
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json)
Hash identifier: PVL5G0wrwEnHtfxQ5fAgqM416JFVfmbHYEKP+E7Ganw=
Subject key identifier: 4C:B0:F1:29:A3:3B:26:D6:FA:B1:CF:53:42:CF:45:4B:2F:B0:5C:E7
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
Manifest number: 01F0
Signing time: Wed 25 Mar 2026 02:43:15 +0000
Manifest this update: Wed 25 Mar 2026 02:43:15 +0000
Manifest next update: Wed 01 Apr 2026 02:43:15 +0000
Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: 4QvS9oP/kxkvc17j3Upkf5Bbt9N4QLcGl0Mp1PKglpo=)
2: D1B29B22765011F0BCBD414BC4F9AE02.roa (hash: 3KENrC5WrRZRPFGx9/gzXu8N7uPLfOfzWj8eTs8V+0A=)
3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: Qw602Sckd2/N9jm6ruJ1XGTkVVOUhHXyrZbE5W34mKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Mar 25 02:43:15 2026 GMT
Not After : Apr 1 02:43:15 2026 GMT
Subject: CN=69c34bc3-6a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:26:06:4a:24:1f:cb:fe:56:c0:15:b3:c0:
86:ca:88:85:af:03:9f:c4:07:bf:75:1d:e0:37:57:
e8:b1:35:ff:88:41:90:78:83:1b:aa:56:b1:9d:f4:
54:3f:69:fa:55:c6:d6:d3:d7:e9:fc:95:90:f3:83:
a4:b9:ba:6c:3a:07:22:fa:29:66:13:65:0f:1b:ff:
4b:0a:58:8a:53:8c:cb:c7:df:e4:29:9d:b2:08:e0:
ff:32:92:fc:06:d5:07:a9:4f:05:4a:b6:57:4a:91:
2f:80:44:d6:4b:51:3c:c2:28:2f:63:07:48:4b:6e:
ae:41:2e:95:bd:f9:4f:86:8b:0c:6c:f5:75:70:af:
9a:9e:3f:7c:1c:fa:09:c2:6d:d9:c3:89:80:1f:13:
3b:6f:b5:92:00:37:8b:0a:32:09:e5:6a:3a:a4:54:
d2:95:4b:31:da:7f:68:1b:c7:5b:1a:36:08:45:e2:
a8:3b:7c:7a:45:02:c2:a2:c4:32:b4:bc:0d:6c:da:
62:f7:04:92:b3:11:ca:70:f4:1b:6e:d2:03:25:cf:
02:d0:5b:36:0e:30:b3:66:e3:bc:6c:ff:4d:72:06:
61:63:e0:d4:c2:44:7f:b4:11:d3:1e:af:d6:8c:8c:
a1:21:49:9d:6e:32:d8:50:1a:77:ff:d5:c2:aa:d9:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:F1:29:A3:3B:26:D6:FA:B1:CF:53:42:CF:45:4B:2F:B0:5C:E7
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:65:0b:04:04:a3:cc:c7:0e:d0:2c:4a:b8:2f:59:d1:e8:
3b:a5:18:5d:12:f8:80:24:3c:40:66:72:de:bf:3b:cb:43:9a:
91:c3:12:65:e0:70:57:dd:68:3e:24:95:34:09:b1:2d:fb:da:
3f:55:c4:33:4d:f9:8a:25:26:8c:53:41:b6:76:91:72:4c:ae:
d5:cd:df:f7:d4:24:ff:54:b7:f5:f5:12:f7:17:02:4a:5e:9a:
4a:38:ca:56:14:d8:ee:a5:aa:8c:31:bb:43:92:bf:27:ca:35:
48:97:1a:24:87:c6:68:f3:e8:77:55:94:60:69:fe:61:48:a9:
d5:d2:b7:32:ed:40:d4:cb:72:0c:84:e0:39:be:d9:0f:1c:60:
d0:88:8b:ea:29:22:3c:43:fd:6e:18:98:c8:1b:ab:9c:a8:b4:
e8:84:71:24:06:20:42:ac:16:ac:ca:c5:d3:e3:95:79:a6:c9:
f1:07:78:3a:43:3f:e2:7a:f9:a5:80:f8:a0:e1:41:52:64:39:
b6:99:6c:24:bc:02:70:d1:7e:06:94:05:41:41:3a:34:c6:1c:
6a:96:47:e6:ba:69:c1:7f:51:6d:84:f3:ba:f8:83:1e:87:2c:
6a:b4:b4:cf:0c:16:e0:f4:bb:b6:19:00:5a:01:d7:e5:24:ac:
b1:4c:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:40 2026 by rpki-client