
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier: bf0p7nLwK52ULm9ISvhiV7a21rb/ll9ino2j0UNlx1U=
Subject key identifier: F9:AA:E6:ED:32:12:8E:11:41:BE:50:2C:82:17:35:28:18:1C:CE:35
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0ABB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number: 0A8F
Signing time: Fri 16 Oct 2026 19:48:17 +0000
Manifest this update: Fri 16 Oct 2026 19:48:16 +0000
Manifest next update: Fri 23 Oct 2026 19:48:16 +0000
Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 5/9Ed6ho/JnCM/LUWI0+IghhUrxKD4wtLdVb/D08T/8=)
2: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: tmTcUM1Gt6DkqNwBrnAaOzy4iBZeySyylbDIucJKHRw=)
3: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: cmVZdqv7w9NRqhgcmC2ej8pHoBznVSbIbEo4RoHW2Pk=)
4: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: PkC4dRO+Wlbu8dm7WWCNEBHmc6F+L3L9mcM175HSXiw=)
5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: 5jC5+vB+RNAR1xgd8lYPtE5GXYcgqWVuOUMwuqN2UnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 19:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Oct 16 19:48:16 2026 GMT
Not After : Oct 23 19:48:16 2026 GMT
Subject: CN=6ad27f81-e24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:01:d5:13:18:9e:b5:06:aa:b9:4f:76:73:
22:86:78:36:53:97:80:45:43:c8:a7:53:48:91:a1:
58:8b:ba:2e:45:d5:99:91:5a:91:6c:83:03:0e:e0:
1f:fe:39:86:2d:f5:a0:7f:35:3f:bc:b1:3b:f4:8d:
31:36:c7:25:7a:6c:36:cc:90:4e:46:a9:f5:0d:12:
cd:76:29:11:97:a8:3c:5d:f1:38:8a:10:c8:b0:05:
33:2d:4b:fa:37:27:be:8a:34:5a:ce:fa:13:ce:ed:
58:a6:5e:dd:a0:aa:ad:74:01:77:d8:36:eb:9b:c1:
33:43:b2:1c:ca:d0:73:1e:97:c8:b3:7b:30:19:55:
da:ef:f1:4f:e4:e4:0e:f7:42:6c:fd:b1:c0:f9:24:
ee:1a:78:30:ec:8a:fa:3e:9d:74:a1:70:2d:86:d0:
35:fd:4e:10:1b:c6:34:8e:15:d7:b9:c7:d7:e4:6a:
45:83:37:7c:97:a3:99:81:89:43:ec:79:b0:13:ec:
10:a5:8f:b2:49:bd:cd:7b:f1:c0:68:e2:32:e0:dc:
05:44:4a:13:21:f9:64:3e:ea:0a:60:81:b8:a5:16:
e9:1e:4d:f4:9d:f3:11:d0:bd:21:9b:bb:8c:97:b7:
d7:d1:d0:ef:0c:21:41:41:6b:50:26:06:7f:43:88:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:E6:ED:32:12:8E:11:41:BE:50:2C:82:17:35:28:18:1C:CE:35
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:73:a2:65:e9:c7:70:f2:b1:3d:d4:60:c8:42:11:00:b1:e7:
54:11:8c:46:25:54:2d:bc:b5:e9:07:17:4f:ac:14:bf:10:9a:
d8:4e:d0:77:ac:15:ce:e4:c5:49:45:a6:fd:e5:0c:a5:55:b2:
07:1b:6b:fb:db:03:0a:4e:07:15:02:4f:65:9b:4a:b2:5c:ad:
48:e0:61:0c:e1:2a:18:bc:a8:d6:26:65:77:78:99:0b:0c:b1:
8c:9c:2a:20:4d:1a:d7:b9:e0:a0:07:f6:93:a7:8c:ae:af:a0:
11:01:7d:53:c6:c4:e0:3b:fd:d2:04:b9:a2:33:0c:2d:47:e4:
aa:a9:3c:a4:45:2c:f7:39:53:26:19:17:7e:e6:67:13:3a:47:
cc:51:96:bc:1c:d3:0b:0f:e7:ce:6f:0b:2e:ee:b4:47:84:46:
68:3a:a2:03:ce:95:30:2b:39:e5:74:91:2e:e8:fe:f8:34:77:
85:a3:cc:78:bf:a9:89:5e:d6:fe:72:66:65:ce:43:22:11:00:
ee:31:c1:0e:23:28:cf:85:02:39:1c:b3:ff:d4:07:43:60:ae:
9a:10:c3:71:44:ab:5d:f6:4f:25:7c:a0:46:02:88:61:7d:9c:
ba:d1:e9:0f:55:b6:d9:04:89:8b:58:81:b6:cd:ce:f5:36:a6:
71:46:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:50:11 2026 by rpki-client