
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
File: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft (raw, json)
Hash identifier: u0PmpHPRpK/4yWXC4PvQEHhUYpks3UW7gEfih9BNWRo=
Subject key identifier: F2:2B:D8:3E:93:E6:F0:9E:06:57:2B:E0:D2:5A:47:86:E4:2A:6A:AD
Authority key identifier: 77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C
Certificate issuer: /CN=A918C2EB/serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
Manifest number: 2D
Signing time: Fri 13 Mar 2026 07:37:52 +0000
Manifest this update: Fri 13 Mar 2026 07:37:52 +0000
Manifest next update: Fri 20 Mar 2026 07:37:52 +0000
Files and hashes: 1: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl (hash: oIhwzr4xmHECwfxYJVL99adTKqdzR21Asv+cfJywOQs=)
2: 9C9F9D6AE61511F0BA7CC46D6A6F56BC.roa (hash: p8eavba2zmjT8rN7Dr/GDzyItyV8Fg/l0iky6Jo7qLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl
rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2EB, serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
Validity
Not Before: Mar 13 07:37:52 2026 GMT
Not After : Mar 20 07:37:52 2026 GMT
Subject: CN=69b3bed0-ef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:7d:e0:ff:43:a2:97:b9:23:97:b6:94:2b:
3e:c0:46:a0:2d:5b:7f:4f:62:f4:4b:65:27:4d:14:
3b:89:b6:09:c1:02:8c:5f:8c:50:77:59:78:04:d4:
7a:29:c1:28:69:58:eb:bc:cd:2c:30:a9:19:80:0a:
30:93:9f:bb:19:17:f3:4d:14:7c:bd:67:af:9f:94:
a7:c5:ae:6d:60:7c:7d:14:54:4a:6b:be:4c:37:39:
1c:a6:84:63:32:d0:eb:d1:42:92:1b:e0:84:6e:84:
16:81:77:e7:b7:51:c7:0c:2b:50:e9:fe:3c:8f:1b:
16:b3:f7:4b:d9:bf:c3:a4:88:2c:c9:5f:ed:4d:b7:
00:26:94:06:39:ec:55:a8:31:e3:7d:01:15:2b:c5:
ac:79:9e:1a:68:d0:5b:2d:33:de:54:73:c2:ba:2e:
b2:fe:27:7b:1e:e3:8e:06:b0:89:68:8a:15:f7:27:
d1:b0:5d:d5:7b:d0:c5:a3:83:a4:91:1a:38:50:01:
f3:97:93:79:32:0c:18:c3:e4:f2:46:5d:1f:4f:6f:
5f:d9:e0:64:34:f5:ac:01:3f:bb:30:de:f4:ee:b9:
99:19:78:5d:b8:11:96:ef:46:36:1e:31:2d:ea:3b:
bc:c5:85:f4:46:73:c5:2a:dc:cd:93:03:2f:49:9c:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:D8:3E:93:E6:F0:9E:06:57:2B:E0:D2:5A:47:86:E4:2A:6A:AD
X509v3 Authority Key Identifier:
keyid:77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e5:9e:cd:74:35:d5:c3:a2:64:47:ed:50:92:8a:53:ef:f8:
31:48:6e:27:69:48:dc:7f:c4:25:96:d1:90:d2:c6:f9:d1:7e:
8a:6b:5c:8f:eb:a6:0d:9b:e3:ac:f8:ec:3e:7f:03:19:01:96:
41:2b:27:5f:1d:40:cc:3b:20:a2:c2:8e:98:97:bf:02:3c:3a:
92:65:aa:82:55:93:23:24:f7:e1:a6:ef:19:e5:c6:0d:77:b5:
28:6d:d9:59:aa:d5:8f:ca:d1:5b:63:bc:76:bf:e2:0c:31:bd:
b5:ab:69:6f:cd:92:a2:a1:49:6e:c8:1d:f4:87:bc:04:f0:a4:
9c:d0:42:33:df:64:ea:1b:9b:cb:6e:d7:aa:09:5b:11:41:0b:
a8:92:85:b2:10:5c:2a:38:54:38:19:a4:8e:c5:74:0d:5f:96:
d5:98:0a:f3:e7:42:4b:bc:6e:8e:42:84:71:21:24:69:e4:da:
65:ee:f2:3c:b6:1a:e8:a8:ee:2e:e1:ee:9c:8d:ce:9b:87:0a:
e1:87:15:1e:f0:85:a2:16:63:e1:85:0f:8c:4e:af:4e:05:e7:
cc:cf:78:d8:67:03:09:f5:2d:4c:f6:57:f5:77:fe:68:04:4b:
5c:e2:d3:bc:80:24:bd:0d:59:cb:56:1c:dc:08:3d:87:6d:36:
11:e5:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:04:57 2026 by rpki-client