
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: N2kKSaPvDWJ6+xTkPk0EVzddk3jxAOmC7/GN3Oba2uM=
Subject key identifier: 0F:0F:F1:0E:C4:AE:99:AA:94:5B:05:F5:AF:8F:D1:B1:DA:DB:85:FC
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 0128
Signing time: Sun 05 Apr 2026 05:24:27 +0000
Manifest this update: Sun 05 Apr 2026 05:24:27 +0000
Manifest next update: Sun 12 Apr 2026 05:24:27 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: O9ynNt9Sr35uJZTrrMpNuovImw4dNUSqWLRdSI0iX3E=)
2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Apr 5 05:24:27 2026 GMT
Not After : Apr 12 05:24:27 2026 GMT
Subject: CN=69d1f20b-5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:e1:03:f0:a5:8b:35:8e:b7:e4:28:6e:31:
bb:29:6f:3e:28:34:d2:a6:eb:09:f2:74:6b:70:8c:
18:42:26:4c:7a:66:7c:f4:cd:96:fe:33:5b:a9:55:
ef:a4:ed:e9:6c:fe:6f:cd:f1:69:eb:bd:6a:b5:a1:
09:af:c8:43:e5:b5:ed:52:b6:f5:99:55:4e:52:17:
d0:17:38:dc:44:2d:0f:b6:ec:3e:83:a8:55:6c:72:
7b:db:d6:49:28:41:e0:2f:50:db:d1:b6:0d:9f:db:
58:a9:8b:53:8e:5b:86:f1:b2:f3:f6:5d:cc:14:bf:
73:24:b5:bc:00:de:f8:39:d5:df:11:62:5f:c0:26:
a1:76:75:58:28:4f:90:9c:72:81:f4:d1:b3:bb:41:
d1:df:c6:f4:75:e3:51:7d:c7:37:6e:00:44:75:44:
13:00:63:56:21:90:f7:ba:9d:cd:d0:6b:cb:c3:91:
41:e1:09:c1:f2:f7:41:9c:76:6c:b2:39:fd:fa:84:
02:0a:bc:88:0d:d9:90:49:a3:b0:6e:23:c7:35:a5:
82:ca:82:7e:bc:7c:28:e1:d2:84:95:16:08:ca:eb:
93:b7:8b:ae:51:e9:bd:07:c9:c7:57:19:b3:18:ea:
bc:bb:ca:a5:af:e8:d4:ca:a7:85:ae:0a:a1:70:ae:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:F1:0E:C4:AE:99:AA:94:5B:05:F5:AF:8F:D1:B1:DA:DB:85:FC
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:ca:0b:e0:90:a4:96:a2:86:d8:f8:17:45:61:86:43:cd:
11:1a:74:9f:d3:d4:c3:cb:ab:b9:6b:f8:38:9f:a1:1a:6a:9e:
17:88:78:41:7a:e7:bc:87:b2:d6:95:3e:22:6a:da:42:1a:b8:
40:c5:7b:f1:ec:26:fb:da:20:bd:b6:46:a6:e8:b8:99:bc:d6:
68:20:fb:f6:ca:76:9b:7a:ee:82:5b:8d:b9:e3:6f:00:05:18:
3a:68:67:5f:7b:41:45:22:88:46:36:56:ac:4e:5a:cc:f6:71:
d6:7c:49:38:55:b9:17:2b:c3:3d:10:de:4e:f3:31:dc:fb:a6:
4c:91:1a:c5:dd:67:b7:c2:49:f3:27:bc:1d:f1:7f:6f:d9:75:
51:e5:3a:b6:87:e0:c2:47:28:2a:92:90:05:99:4f:2b:63:e9:
32:b8:a3:10:7c:e5:41:54:7a:1d:4a:9b:e9:ef:25:70:5d:4d:
ed:2d:90:39:7f:7b:0d:24:82:72:a7:ea:25:cd:96:e6:b5:db:
a8:53:a3:01:c5:23:aa:aa:de:91:a8:b3:86:03:46:49:b8:18:
20:7a:c2:50:09:17:08:37:01:1c:9c:3e:4a:c0:95:97:00:f5:
58:5c:8e:10:d1:98:92:5c:3a:01:9c:b7:9b:00:7d:7b:23:16:
4a:95:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:34:33 2026 by rpki-client