e9:b2:84:19:44:bd:d7:1f:f6:cc:5b:67:55:22:
25:af:b3:c2:86:de:b8:01:f5:d2:f7:42:f8:a1:af:
d3:7a:dc:b8:42:11:38:52:e8:c1:cd:dd:b4:8f:61:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:21:19:E1:B0:FB:A3:5A:9C:F3:EB:54:13:0C:8E:8A:97:4E:CF:10
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:53:5b:4f:c7:b5:5d:67:a1:61:b0:90:e5:fb:bb:3f:8b:96:
30:32:00:fa:a9:72:0e:be:5c:e7:46:bc:9c:97:de:fa:5b:83:
cd:ac:42:3b:43:26:74:8a:37:68:9a:9a:53:8b:9f:f4:4b:1b:
2a:be:ac:d5:99:47:3d:c8:43:48:4a:07:f5:27:86:4e:38:aa:
69:6a:b3:e5:3c:d8:a2:16:a1:dc:3a:7d:20:65:a7:ff:89:9d:
6f:58:2c:a2:4f:0b:1a:ba:9a:fa:18:c6:2b:6d:7e:a3:15:21:
dc:e6:be:ed:5d:0c:e1:35:32:29:c7:33:d8:a4:1e:5f:73:02:
8e:8f:54:77:37:53:90:e2:24:8e:19:c5:18:05:69:18:c6:eb:
d5:df:78:80:a0:40:a6:a7:67:13:58:f5:0a:00:42:c6:d0:ba:
fd:27:15:a1:4c:92:3f:31:b7:31:2a:f4:25:12:96:fc:5d:c1:
b2:9f:b7:b8:19:b0:ea:45:dc:85:18:da:0e:40:fc:97:72:5b:
2e:1e:68:86:4d:fa:48:98:0a:03:47:52:2a:ed:d7:09:dc:c7:
4f:d9:f0:dd:ed:ce:55:4c:bd:ee:d8:0a:c9:df:09:7e:a7:db:
c7:b7:63:93:6d:17:31:5f:b8:82:ab:d1:2d:87:06:60:a9:61:
70:ae:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:12 2026 by rpki-client