
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json)
Hash identifier: hR4ywLDKZFKTygFoyT2xMFbtreomOhvoxaSxbiUMOWI=
Subject key identifier: 6B:4E:E8:F9:3E:42:C4:3F:06:98:6B:0E:2E:C1:B0:D6:C7:5C:3D:43
Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
Manifest number: 010A
Signing time: Tue 23 Jun 2026 06:17:11 +0000
Manifest this update: Tue 23 Jun 2026 06:17:11 +0000
Manifest next update: Tue 30 Jun 2026 06:17:11 +0000
Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: ArVc/xAzmaQzndSDKlV4UMd79nvIfQWKUslk0sXhKJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Validity
Not Before: Jun 23 06:17:11 2026 GMT
Not After : Jun 30 06:17:11 2026 GMT
Subject: CN=6a3a24e7-3ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:95:63:ce:9a:01:b4:2c:50:e3:ff:84:1a:
39:68:bf:10:48:ad:5c:cf:cf:39:06:fe:14:72:d7:
ad:72:ca:d9:72:7a:e5:90:e6:23:2d:5f:00:1e:3b:
a0:5f:b2:30:ba:8c:d7:1f:f2:b5:7d:de:e8:4a:91:
d6:14:71:39:ab:02:d9:62:15:34:d1:4c:d2:ff:fa:
4a:31:38:dd:15:ac:bb:38:0c:9e:0b:7f:db:13:d4:
4b:07:a8:c4:f9:c4:b7:ed:f9:f3:1f:8b:21:06:8a:
d3:60:1c:96:61:e0:90:a9:fa:05:ab:65:fd:41:27:
67:54:7f:de:5e:1a:f3:d9:2d:49:0c:49:2f:e9:53:
4b:d0:d9:4f:b7:23:46:f2:ca:8e:65:06:22:fa:16:
ce:1a:be:a3:d7:fb:8b:bc:a1:9f:f5:0a:25:75:75:
e3:4c:26:7a:8a:f4:b4:2b:73:87:8f:97:47:bb:59:
db:b2:19:93:67:2a:02:08:a1:5e:94:3e:39:bf:5a:
90:d7:b5:56:c2:db:88:d9:a8:7e:ea:1c:aa:eb:51:
d7:34:67:f0:7f:35:03:2d:54:a3:ce:26:3e:d0:46:
ae:0c:68:65:0b:fe:95:d8:cf:87:51:3d:18:68:b1:
1b:4d:96:d4:c4:92:4d:bb:df:36:3f:53:14:bb:23:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4E:E8:F9:3E:42:C4:3F:06:98:6B:0E:2E:C1:B0:D6:C7:5C:3D:43
X509v3 Authority Key Identifier:
keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e9:30:89:cf:6e:6e:47:43:28:18:0c:2b:69:04:13:b3:81:
02:ff:af:b5:41:38:92:6b:26:06:1c:b1:d0:2d:73:af:2a:37:
cc:a2:57:45:c6:a1:bc:41:1b:95:8f:73:76:ad:22:0d:9a:02:
c7:85:63:10:55:66:ea:77:10:f3:30:ac:48:9b:6c:6b:33:ee:
f1:ff:7d:a0:d1:7d:71:a9:2b:a5:cc:48:c0:78:94:ab:cf:92:
ab:2f:4a:ee:5a:04:42:c0:b5:08:00:a1:9b:4f:67:df:55:f8:
5c:17:ae:d1:13:9e:9f:64:cb:ab:0f:57:ee:82:97:0f:87:a0:
34:3a:fe:b8:7a:9b:d9:1e:03:6f:e6:ed:58:e0:c5:96:33:13:
14:d8:4b:4b:db:33:c3:6b:c6:35:11:6a:9b:95:5b:90:c5:32:
f9:95:2d:91:09:f9:bb:4f:45:dd:61:41:99:15:b9:df:7c:1d:
6e:5f:c3:43:03:90:36:c7:10:d3:e9:b0:33:3e:52:a9:3b:f8:
52:bc:6a:e4:64:0b:43:46:8b:f1:aa:04:20:ec:16:21:0c:12:
34:58:3e:34:d0:c8:2d:36:97:20:6c:4f:06:36:68:41:9e:b4:
65:73:78:ce:bf:1f:8e:fa:ba:a3:88:f5:9d:7a:a0:00:ff:fa:
c3:15:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:08 2026 by rpki-client