
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier: syanOJwv3W16YHy8GuaWVTAgHOB65PGtQN/kBw2ENx4=
Subject key identifier: 49:99:B9:D6:78:23:49:ED:84:33:46:5E:1C:45:E3:F3:3C:8F:C7:A3
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number: FB
Signing time: Sun 05 Apr 2026 05:39:02 +0000
Manifest this update: Sun 05 Apr 2026 05:39:01 +0000
Manifest next update: Sun 12 Apr 2026 05:39:01 +0000
Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: rGJPp3EG3AyHKcw7A9i8cbhcd7mWNMX1HtfU/Mdp5nk=)
2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: ajdGzJbwz5TOYdIi82plxkghmo/zXY3H1Me9aI3spR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Validity
Not Before: Apr 5 05:39:01 2026 GMT
Not After : Apr 12 05:39:01 2026 GMT
Subject: CN=69d1f576-463a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:43:cb:d5:e2:37:5e:f3:1f:61:e6:b5:2c:
7c:a3:d6:cc:4c:1b:0f:41:b6:e1:7d:5b:6a:65:cb:
5b:67:c0:34:14:6b:df:f5:e8:6b:a1:3e:25:ff:a8:
8c:10:5c:2d:1d:3e:47:1a:86:6e:c0:20:7d:58:8e:
5b:aa:ea:60:cf:72:b2:62:c7:cb:d0:2e:38:eb:70:
69:a2:2f:21:c7:32:3d:e8:7a:46:d8:84:6b:c1:3c:
e2:01:5a:54:d2:e2:e1:0f:a8:a5:98:b0:66:d1:46:
9f:61:f6:e9:7b:6f:69:2c:7e:04:14:9a:ce:8d:57:
f8:96:05:0f:f6:b1:4a:1e:e9:cc:70:ec:e4:1a:e8:
a7:d3:82:35:9f:95:73:cc:e9:9d:66:c7:5b:45:ff:
a6:3f:ce:2b:79:92:2a:0f:b8:ad:de:ba:7f:53:e4:
7d:5f:42:83:04:e7:b7:40:8b:fa:64:b2:fe:af:49:
b0:ff:de:ec:ec:85:6f:3a:a3:1d:de:f8:b1:73:a9:
62:57:d4:03:9b:a4:0f:22:20:02:d7:49:93:03:9a:
fd:69:03:34:57:35:89:a5:67:da:59:48:e0:58:f2:
dc:31:48:9f:e9:b1:b5:48:2d:a1:a6:79:f1:17:d1:
f3:8e:33:f7:05:ee:2d:ab:fa:97:0e:ff:12:b7:bc:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:B9:D6:78:23:49:ED:84:33:46:5E:1C:45:E3:F3:3C:8F:C7:A3
X509v3 Authority Key Identifier:
keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:07:c0:f8:72:21:12:ac:3c:e8:2b:03:1a:31:52:a3:67:
36:94:a5:95:a8:70:46:bd:28:05:f5:d0:17:ae:60:5d:f6:99:
c9:3c:83:9e:c9:3f:be:c3:8b:bb:a4:47:97:62:c7:0c:b6:b6:
a0:1e:08:fb:7c:04:da:05:1a:6d:76:bc:00:87:f1:60:34:52:
d3:20:d9:bc:2d:38:49:f5:b7:e3:1b:ce:bc:d7:86:76:99:bd:
99:2f:56:40:08:c2:25:90:b0:72:55:d2:bc:5d:40:f4:4a:57:
4e:3d:06:f8:7a:c9:5e:fc:95:5b:d1:a1:4e:bb:d5:ca:94:63:
9e:d1:c8:37:09:eb:2f:f2:90:0c:80:58:ac:a4:90:4e:bf:5c:
ae:ad:23:44:60:1f:6e:42:95:1f:79:a8:7c:d8:68:fa:a2:45:
99:d7:4e:e5:f6:a4:39:19:dd:06:9f:a3:ad:64:33:28:85:2e:
d9:e3:ec:1f:ab:2a:8a:3d:13:69:c9:b5:ca:7a:e8:1a:7f:92:
3a:d9:76:c1:11:5a:47:65:1a:c8:a7:46:29:af:11:60:69:38:
f1:3b:f3:bf:30:d8:48:fe:fb:7f:3f:f3:3e:6a:44:c4:0d:90:
ab:f7:8d:4a:4d:20:a5:0c:1c:51:3c:24:45:c5:d7:bf:cf:4b:
45:2e:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:16 2026 by rpki-client