
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json)
Hash identifier: M0xlg0R2qLXlItk6BjaF1Ynf5Qp/16FwTWK/NuctWz0=
Subject key identifier: 3F:8E:13:20:66:85:45:74:96:AF:D4:40:12:A3:A2:6E:60:0C:D7:09
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
Manifest number: 0209
Signing time: Wed 13 May 2026 03:11:53 +0000
Manifest this update: Wed 13 May 2026 03:11:52 +0000
Manifest next update: Wed 20 May 2026 03:11:52 +0000
Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: 2Fcb1rxOB1A1mgTgQFjsS++zXkIlF8OJuPX86r2eSYY=)
2: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: Qw602Sckd2/N9jm6ruJ1XGTkVVOUhHXyrZbE5W34mKU=)
3: D1B29B22765011F0BCBD414BC4F9AE02.roa (hash: 3KENrC5WrRZRPFGx9/gzXu8N7uPLfOfzWj8eTs8V+0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: May 13 03:11:52 2026 GMT
Not After : May 20 03:11:52 2026 GMT
Subject: CN=6a03ebf8-0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:91:22:9b:09:5e:14:e2:c1:2e:80:81:e1:
e3:d0:d8:2b:89:29:76:80:df:c9:93:ed:ea:b9:18:
b7:29:f9:ba:f3:84:5f:8c:19:eb:2b:64:f8:94:76:
db:52:3d:9f:82:63:17:65:77:bc:f9:9f:e8:03:90:
d0:71:cc:23:eb:ef:d5:78:87:d4:02:3b:8c:28:cf:
e9:28:01:d9:80:97:74:7b:b4:96:b8:fc:34:9f:56:
84:99:f9:f2:5a:9a:8b:ca:50:29:5f:f9:89:c5:3a:
b9:9e:18:58:c2:56:82:f2:39:fa:c6:d4:72:4e:fb:
ed:85:4c:c1:fa:47:0c:57:56:32:c5:7f:dc:c1:9b:
a5:87:86:ba:14:cd:a7:7a:4d:b4:75:a8:50:4e:d7:
2f:87:03:ef:b1:85:82:3c:87:3e:f7:62:1d:7c:27:
a7:9a:a6:fb:2f:3a:b3:84:30:f3:0a:de:5b:12:13:
89:1b:e8:99:c3:e4:11:d0:1e:ef:a7:73:7e:a1:b9:
e8:d2:22:36:08:fc:38:cc:67:d1:f4:88:bf:f8:a0:
c1:f4:4c:7f:5a:1e:c6:4f:1d:a7:6f:6e:00:07:0b:
6f:42:50:7f:8d:d8:cb:ca:34:ae:79:ef:d3:3d:6c:
30:8b:10:16:e3:66:26:40:fd:3c:eb:1c:a0:d7:08:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:13:20:66:85:45:74:96:AF:D4:40:12:A3:A2:6E:60:0C:D7:09
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:42:99:89:13:64:b1:73:88:e3:a8:09:d9:44:73:ce:b3:ac:
e1:a2:49:fe:42:96:72:b9:78:cb:57:f4:25:61:1c:ab:dd:3c:
5f:4c:1e:0f:da:9b:06:ba:85:35:1a:5f:c2:9a:67:67:af:76:
6b:72:0d:7f:92:4c:e8:0c:f4:be:6b:80:27:86:8e:d9:22:9a:
c8:31:1a:19:45:da:02:7e:28:38:56:18:79:45:36:e5:07:85:
01:b4:4c:8d:93:35:1c:d0:a0:33:75:30:f6:cd:a6:7b:cf:4c:
75:cd:0b:1b:f8:4a:bb:d7:eb:28:73:85:66:69:3f:82:65:76:
23:52:2a:3b:2c:62:b6:b0:0b:2b:b0:1a:19:be:ab:8f:bf:e1:
7f:31:29:5e:82:5e:60:87:b9:14:f9:e8:ba:9b:cd:f6:57:39:
56:80:d9:32:33:ae:c0:8e:47:24:9d:0f:06:fb:c7:cb:27:b3:
41:19:16:32:20:f3:6b:9e:9e:1c:b2:67:62:4c:ef:7e:02:ab:
9d:55:7c:2b:7f:4e:30:cb:95:aa:b4:d2:54:30:dc:fa:94:ac:
5b:74:9d:8e:c6:08:a6:55:e0:4d:73:b1:b8:c3:4e:11:9c:fe:
40:ae:03:c8:d7:47:25:67:d2:51:28:51:eb:db:53:25:41:de:
fa:04:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:49 2026 by rpki-client