
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: hsn+jr63Oid0ZCy+KX7H9mY2bHLb88qAzsZ0U/rpPc8=
Subject key identifier: 46:F2:C0:64:0B:5E:CB:31:16:53:92:66:96:E5:3D:D4:EA:EB:67:AB
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 01FD
Signing time: Sun 19 Apr 2026 03:02:59 +0000
Manifest this update: Sun 19 Apr 2026 03:02:58 +0000
Manifest next update: Sun 26 Apr 2026 03:02:58 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: 65ddxf5VmJg0xaWlDTWIg99k6fpj3+Hj8NLnSY5vP1s=)
2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: Z/RkFpCizjgmgGwfqkz29wdou2CdOLuqIgY1kgGpNOU=)
3: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
4: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: TcpO2pAwWZUV4OPE5KsxCXepxeEGE8042tINqAbe+zE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Apr 19 03:02:58 2026 GMT
Not After : Apr 26 03:02:58 2026 GMT
Subject: CN=69e445e3-476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:04:5b:18:4e:39:ce:2f:42:4f:17:d0:e6:
bb:cd:10:3f:e5:aa:6e:87:e6:64:5e:ca:63:f6:23:
77:48:a8:c5:bc:9a:38:f6:ad:cf:25:1a:ad:5a:25:
ac:25:04:b9:c6:c3:c4:20:dd:f5:63:6d:8a:b4:d2:
eb:e9:c4:7d:24:b2:c2:15:35:cd:90:40:01:fa:aa:
35:05:25:2c:84:b3:36:f7:6d:d9:b0:e6:2f:a8:e0:
27:16:48:83:48:7c:51:05:30:07:36:d1:f9:f3:08:
6d:ea:b6:31:22:35:53:73:a1:3f:5a:bd:10:33:5d:
2d:d5:9d:6d:83:ca:2e:ff:f7:c2:cc:37:ab:25:5c:
35:f7:b9:47:bb:e8:32:33:27:e2:92:0f:f9:0c:9f:
eb:7e:6e:86:06:dc:c9:06:c1:28:56:e3:ad:c3:ff:
72:c2:12:f0:af:45:74:4a:27:83:e6:ce:9c:42:ba:
d6:5d:d1:27:e6:2a:82:8f:c4:a0:d7:1b:66:80:b2:
b1:5f:91:c1:bb:47:0d:14:88:fd:29:3a:06:2f:3b:
3d:aa:b3:df:d3:05:05:c5:ce:32:6a:cd:20:0f:91:
4c:f7:f2:04:4b:84:2c:79:dd:83:9a:cd:22:17:c8:
9a:48:d9:89:25:d0:b2:d5:14:ee:40:1b:91:9f:fd:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:C0:64:0B:5E:CB:31:16:53:92:66:96:E5:3D:D4:EA:EB:67:AB
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:62:4d:7d:32:5e:20:22:07:64:7b:c6:63:b7:70:81:f8:
20:4d:d9:36:f7:57:1a:35:a0:40:0b:75:25:f8:20:dc:1c:09:
f2:0f:48:08:95:9a:5d:4d:16:12:fe:1f:3b:54:5d:5e:e6:2a:
e1:a1:e5:65:76:f8:aa:67:24:36:a6:c6:ff:d4:91:4c:11:64:
6e:83:c2:fa:64:a0:31:9e:35:5e:71:cf:dc:5a:f3:ef:1b:53:
6b:f6:44:a3:7d:2a:39:88:0b:69:18:80:d3:5d:e8:36:92:88:
d6:bd:a9:58:d2:a8:d8:bf:da:9f:fc:70:18:05:8c:4f:10:1a:
1a:ed:98:2e:34:d8:22:68:e4:5e:ca:4f:03:64:a7:6b:fb:47:
36:45:39:1a:2d:40:5b:07:e9:f5:53:7a:c9:50:cd:24:7c:e9:
ed:db:c7:71:d6:cd:7b:d5:6b:4f:ee:45:4b:bd:57:2b:e3:c3:
6c:42:77:9c:bb:77:19:62:70:15:04:fe:cc:56:e0:5f:25:68:
7b:1a:be:ce:88:54:e2:02:2f:70:54:68:9d:69:ca:9b:c6:02:
c7:9e:88:8a:95:47:2b:9f:98:ec:78:13:52:51:2e:74:bd:ae:
2f:49:69:67:b0:70:49:62:f7:55:c9:79:af:c6:70:bf:13:71:
d6:29:0a:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjYwNDE5MDMwMjU4WhcNMjYwNDI2MDMwMjU4WjAYMRYwFAYD
VQQDEw02OWU0NDVlMy00NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpwEWxhOOc4vQk8X0Oa7zRA/5apuh+ZkXspj9iN3SKjFvJo49q3PJRqtWiWs
JQS5xsPEIN31Y22KtNLr6cR9JLLCFTXNkEAB+qo1BSUshLM2923ZsOYvqOAnFkiD
SHxRBTAHNtH58wht6rYxIjVTc6E/Wr0QM10t1Z1tg8ou//fCzDerJVw197lHu+gy
Myfikg/5DJ/rfm6GBtzJBsEoVuOtw/9ywhLwr0V0SieD5s6cQrrWXdEn5iqCj8Sg
1xtmgLKxX5HBu0cNFIj9KToGLzs9qrPf0wUFxc4yas0gD5FM9/IES4Qsed2Dms0i
F8iaSNmJJdCy1RTuQBuRn/1SzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbywGQL
XssxFlOSZpblPdTq62erMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmSpiTX0yXiAiB2R7xmO3cIH4IE3ZNvdXGjWgQAt1Jfgg3BwJ8g9ICJWaXU0W
Ev4fO1RdXuYq4aHlZXb4qmckNqbG/9SRTBFkboPC+mSgMZ41XnHP3Frz7xtTa/ZE
o30qOYgLaRiA013oNpKI1r2pWNKo2L/an/xwGAWMTxAaGu2YLjTYImjkXspPA2Sn
a/tHNkU5Gi1AWwfp9VN6yVDNJHzp7dvHcdbNe9VrT+5FS71XK+PDbEJ3nLt3GWJw
FQT+zFbgXyVoexq+zohU4gIvcFRonWnKm8YCx56IipVHK5+Y7HgTUlEudL2uL0lp
Z7BwSWL3Vcl5r8ZwvxNx1ikKxg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 06:11:11 2026 by rpki-client