
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json)
Hash identifier: 3GNIDSTJoB4Iua3RexIbQP9uvQBY3sgEgcE83L3s7Q0=
Subject key identifier: 35:25:C4:BE:BC:BC:5A:09:8D:FE:4D:65:3D:20:7B:FD:CA:8A:D3:63
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
Manifest number: 0160
Signing time: Sun 05 Apr 2026 04:27:08 +0000
Manifest this update: Sun 05 Apr 2026 04:27:08 +0000
Manifest next update: Sun 12 Apr 2026 04:27:08 +0000
Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: kTr8PI4NOvnaj9fHecu613qWfTJpFGhBCi8rBuGTQ6A=)
2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=)
3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Validity
Not Before: Apr 5 04:27:08 2026 GMT
Not After : Apr 12 04:27:08 2026 GMT
Subject: CN=69d1e49c-1e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:82:27:cf:e3:a1:aa:25:4c:4f:4b:87:6a:
cb:56:a4:d0:44:03:c5:ca:9b:da:d3:17:c8:59:8e:
50:f8:58:96:cd:f1:f0:e5:48:ce:fc:ac:88:42:bc:
68:14:07:24:39:db:88:a5:ef:dc:f1:c5:96:b6:75:
7c:a9:4d:e8:c7:e2:b3:30:8a:2d:2b:fa:ab:e8:1f:
99:ea:ef:85:97:a0:ff:f9:5c:80:c2:38:ae:6c:62:
3f:46:08:d1:63:9c:f3:f6:9c:c4:8d:f7:1f:69:18:
13:c1:8f:2c:ce:68:2e:75:13:2c:1a:56:32:ea:3e:
85:53:dd:ef:9f:da:f9:1a:9d:77:09:89:df:14:40:
2f:5f:4d:7c:5d:a9:f6:70:9e:fa:d6:6a:3c:c6:c1:
96:eb:3b:e9:33:7c:46:4a:dd:cb:c8:63:ce:cb:74:
2f:33:ad:e0:26:2a:74:11:bc:89:57:68:a4:5c:af:
7e:95:b3:69:f4:d9:49:80:8b:d7:6d:31:c1:0e:8a:
7d:e8:1f:81:8c:b7:0e:ea:46:c8:68:46:bf:2e:4a:
6f:bb:1a:82:9f:c0:33:73:26:59:c0:e1:04:ff:04:
e1:c9:63:7c:25:80:21:65:19:ca:44:fa:0f:b0:23:
16:ac:13:87:c4:60:95:9a:3b:d7:f6:b4:8a:ab:ca:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:C4:BE:BC:BC:5A:09:8D:FE:4D:65:3D:20:7B:FD:CA:8A:D3:63
X509v3 Authority Key Identifier:
keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:1b:1b:ca:c4:22:3f:ec:28:17:2d:a5:a8:6c:fc:57:b7:
5f:96:45:3a:7d:db:12:9c:67:4c:06:ed:4f:96:ec:f8:89:fa:
14:33:d0:2b:4c:84:1b:64:02:21:38:e0:89:9c:1f:d1:e5:92:
ed:eb:38:c8:c8:1c:90:cf:d2:a2:b4:5d:7d:e0:48:4f:ea:73:
8f:54:f6:64:da:eb:57:a3:30:a4:3b:6e:09:59:9d:41:00:d1:
8d:42:91:63:84:6e:d6:47:db:0c:7a:fd:5d:9c:15:2d:b9:61:
ae:22:ab:84:93:7d:13:79:a7:3d:5d:53:e4:34:c6:51:3f:a6:
30:01:06:b8:a0:c2:da:52:94:20:44:16:91:45:be:11:9f:dc:
59:e6:7f:8d:7b:69:b3:ce:c6:23:17:a7:7f:c4:26:01:91:ef:
70:f6:6a:ea:a2:bc:bf:0b:14:e2:29:8e:08:18:ec:64:e1:10:
90:39:ec:b2:15:cd:c8:d7:3a:ea:68:94:04:d9:8e:db:7e:94:
1b:cc:d4:f4:e5:c2:b8:35:15:ef:b0:eb:96:f1:60:8e:ca:88:
68:b6:1b:88:fd:32:41:e2:21:61:e5:32:32:88:b6:43:ca:d0:
10:9f:a2:fb:2e:e8:64:af:dd:be:f2:93:c5:6b:2d:86:0e:70:
a7:45:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:33 2026 by rpki-client