
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier: vV2EK87hz8TAvlEmn5cETinOcXUX30c/07AyIwWfLZQ=
Subject key identifier: 3B:75:68:AE:EF:96:EB:BC:F0:B5:31:D2:F3:BE:0D:C7:CF:80:DB:99
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number: 0245
Signing time: Wed 13 May 2026 02:33:27 +0000
Manifest this update: Wed 13 May 2026 02:33:26 +0000
Manifest next update: Wed 20 May 2026 02:33:26 +0000
Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: yogr4okV957JY6GP7xZRNVaWWOcB0cHuEAeRsjm7okg=)
2: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: DS+0KFmcBE9DXzoqd+clX1iffNG/TJDheFzOy8o3k5w=)
3: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: hCwx0DM5AZe2LmvT1nwHBj2xXRoQx2u9h5+OYamek6Q=)
4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: jCFeHTOEaf/tAa5ix+hQ/UsUVIVpLzQ1m9SstZe2Zt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: May 13 02:33:26 2026 GMT
Not After : May 20 02:33:26 2026 GMT
Subject: CN=6a03e2f7-ffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:ae:6f:c6:a5:0b:83:da:c9:6f:e4:6f:97:
1e:62:cb:37:16:81:53:a9:13:e4:70:0e:49:fb:06:
b3:26:f5:d5:50:b3:0c:c0:9c:e6:2f:3c:2c:f5:c8:
77:ba:e0:db:42:62:a6:06:b1:3f:96:a8:6e:c3:4c:
cc:94:76:45:49:e9:06:52:ae:a8:b7:66:25:1b:4e:
63:68:14:0e:9c:9f:68:f9:fa:91:6f:ba:ab:3c:c7:
31:88:78:57:0b:93:53:16:43:a5:fb:b4:e2:6f:5e:
60:e0:f4:93:a5:bc:10:b6:cd:8d:84:2d:73:0a:81:
49:45:4c:bf:07:89:d5:83:9b:20:51:cd:4f:f2:ac:
7f:b2:29:26:54:d3:09:c5:4a:a2:9f:b5:10:c4:3e:
e8:f3:9a:a7:6e:96:b4:68:e9:6a:e1:22:9b:7a:93:
ed:d6:32:d8:8d:96:07:9b:8a:3e:a0:80:10:90:e7:
30:89:71:1c:21:f9:c0:04:7f:9b:06:6f:de:cf:95:
fc:89:bb:49:10:db:21:2f:f2:1e:b5:56:f3:d7:f1:
1e:b7:2d:f1:0f:e5:d9:90:a9:4a:10:71:0a:4e:f9:
9c:2c:36:71:09:53:6b:a3:39:1f:16:b1:09:65:fe:
67:78:80:39:c0:d0:61:8a:57:33:c9:19:09:05:a2:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:68:AE:EF:96:EB:BC:F0:B5:31:D2:F3:BE:0D:C7:CF:80:DB:99
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:98:fe:db:60:3a:9c:32:55:0f:4b:9e:12:7f:6a:60:d0:
b3:a2:ba:cf:bc:f5:59:1c:0a:e4:fd:63:81:29:9f:cc:ca:78:
fc:c6:97:8c:37:3b:29:12:cd:65:c8:0c:a4:df:73:6a:9d:20:
3a:20:3e:64:50:37:df:1f:02:d0:2d:0f:8b:a7:25:0f:21:23:
26:86:f0:44:df:1a:a8:4c:87:73:12:c7:17:11:9d:2e:97:c6:
fa:b8:46:25:1e:66:44:a0:55:25:c4:e7:2c:79:2d:37:66:35:
04:8a:9e:e4:83:1e:30:36:ef:11:ba:94:d6:04:f2:7a:98:46:
cb:ff:8f:07:87:3e:38:f3:e1:91:af:ad:57:bc:9a:43:07:f4:
ab:a8:b3:00:22:2f:13:a3:f9:46:38:f2:b3:ff:84:d8:db:17:
fe:c9:b6:de:f1:71:f8:52:81:25:01:29:b2:ab:63:5e:67:82:
82:25:82:09:a7:a6:00:f2:1c:e8:dd:8c:9b:9c:24:19:23:7b:
17:81:12:c4:22:f1:01:e3:42:ec:6d:3c:33:6c:7c:94:54:d7:
35:28:b1:17:af:b5:d6:d1:5c:db:1e:42:74:15:d1:27:55:5e:
6d:56:e9:8c:d7:d2:a9:c1:08:be:ee:ac:c2:a7:d0:9e:4a:1c:
b7:b5:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:16:08 2026 by rpki-client