
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier: UQKNaG9mCZLlGlt36vyVlLHL19oOG6wRicelVjTZc2g=
Subject key identifier: D4:27:61:BF:BE:7E:C4:BB:31:9C:F6:6F:1A:78:17:1A:C7:B3:57:AB
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial: 0787
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number: 08B2
Signing time: Thu 22 Oct 2026 20:26:26 +0000
Manifest this update: Thu 22 Oct 2026 20:26:26 +0000
Manifest next update: Thu 29 Oct 2026 20:26:26 +0000
Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: a+sR1anrUlA7wX/wEZG26yvNbgFZeVEypJoV3qfk6tg=)
2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Validity
Not Before: Oct 22 20:26:26 2026 GMT
Not After : Oct 29 20:26:26 2026 GMT
Subject: CN=6ada7172-f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:99:1d:0f:74:71:9c:ac:cb:71:90:20:33:
6a:e6:87:96:83:f0:57:50:ed:03:20:fe:b4:29:d0:
99:83:62:02:7f:29:68:f5:7e:3c:0d:28:ec:b1:38:
a7:e5:ed:16:05:1f:b7:97:1e:62:b4:8f:0c:31:5d:
3f:c1:bf:c5:f1:5c:18:a0:58:74:86:0b:a8:26:12:
76:da:7e:d1:bc:54:54:da:34:ee:bc:f4:2e:f1:d4:
86:39:2d:00:44:18:66:54:b3:83:ce:8e:25:6d:41:
02:ef:71:09:43:c8:e1:8e:e6:26:38:60:1c:83:66:
3d:d5:72:24:fc:43:f2:3f:d9:03:a1:b9:13:6a:f2:
c9:65:2b:94:c5:68:bb:4d:4f:96:23:c9:55:97:ff:
70:d8:d3:9d:be:19:84:2f:b4:1c:cc:42:b8:8e:0b:
5f:56:c5:80:1c:2b:80:cc:ab:b7:45:fd:a6:58:61:
55:6b:e9:83:fb:cf:cd:6f:84:cb:b7:3b:13:69:ca:
9c:8f:3e:bf:df:1b:1b:66:09:0f:bf:ed:a3:4f:c9:
cd:43:75:3d:f6:8f:1b:cc:fd:77:96:86:1a:7d:92:
b5:4a:ac:f2:fc:e2:90:83:54:12:85:a3:31:ed:82:
bd:72:2c:fb:d3:b2:96:a2:91:50:d7:55:e2:75:86:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:61:BF:BE:7E:C4:BB:31:9C:F6:6F:1A:78:17:1A:C7:B3:57:AB
X509v3 Authority Key Identifier:
keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:de:5c:52:49:97:73:e9:66:0e:61:3b:7f:dd:9b:85:f9:fe:
4e:7d:29:9e:b3:7e:3a:73:19:8c:f3:60:a3:08:80:41:d3:7e:
b6:55:1a:e2:18:3c:4b:8e:d6:5c:7c:25:f8:e8:a8:b6:c3:f9:
f9:fb:11:7d:e3:6a:99:4c:70:3c:a3:2e:31:18:bc:08:b2:4f:
8f:49:f5:6d:3e:3f:d9:4f:83:e2:e0:4b:e3:72:89:41:e3:7a:
ec:5e:79:55:1c:bd:33:c7:9a:27:42:f9:25:7f:02:8b:e9:ab:
b1:99:a7:42:f3:0e:15:cf:4c:57:da:49:63:58:46:f2:41:f3:
ed:3a:ff:7a:3e:a3:4d:44:4e:50:84:58:8f:ee:ad:78:fd:b2:
ae:0e:a7:b1:f5:1e:38:38:d8:37:c3:c0:2b:c3:f5:db:03:37:
c8:ea:34:5b:ce:88:25:88:78:b3:1e:09:91:d6:ad:a0:bf:8d:
d5:c8:17:5a:c4:af:12:42:3e:46:f4:7f:f9:64:04:93:5f:a7:
f4:a8:6d:38:31:0b:9e:f2:06:71:79:23:20:e3:0e:81:25:68:
e3:07:b5:6d:38:a3:af:8d:0c:62:41:28:3b:85:51:5e:21:c2:
e4:3b:d3:5a:5e:f5:81:5f:a6:46:3f:4b:7f:46:d3:2c:df:e9:
64:7f:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:47:27 2026 by rpki-client