
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
File: B2qM_AnS8rcX4jyBAokXiMq1UT4.mft (raw, json)
Hash identifier: SYO2qHZ9iLROL8tRnYYYe7lpH8QgJoDzfbWtIasjhVI=
Subject key identifier: A1:5F:D6:72:2B:03:22:5B:EB:C3:09:F4:FA:A2:2A:E3:BB:48:C5:7A
Authority key identifier: 07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Certificate issuer: /CN=A914C9CD/serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
Manifest number: 2A
Signing time: Sat 03 Oct 2026 09:32:12 +0000
Manifest this update: Sat 03 Oct 2026 09:32:11 +0000
Manifest next update: Sat 10 Oct 2026 09:32:11 +0000
Files and hashes: 1: B2qM_AnS8rcX4jyBAokXiMq1UT4.crl (hash: 2CQlw8Ym9pM/px1sBPcsEj3AA4X35/ztzUMCsggX4vc=)
2: 4F2C0476865E11F19C092B2C95A30FBC.roa (hash: egifpNM5XF4+DHAIdWtYVVii3Yk/k7piv94MdlcO3yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Validity
Not Before: Oct 3 09:32:11 2026 GMT
Not After : Oct 10 09:32:11 2026 GMT
Subject: CN=6ac0cb9b-85f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:56:05:79:21:94:f3:4c:63:5f:ef:95:f7:
a9:fc:fc:92:32:c9:f2:57:58:a2:6c:34:2b:a8:01:
41:35:0b:7c:1f:1c:13:d2:d5:ba:5c:59:e4:a0:b2:
65:b9:58:e0:75:51:8c:67:87:af:d7:e3:40:07:78:
42:db:e2:4a:9e:fa:d3:0c:29:21:f4:f7:18:2c:b0:
fb:80:7b:c9:2a:6d:5c:ec:11:67:98:7e:6c:ac:b0:
f2:8d:cd:33:ab:a6:ee:a9:0e:07:84:ef:1a:22:05:
33:bd:63:9a:83:3c:d4:5f:9e:2e:80:2b:78:4e:7b:
36:a9:db:bd:6b:c0:d1:05:77:30:9c:05:35:a2:45:
8a:a3:30:69:60:4d:0d:45:f3:59:c4:71:bf:0a:33:
e7:7f:4c:15:24:ee:55:6a:42:68:82:38:81:1f:a7:
cd:0b:5f:a0:aa:b4:99:09:89:8b:95:94:fb:11:79:
90:6e:d1:13:2c:f1:9c:c6:71:54:0a:e8:b6:8f:f5:
59:d1:f2:e3:91:56:92:59:d9:c9:63:09:46:f0:ea:
5b:13:33:45:84:2b:ba:17:93:5a:b9:4a:14:6b:a3:
7f:48:4d:be:f6:53:b6:48:03:de:50:aa:87:fc:4b:
82:fa:ff:96:ac:09:eb:b0:10:93:67:84:76:ef:a3:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:D6:72:2B:03:22:5B:EB:C3:09:F4:FA:A2:2A:E3:BB:48:C5:7A
X509v3 Authority Key Identifier:
keyid:07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:30:9b:1d:d8:9b:ae:d5:79:3b:91:4c:7e:97:a8:75:19:
2d:62:e4:c2:8e:d1:05:46:9c:8c:e6:90:ed:22:a5:40:76:6c:
47:f0:b7:96:98:1e:30:68:ec:66:ff:9a:07:4b:f0:c0:eb:07:
0c:d3:3c:8e:f0:b3:62:95:b9:55:a5:b2:fd:da:f9:64:83:9b:
da:09:73:b0:4d:c6:32:bc:52:4e:86:cc:4a:4a:b2:7b:3c:1d:
ba:fd:dc:19:07:b0:e2:70:a8:38:18:88:d0:4f:dd:34:59:b3:
13:6a:09:3c:d8:01:8e:a7:fb:11:6d:b7:a2:1e:15:8f:7f:a8:
fd:67:91:23:d0:f2:ad:18:0c:28:32:c8:be:c1:cb:7d:cb:5d:
1b:d7:4d:cb:59:6b:7f:a3:b7:7c:34:c4:7e:42:bd:fc:be:55:
48:7f:db:b0:36:a7:17:61:b2:a0:12:e6:8f:4d:fd:3b:20:73:
85:d4:40:14:40:83:bb:e0:68:52:88:82:64:b3:69:d5:e3:12:
e8:65:9b:77:cd:4d:02:85:2f:77:d7:99:94:c2:81:ae:5c:23:
c3:06:b2:4e:8b:11:b6:90:64:cb:b7:14:91:f9:47:95:06:fc:
bd:14:f4:70:b7:f9:b9:e8:4d:eb:9e:21:94:a4:e6:54:30:dc:
bf:46:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:51 2026 by rpki-client