
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier: 105kwZzA75S9IylSlOgkHA2tarJfLfuOnIWzgLUecTU=
Subject key identifier: 8D:4F:C5:69:D9:49:0B:65:E6:A0:A0:EE:F3:30:9B:40:C6:79:0F:D9
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number: 02DF
Signing time: Wed 21 Oct 2026 00:13:26 +0000
Manifest this update: Wed 21 Oct 2026 00:13:25 +0000
Manifest next update: Wed 28 Oct 2026 00:13:25 +0000
Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: Dgnsu0TYlI36inS4EfB3a56C802P1vJGDOfqJS4oOOE=)
2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Validity
Not Before: Oct 21 00:13:25 2026 GMT
Not After : Oct 28 00:13:25 2026 GMT
Subject: CN=6ad803a6-4d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:95:59:43:93:8f:66:70:79:3c:07:fa:c6:
c3:92:93:7e:c7:ec:15:5f:90:9a:1f:52:5a:4c:2d:
b6:58:54:a0:f9:88:5b:e6:8a:43:88:40:f7:0a:3e:
ec:43:b1:2b:80:fc:17:61:d2:cf:42:e2:57:3d:2e:
ba:c4:46:1a:16:bd:53:cd:f0:9b:87:23:ba:c9:23:
07:b9:15:3b:7b:ac:63:67:5c:47:6e:ce:6c:c7:7c:
8a:7a:7b:59:07:91:c2:05:47:3a:55:43:f6:3d:be:
6a:cb:34:cc:e4:6f:12:0e:9a:a9:1b:da:aa:7d:d2:
61:c4:47:37:fb:e9:75:a4:cf:5f:b3:81:2d:10:d3:
07:60:c9:eb:1c:61:df:6b:3e:41:7b:cb:70:8f:65:
10:7f:a6:7e:1c:fe:84:fb:8f:af:19:19:19:a4:a4:
bd:9d:8b:2e:f6:ff:03:a8:a7:8d:b9:bc:f6:d3:58:
49:b7:94:91:c0:8c:46:c4:ea:d6:da:89:15:f4:d9:
b4:7f:26:02:42:38:54:9b:e8:e2:b8:1e:89:dc:f5:
d3:9b:98:d2:10:36:31:2c:c3:c6:63:46:19:96:d9:
2c:8b:55:0b:0c:72:7d:18:10:be:ae:4d:24:e8:ef:
a7:38:80:c4:45:46:b0:95:10:fc:cb:68:79:80:94:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:C5:69:D9:49:0B:65:E6:A0:A0:EE:F3:30:9B:40:C6:79:0F:D9
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8f:3d:06:15:99:4e:ec:14:3d:00:97:3a:fa:9c:40:76:f9:
f9:10:a4:98:e8:81:79:4c:3c:38:cd:39:e2:f2:d0:c2:45:44:
16:d8:c2:f6:f8:61:4f:42:8b:91:4e:5c:81:1d:e7:b8:ab:b7:
79:be:d8:84:6b:2d:8b:8d:c3:f8:51:20:9d:1b:58:bc:d6:22:
fd:3c:bc:87:60:63:04:5a:92:58:b6:bb:ec:21:9d:e4:45:e9:
30:8b:08:c3:87:84:5d:e1:84:19:57:f8:44:fa:7b:3f:50:4b:
b1:2c:6e:ed:c0:3b:15:68:af:c4:c3:86:02:26:97:7c:02:d4:
0a:67:33:19:4f:bd:d1:ab:1d:5a:7b:c6:8d:47:68:36:9d:6d:
90:81:40:2e:e6:2b:c7:9e:dc:2f:6b:c0:b0:92:8b:fc:55:0f:
f1:40:7e:b9:d3:45:e0:f7:d0:12:ef:11:c8:84:77:a8:cb:2f:
66:73:d3:82:da:90:00:a3:b6:a6:e7:66:56:d6:86:e6:ef:4d:
7a:0f:e3:5b:ae:50:f4:a9:7b:70:f3:cf:e9:20:2e:57:f8:0b:
45:6d:07:cb:a8:ea:b0:9c:de:a7:f8:7b:b1:89:57:f0:10:26:
ec:c1:4f:6d:a9:b2:17:71:e8:9a:3f:8d:71:39:c3:4a:32:1a:
4f:5b:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:56:54 2026 by rpki-client