
$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json)
Hash identifier: 4bypMJDRI/Nl/VxFgTiGgjXf4ZbjHrrDq3iMHxyRXJ8=
Subject key identifier: 5F:61:C8:BD:AE:2A:B7:43:1C:ED:44:B8:C0:74:CC:A4:0D:37:8D:2D
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
Manifest number: 022B
Signing time: Wed 25 Mar 2026 02:05:36 +0000
Manifest this update: Wed 25 Mar 2026 02:05:35 +0000
Manifest next update: Wed 01 Apr 2026 02:05:35 +0000
Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: Zf2/QClmolDI06/L1WzL/8q+q/yEEv0+DNVUJSGWTbE=)
2: C9E93DD2266E11F187DDE8D8AB833773.roa (hash: s8W6TqujPjuIn1Hph7kRfPdwxSDhp2e0AroV4FJ3gi0=)
3: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: Xp7KaekHk3CUTswk4L6T+ALf1W9IbKfjhj0abkYa7+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Validity
Not Before: Mar 25 02:05:35 2026 GMT
Not After : Apr 1 02:05:35 2026 GMT
Subject: CN=69c342f0-f78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:34:62:1c:ed:9f:93:2e:c6:34:59:1c:7d:
7e:fc:34:82:09:9c:10:1d:36:60:11:64:3a:73:0c:
57:36:27:ad:b6:1a:12:c1:47:2d:88:37:14:12:20:
bc:7c:fe:3c:39:f5:d7:5f:2a:ee:1d:b5:20:46:ca:
ff:b4:a0:2e:7c:43:17:23:6a:e6:75:b8:79:bc:4f:
d1:d8:39:48:5d:05:55:48:15:b4:50:f7:92:33:1a:
57:10:77:43:ca:2c:2f:65:d5:0d:ed:50:24:88:e8:
4a:9b:9a:35:da:ba:8a:2b:7b:e0:c9:6c:ca:6a:87:
c5:2f:d3:3c:71:33:cd:ab:bd:62:75:2e:ff:7c:4e:
0b:47:09:a8:59:b9:49:6e:68:f5:7e:c5:31:d7:53:
cc:44:55:e0:8f:82:66:a1:ae:36:dc:dc:eb:f9:7b:
ef:3f:0e:cb:14:d5:c6:b4:ef:38:52:27:88:d6:b2:
99:d2:dc:30:4b:56:16:b2:0e:0d:47:1e:39:6f:fb:
70:b9:78:1f:54:37:54:a3:38:76:1f:2d:f6:e4:46:
f6:57:0c:7d:bd:39:f5:c3:b0:74:7a:4a:1a:86:71:
7d:d9:e2:f4:d2:14:14:09:04:31:3c:d2:85:3d:aa:
a1:f0:dc:5f:97:ee:92:89:28:f3:07:e8:9f:a2:b2:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:C8:BD:AE:2A:B7:43:1C:ED:44:B8:C0:74:CC:A4:0D:37:8D:2D
X509v3 Authority Key Identifier:
keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:36:f6:19:6b:db:c3:32:95:3c:fa:04:20:f5:0d:51:72:
12:f1:2d:7e:4c:cc:83:40:5c:da:ae:cd:33:37:61:01:59:b8:
67:a8:66:ae:c7:a1:5a:14:7a:bf:03:d9:ff:19:a7:62:ae:9c:
7e:97:ec:32:57:b5:ea:2b:ff:d8:e4:30:5f:6e:15:62:1f:52:
9c:22:e4:92:b9:17:36:2e:ab:a7:4c:bc:fd:99:7f:8d:49:03:
d5:d1:60:74:b3:6d:10:9d:b2:aa:4e:04:77:48:d3:be:1d:4c:
62:ee:00:42:8f:88:b5:b1:21:e1:f1:18:0f:76:86:e5:12:45:
69:c0:cb:77:08:82:c6:36:1f:4f:72:0d:81:4d:0e:83:68:42:
eb:ac:2a:0b:24:8c:cb:a4:cb:b8:83:e2:ba:de:f6:da:a2:5f:
01:f1:92:0c:aa:3e:52:45:0d:48:a4:1c:9a:56:d2:ae:c0:c6:
5c:c8:71:5f:4d:d5:cb:5d:11:6c:43:05:f5:90:26:7b:fc:72:
d6:33:b0:56:63:4b:ad:cf:81:d4:1d:a8:eb:28:ea:19:eb:b3:
a0:ff:9d:f7:01:26:0c:9b:51:70:be:5d:58:1d:21:ce:76:29:
f9:b1:e3:ad:60:02:8d:96:4f:c3:e0:54:65:1e:25:38:87:33:
f5:c5:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:21 2026 by rpki-client