
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json)
Hash identifier: +8Tamjt3H0Q+YwY/lL4eGfbIVY4BVkmvXYfcc2AjI5o=
Subject key identifier: AF:74:20:54:89:38:24:B9:39:41:F8:9E:BD:16:36:CA:F5:2B:BD:85
Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
Manifest number: 016A
Signing time: Sun 31 May 2026 23:40:57 +0000
Manifest this update: Sun 31 May 2026 23:40:57 +0000
Manifest next update: Sun 07 Jun 2026 23:40:57 +0000
Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: 9c551EKp+t5GwtvR25rB45PnKz0J5egvlVJb/4FVrMA=)
2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: 2/r4oR0iCi4LexUGtmPzKzEWeEmDyv6SAtyEMBATvFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124
Validity
Not Before: May 31 23:40:57 2026 GMT
Not After : Jun 7 23:40:57 2026 GMT
Subject: CN=6a1cc709-4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:e1:67:fe:03:27:0d:5d:8e:18:68:1c:b3:
76:62:41:9b:4f:5e:d2:55:45:e9:28:6a:fe:b9:34:
ba:43:42:b6:6b:5b:f8:8f:86:67:69:53:2e:cb:f8:
ba:3c:b2:98:f5:76:36:1e:fc:8c:c9:2e:63:7f:19:
b4:ec:0c:3f:fe:47:7a:9e:87:4b:0f:46:86:f5:c6:
5a:a8:e7:19:80:8a:d0:9b:fa:7a:1b:6f:1a:3c:0c:
dc:a2:2b:6a:c7:25:15:fd:8d:2a:59:58:a6:e0:0f:
83:55:bf:46:bf:9b:cb:e1:8e:9c:e2:01:a8:c6:78:
b8:f5:2b:66:d3:b1:1b:a8:a3:97:54:8c:f8:2f:ad:
e1:9a:c7:3c:4f:d0:45:fa:f6:32:37:6d:d6:ef:93:
47:25:57:dd:e5:30:ba:f3:f5:29:29:75:94:69:ed:
c9:d1:55:55:63:27:53:63:b3:84:da:25:e5:16:9a:
f9:2f:91:3e:bb:ab:88:12:e9:05:d8:24:41:e8:84:
5c:74:85:29:de:65:f3:69:ad:05:17:7f:70:1a:1d:
19:93:41:26:5c:db:c6:f3:e5:8f:00:d6:db:f5:c0:
2c:67:84:d9:ea:7c:9c:03:c3:03:14:e6:d0:b3:c8:
82:23:36:de:5a:18:37:f1:c6:80:ea:e4:3c:a3:26:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:20:54:89:38:24:B9:39:41:F8:9E:BD:16:36:CA:F5:2B:BD:85
X509v3 Authority Key Identifier:
keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:17:34:5e:39:5e:45:4a:2a:6f:d4:03:48:9c:d8:c6:c0:
5f:9f:62:80:07:79:d2:83:90:d0:58:c6:cc:ae:ce:fa:bc:13:
aa:71:c6:be:ee:03:85:06:ef:06:b2:a7:91:0f:6d:01:bc:91:
8b:cb:30:36:46:4e:7c:21:44:07:43:73:70:39:41:d2:dc:95:
2b:39:6e:b5:30:4e:dc:76:1a:a2:36:37:e8:da:43:ee:d0:a0:
f6:89:3e:22:d5:59:e5:b5:db:4a:6c:13:0a:82:69:8a:5c:12:
99:6b:cb:9e:61:51:85:d8:9a:a2:9b:07:b8:15:85:ff:86:74:
f2:a9:a7:2f:65:60:72:b8:a6:ec:db:a9:79:71:dd:30:7e:13:
81:f7:d3:92:37:13:9a:fa:7b:57:02:46:58:75:5a:e4:d1:40:
28:06:ce:d1:99:b8:6e:9c:21:37:b9:bd:b0:ec:ca:5e:c3:88:
b2:ca:a4:07:dd:5f:a4:18:9f:6b:8c:b0:44:76:c4:b7:88:fc:
d1:1c:48:18:12:9b:7e:15:28:d3:3d:00:a8:b3:85:47:c7:a4:
1c:09:d6:68:28:68:d5:0a:05:5f:55:d1:99:92:b8:72:0d:eb:
60:0d:0f:e9:27:28:99:c5:44:18:ef:dd:73:c8:9b:08:f4:8a:
05:c7:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client