
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: PKYMoKQNROGKULtdQyTKHUszcdev4AGKYBovBZxkRKw=
Subject key identifier: 4F:C5:6C:62:AB:C1:29:1A:8A:1F:94:4B:84:FB:29:73:59:94:FD:DC
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: 0124
Signing time: Fri 11 Sep 2026 05:59:12 +0000
Manifest this update: Fri 11 Sep 2026 05:59:12 +0000
Manifest next update: Fri 18 Sep 2026 05:59:12 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: xGQi4Het7Hf0ZLba0Cx1VyGAzGx9aYrBH/ts11oECeU=)
2: 25E1EFBE6EC511F1A3670E6068A30FBC.roa (hash: KYF6dD70RTWq4NYrTSdRtMjFqIz6MKhrvVtS6feLY2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Sep 11 05:59:12 2026 GMT
Not After : Sep 18 05:59:12 2026 GMT
Subject: CN=6aa398b0-b123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:67:d8:c9:62:ce:45:ef:b4:37:5f:ba:25:
7f:7e:f8:d2:3d:22:68:ad:a9:ab:27:78:b0:bc:e9:
b9:8c:44:10:2e:ce:4d:65:f6:9c:bb:09:d5:f7:af:
a1:b5:17:89:ef:36:d4:46:93:80:3e:84:94:ba:c6:
4b:63:1a:b3:30:99:10:0d:7f:dc:a2:cc:0c:5c:83:
26:7b:49:05:8e:9f:78:97:f4:72:af:49:c2:f7:91:
7e:67:79:50:5b:ea:77:b0:01:73:7c:45:85:12:dd:
23:cf:3c:40:16:fa:16:be:cb:22:96:c6:c4:c2:65:
6b:73:31:ba:c3:13:95:93:48:ef:e5:11:fa:9d:2e:
a2:3a:23:ba:52:1c:93:c4:b4:1b:72:43:f8:60:fb:
a9:9b:2b:72:55:72:ff:cf:03:6b:af:2a:da:28:a1:
c3:1f:72:5a:1b:b9:4f:08:42:66:42:e3:5a:0d:16:
4f:a8:08:81:52:d5:29:97:78:27:0d:11:0a:b6:61:
ee:c1:f4:4b:a2:26:45:44:f7:1d:29:10:55:55:5b:
42:50:0e:29:3e:af:95:bf:e6:d1:82:26:95:05:61:
5a:f6:ba:95:ea:5e:b5:db:66:42:ef:97:37:b9:10:
3b:69:7d:18:bc:09:20:ae:28:f5:92:b1:43:77:ea:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:6C:62:AB:C1:29:1A:8A:1F:94:4B:84:FB:29:73:59:94:FD:DC
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:f4:44:8d:80:76:1a:3e:e3:26:33:2d:53:1e:33:ea:ea:
85:01:67:94:8e:53:2b:e7:64:10:05:26:e0:56:85:7f:5f:53:
5f:9d:01:c4:7d:3b:9e:2f:41:c0:c2:f0:a9:5b:86:48:ea:19:
67:43:83:27:cd:60:32:2a:5a:5a:cc:64:93:2d:71:20:57:4e:
20:fa:15:65:ef:d5:0b:b9:32:5b:ad:45:09:0e:7f:4c:72:ee:
ce:34:46:fc:de:3f:99:0a:ac:63:3b:a8:8e:09:b5:06:9e:9d:
14:d3:8b:15:04:88:d2:ca:23:8b:93:29:58:05:1e:6d:11:c1:
1f:d3:bb:fb:c3:f1:fd:02:c3:8d:4e:cf:b4:65:07:20:69:77:
7e:24:c7:47:d5:a8:c0:58:25:82:0b:a6:2b:d7:33:2e:1f:24:
42:16:24:c8:94:47:7d:7b:c8:82:02:bf:55:d7:11:18:7a:e6:
9d:27:61:ef:f3:cc:9a:3a:a3:ce:e3:40:27:c8:0f:36:18:ee:
6c:ec:44:76:42:54:37:be:a7:26:81:0f:5b:33:18:5c:e2:69:
1f:bd:c0:d5:0a:a1:40:05:ea:8b:f8:4d:29:6f:88:d4:24:b5:
42:af:3b:e5:dc:a7:bb:9f:07:44:5c:44:e5:a8:82:3f:39:86:
db:61:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:05:10 2026 by rpki-client