
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier: vRQ+eLXeEXf8bW5sjbJ4Kd0ii+8TbJo2CnDOTwrs0kQ=
Subject key identifier: 39:05:0D:7E:14:ED:B3:5C:EF:FC:CE:50:F6:D3:0B:92:C8:75:3B:8E
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial: 04A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number: 049C
Signing time: Wed 19 Aug 2026 00:19:55 +0000
Manifest this update: Wed 19 Aug 2026 00:19:54 +0000
Manifest next update: Wed 26 Aug 2026 00:19:54 +0000
Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: /CyZYWu5tXD1ScOi2DJOWlJB5wRqIzymjfwilCebWPU=)
2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Validity
Not Before: Aug 19 00:19:54 2026 GMT
Not After : Aug 26 00:19:54 2026 GMT
Subject: CN=6a84f6ab-dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:d0:e8:9d:82:6d:f0:a7:df:b9:41:89:a0:
f4:3d:2a:d2:0e:8a:47:f1:98:dc:e0:00:7f:cd:5f:
c6:b1:f7:1e:fb:43:3b:46:4c:ea:84:83:68:e0:0d:
cd:fd:47:eb:90:1a:11:f5:f1:96:98:c9:5e:0f:48:
fc:11:ec:59:3d:42:c4:3c:41:9f:35:dc:88:73:e1:
58:b0:07:18:fd:5e:67:fd:0f:65:2b:0c:36:57:92:
f5:78:16:3e:67:fc:f5:cf:98:6c:7b:08:ee:5e:5f:
4b:3c:39:3f:6e:0d:ee:5b:d8:73:d4:03:49:0b:49:
53:3f:22:22:8d:6d:b7:a7:58:d4:97:46:51:f4:a5:
ec:6f:b2:e1:a0:72:6d:88:95:68:5d:dd:81:2a:08:
4a:de:77:4b:2a:56:65:d0:83:49:13:9b:5b:b8:75:
a6:9e:6d:9f:cc:d5:1f:16:db:ac:20:5c:c7:1c:00:
5f:fd:5f:5d:b2:c1:d0:c7:b6:b7:55:88:aa:ce:1e:
7b:4d:78:98:59:ad:da:2c:61:7c:dd:1f:17:f3:cf:
56:13:7c:e0:10:8e:68:bb:3f:01:46:38:d5:77:94:
cf:c6:ce:ee:2a:4d:54:fb:30:b6:d1:2e:1e:75:63:
2b:2f:65:da:0b:fe:5f:d4:ae:4a:fe:f9:41:d0:16:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:0D:7E:14:ED:B3:5C:EF:FC:CE:50:F6:D3:0B:92:C8:75:3B:8E
X509v3 Authority Key Identifier:
keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ba:3a:96:c8:bc:b9:4a:18:d0:c4:09:a3:63:eb:b7:e9:60:
19:59:b9:fb:df:a2:43:8f:6a:3c:55:d6:4b:b4:98:12:c6:38:
61:5e:f8:be:02:ac:01:d7:65:1f:01:90:02:2b:df:26:ef:a0:
b9:36:32:45:e8:eb:ac:cb:d8:d5:b7:69:7f:de:fe:59:09:7d:
9d:ed:2c:26:19:3e:a5:ed:1e:2c:6c:85:78:06:09:39:7d:f1:
d1:90:f2:b7:3d:44:12:d2:6b:54:30:f9:b1:92:7b:8e:c9:76:
78:9f:c7:5d:66:7e:21:fe:cc:db:ea:09:c3:11:64:ed:6d:56:
e3:98:78:3a:8d:02:ae:7b:a7:28:aa:fd:73:f6:c0:86:74:39:
f4:36:1b:91:5b:17:d7:63:df:00:a9:b4:78:df:49:ba:12:7d:
92:8a:62:cf:6c:f5:3c:88:ae:46:ea:6e:15:e6:b0:bc:e2:cf:
9a:09:d9:55:2f:75:50:77:f1:df:2d:53:17:a1:63:1b:8d:b1:
5e:18:d6:64:67:5c:91:27:47:ed:bc:8c:45:3c:d3:c0:08:30:
d0:35:1e:ac:7a:36:8c:b7:71:06:7d:dc:78:74:cc:83:9d:01:
62:03:74:a2:c9:22:60:55:7b:6f:cf:c7:66:3a:d4:dd:e2:7d:
4f:05:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:34 2026 by rpki-client