
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: a8svfwTwPTXnktPmWLKn6J2uagi2bGeJvVbOBD67mwo=
Subject key identifier: 9D:EC:71:C3:10:BB:FC:2A:DB:9D:B2:49:08:8D:DA:26:99:45:68:37
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: B8
Signing time: Tue 03 Mar 2026 06:40:17 +0000
Manifest this update: Tue 03 Mar 2026 06:40:17 +0000
Manifest next update: Tue 10 Mar 2026 06:40:17 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: tpm3FwIXkfIAu8sWZoqRvgm1iSPzhKpRElmpNhhAiGI=)
2: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: 2KR0aKOX1uJs95laOd7AQOJL2qLcBa6RhZbXIKQSp/8=)
3: 69AF571603F211F09BC45354C4F9AE02.roa (hash: 53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Mar 3 06:40:17 2026 GMT
Not After : Mar 10 06:40:17 2026 GMT
Subject: CN=69a68251-afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:c4:35:e4:cc:a7:ab:45:62:fe:90:e3:51:
46:63:8f:5a:c4:2d:9a:02:57:49:77:1b:04:08:3c:
88:81:d4:be:f0:b9:f0:29:69:91:d3:b1:2e:1a:0e:
91:ac:18:36:5a:71:b6:98:9f:89:88:4d:c8:86:c6:
fd:2b:1f:6c:0a:0f:1e:25:8a:02:fa:71:a8:c3:35:
9d:47:6e:12:52:27:3c:93:89:3d:a4:b2:d2:1e:5c:
cf:a5:48:b3:96:81:5b:e9:cc:b2:26:d4:d8:6b:83:
e7:70:f1:7f:02:4b:e5:b0:e7:4c:ad:92:93:6e:b5:
3f:b2:2e:75:8a:b9:03:d7:c9:1f:af:6d:a6:3b:29:
59:57:0d:87:48:94:53:c2:4b:49:2a:fb:47:a5:52:
7a:99:d5:74:46:05:ec:35:2e:a5:e0:e8:d7:9f:45:
01:06:07:42:d6:89:eb:dc:f9:e4:b8:11:90:ef:5f:
c2:db:70:97:2a:ce:6d:9f:31:b1:59:4e:0c:e3:63:
74:27:6f:ab:bc:2f:a4:c3:26:e5:52:69:52:79:68:
bc:3e:fe:37:8a:8f:03:fd:2d:38:fd:b0:a8:2f:fd:
92:21:4d:6f:b7:35:2e:2e:18:ae:11:d4:45:6c:7c:
36:75:b8:a9:4f:e4:ad:7c:c1:0a:99:1a:47:58:b3:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:71:C3:10:BB:FC:2A:DB:9D:B2:49:08:8D:DA:26:99:45:68:37
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:96:19:1f:d5:41:be:90:7e:b5:12:44:3f:4d:01:b3:3e:
b9:da:14:9a:e4:e8:ee:41:4b:d0:0a:d1:9e:53:a6:a7:5e:9a:
2a:89:95:4f:17:51:55:56:2e:92:76:42:d7:23:19:b6:c5:53:
fd:b7:1b:2b:28:07:58:92:ac:18:32:1f:a1:9a:5f:b1:b2:72:
16:2c:7d:82:c3:4f:ce:24:72:7b:e4:92:df:f8:d3:d4:5a:aa:
58:ea:75:b2:32:b8:bb:38:07:02:2c:9c:e2:35:78:33:44:45:
14:2a:23:0f:24:ad:af:be:f4:58:c6:d7:63:4f:54:da:0d:e3:
f7:75:a0:b5:40:d8:e7:15:99:97:e4:d9:70:78:37:39:cb:24:
bf:03:96:34:02:8f:39:c3:7e:2b:b8:49:f9:9e:4d:bc:ee:6c:
b3:82:33:63:09:d9:1d:e8:ed:15:30:06:3c:3f:43:51:4c:1b:
ff:75:fe:0f:5e:5b:5c:94:e5:b5:6c:4f:f9:d4:e0:7d:3b:51:
66:78:8f:e0:10:dc:da:50:b4:48:15:05:e7:93:5a:5f:24:76:
92:5f:91:16:01:9c:c0:24:d3:c6:60:03:79:8b:c3:f2:57:98:
6a:ed:46:e1:f0:31:af:f6:bb:03:50:00:b2:bd:23:0c:d5:56:
b1:8f:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:03 2026 by rpki-client