
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: loD9y2UiZ/joa717OcaH2qX4t0+XeT2aZSATXUT1JPU=
Subject key identifier: C4:6F:FB:B6:C4:D5:60:C4:D4:4A:DF:9C:5C:32:D5:93:AE:86:F1:96
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: 010C
Signing time: Mon 27 Jul 2026 08:15:51 +0000
Manifest this update: Mon 27 Jul 2026 08:15:50 +0000
Manifest next update: Mon 03 Aug 2026 08:15:50 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: pyLFox/U0sltEpMcuDi0BqVMSPgs2SFBcdAkc1lwRLM=)
2: 25E1EFBE6EC511F1A3670E6068A30FBC.roa (hash: KYF6dD70RTWq4NYrTSdRtMjFqIz6MKhrvVtS6feLY2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Jul 27 08:15:50 2026 GMT
Not After : Aug 3 08:15:50 2026 GMT
Subject: CN=6a6713b7-e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:58:a4:6c:98:c7:43:bf:d9:5a:80:73:33:
1f:8c:92:f2:d9:1d:38:c6:12:13:37:b1:45:35:84:
d4:db:27:98:a0:08:97:3d:87:78:3c:d8:a1:12:fc:
e9:ca:6c:e0:cc:0e:75:61:ad:1e:2b:32:eb:d1:07:
4f:4f:67:a5:ba:89:d9:46:a2:cb:e2:51:b2:75:fd:
68:5d:e4:2a:97:59:5d:a0:a4:11:15:2e:5c:a1:6d:
9d:48:29:2b:3c:03:93:ab:73:86:60:93:ee:c9:ab:
5e:b5:78:05:7b:0a:a7:97:7b:c3:52:3c:4f:75:cb:
4c:fb:b7:2b:9c:87:89:f3:61:64:da:12:bb:60:e2:
08:10:89:04:af:40:b0:69:fc:a9:96:4f:ae:62:4a:
04:27:6c:12:6b:32:6e:eb:01:2b:9c:39:97:5b:7c:
c6:11:51:5c:ae:ba:c8:6b:70:62:df:b8:e5:65:d8:
cb:21:0e:2c:58:f7:7d:5d:d9:a3:43:10:4a:21:70:
da:4b:5d:33:95:43:16:51:9f:2b:2e:d0:0f:22:84:
c1:ab:0c:88:06:f2:fa:77:54:a7:e0:63:db:83:56:
79:df:10:1d:08:c0:51:bb:68:a0:2c:67:2d:2e:0f:
e7:7e:be:45:56:77:35:f4:8a:62:74:cd:4c:97:90:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:FB:B6:C4:D5:60:C4:D4:4A:DF:9C:5C:32:D5:93:AE:86:F1:96
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c8:75:43:b0:ed:6e:86:b3:6e:42:a9:c4:10:82:e2:5c:a0:
52:66:f8:db:f3:23:93:6b:2f:a9:22:fa:e3:0d:3a:d1:b4:86:
4f:a3:c8:5f:bc:0f:f0:26:93:9b:b8:cb:36:a3:cc:ef:88:23:
77:78:e3:68:a5:31:ec:79:9e:14:b1:d5:33:a6:0b:1d:2b:f5:
31:c3:3c:52:22:08:88:5c:0d:d2:94:f4:a9:2c:4f:5d:d8:af:
71:04:30:50:5d:60:a3:e5:df:32:75:c6:76:fb:81:fc:e5:32:
ba:19:e0:09:85:ec:82:0f:1c:29:f2:4e:7a:09:1b:73:71:12:
55:b7:7b:8b:5b:04:4c:e2:53:2f:bd:fb:45:33:2f:b7:d3:20:
84:21:45:fb:8f:d6:c1:2d:1b:2f:ae:70:d1:e0:45:2c:9e:8a:
f8:9b:59:c0:71:91:ca:83:13:68:17:ac:4f:94:1a:0f:2a:1f:
82:61:a7:96:77:62:4e:36:71:08:86:2b:45:bd:8a:5a:1b:0b:
17:74:56:55:7a:08:ae:2a:74:d4:0c:19:6b:f7:14:10:29:c6:
69:65:f5:3b:be:37:9d:4d:65:d4:8f:82:c5:7f:a1:e4:1a:fd:
c4:27:2f:8a:30:57:8f:db:a2:87:6c:b6:c1:65:48:52:1a:8b:
c5:ae:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:47 2026 by rpki-client