
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier: JN+knstNYmwwVFDD3sKuDQ679t/PNiQKWDRRC3K2Wjo=
Subject key identifier: 95:77:12:66:41:03:15:5C:99:E5:BF:D5:3B:34:3C:E1:1D:EB:0A:1C
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number: 0159
Signing time: Mon 05 Oct 2026 05:34:12 +0000
Manifest this update: Mon 05 Oct 2026 05:34:12 +0000
Manifest next update: Mon 12 Oct 2026 05:34:12 +0000
Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: ckzJ03HtRwdWP/t5U20mSpj8TnSu4ZvhHwC7N3VM1zY=)
2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: zIvaOMrJj6tNY8+g0C9uE13uNUrzvq9Y4fdiG+e+9uY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Validity
Not Before: Oct 5 05:34:12 2026 GMT
Not After : Oct 12 05:34:12 2026 GMT
Subject: CN=6ac336d4-2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:6d:c5:ee:83:42:02:df:02:bb:62:09:e7:
23:21:58:ae:4b:d9:f6:ae:79:dd:c7:08:a1:31:53:
be:bc:3e:f4:7d:c6:36:ba:52:64:2d:5f:06:94:4e:
9d:2f:8d:6b:0b:06:71:44:32:8f:ad:90:ed:9e:0e:
1f:77:8d:76:a7:48:77:5c:cb:1b:cb:a2:df:03:9c:
94:a8:29:f0:fb:5e:c1:b1:b8:5f:00:9a:85:4f:f2:
c1:19:46:c9:05:11:83:e7:c2:38:3a:2c:14:dd:ae:
d0:ea:76:1a:e3:08:b0:c1:24:5f:3b:3c:a7:59:5d:
00:1c:3c:3d:22:b4:0b:20:40:52:6d:56:7e:22:8c:
80:09:b6:5a:07:31:a1:d1:97:48:ea:be:8d:6f:73:
b8:67:94:9e:3c:f2:32:a2:26:73:71:15:84:3b:ad:
a8:05:69:90:07:a8:59:d6:b8:32:48:c3:df:fa:12:
2c:5f:1c:64:21:5c:a4:7e:a6:4c:c3:f9:fd:f1:29:
c7:54:50:a5:fd:e0:b8:1d:7b:77:ab:54:8a:fb:d1:
4c:59:b4:27:fa:07:55:6c:62:a6:4d:c4:df:18:9f:
bc:a0:38:b4:22:af:a6:6f:b2:ec:e3:ce:78:64:83:
7b:06:35:d7:12:ce:38:1a:73:91:93:7f:93:66:f1:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:12:66:41:03:15:5C:99:E5:BF:D5:3B:34:3C:E1:1D:EB:0A:1C
X509v3 Authority Key Identifier:
keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:75:f8:fe:41:1b:9e:4e:3a:4a:29:c8:a0:89:29:51:27:
39:48:c0:6e:79:89:61:41:05:fb:49:2a:56:18:63:22:b1:a3:
1c:3d:d2:a8:cb:87:b5:36:52:be:72:ac:43:3c:b5:6c:20:8b:
0e:a3:49:5c:2f:78:e1:15:f9:2a:c4:8d:c6:38:3d:97:c9:a8:
83:7d:a7:f4:a6:8c:a1:64:c8:3a:ed:92:97:2e:77:62:f2:84:
a2:f5:81:89:87:ea:57:69:27:89:95:7a:3a:3a:a5:95:75:42:
f1:f0:52:1d:47:fb:b3:52:d1:e7:76:67:3b:9d:9d:43:24:57:
1b:c9:ad:03:a0:2f:7d:c7:8a:c8:9a:74:eb:3e:02:76:86:24:
a6:0d:2b:5b:5f:7b:00:eb:c4:33:8b:62:21:42:2d:89:a5:11:
5a:9e:cc:35:de:1a:68:68:3f:50:af:ef:e5:3e:58:79:dc:e6:
71:a6:41:6b:8d:ce:24:fd:6a:36:dd:3b:65:a7:31:5c:dd:e3:
d1:34:91:8a:16:d6:f1:cc:e2:5f:7f:54:7b:f3:b2:8f:91:7a:
ea:5a:c6:f7:8e:30:df:5b:2c:5e:7c:ed:e5:07:65:07:c0:a1:
f0:dc:bb:91:28:e3:45:e5:72:78:7a:3d:67:8c:fb:fc:db:79:
36:73:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:07:48 2026 by rpki-client