
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier: cFOg+P3fI5N/g3yRGcjllt+0mNuwzCgLjR47himNgSs=
Subject key identifier: 0C:B3:7D:5E:A2:A3:1D:87:B1:02:05:27:20:A5:5A:3D:2E:52:18:D9
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial: 0F78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number: 0F6B
Signing time: Wed 22 Jul 2026 17:42:04 +0000
Manifest this update: Wed 22 Jul 2026 17:42:04 +0000
Manifest next update: Wed 29 Jul 2026 17:42:04 +0000
Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: Mg2cvL2JXibgl2kaAzc8LwPVrjzLVTbnAqWCx0doosA=)
2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: on6AtAQDJPoil+F6Z95IgUqRZ62ucuYmOFjMm5FOGeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3960 (0xf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Validity
Not Before: Jul 22 17:42:04 2026 GMT
Not After : Jul 29 17:42:04 2026 GMT
Subject: CN=6a6100ec-41e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:24:57:1c:7a:1c:f3:09:ff:ef:84:8b:86:
da:c6:18:e0:a1:c5:2f:51:d9:49:7e:0b:db:03:ba:
0d:b5:d9:fe:80:63:4c:57:31:8e:db:2d:1c:05:74:
b7:f9:32:e5:c9:77:9f:7a:ab:52:2c:e0:67:aa:a0:
4b:ad:18:50:a4:07:ee:59:32:25:58:75:da:66:eb:
8b:bf:d5:cb:b8:4e:ba:c0:f0:f5:19:41:fa:bb:1f:
26:7d:4b:08:2f:5b:9a:16:80:d4:6e:8c:d5:ef:d8:
2e:88:dd:80:21:be:50:f8:5c:a9:ad:7b:cf:62:c2:
6b:99:cd:3e:be:12:bf:70:e6:b9:43:03:4d:3d:90:
6e:91:5d:b8:91:98:5a:e4:d7:83:3c:99:6b:dc:24:
30:7c:57:f5:d1:f6:c8:c7:94:5d:8d:2f:45:57:20:
13:4d:81:64:57:eb:76:0b:f1:0e:86:10:28:02:15:
03:9c:60:b2:b9:aa:c0:a0:f3:61:9b:8a:d3:e1:90:
be:a8:f4:bb:1e:34:29:60:53:6b:95:47:2f:4e:47:
3e:c5:04:88:a3:39:38:cb:96:2b:27:51:b5:01:f8:
94:bb:09:b6:e9:a0:3f:cf:68:ad:f2:9a:e6:1e:36:
c7:4b:fd:ad:9d:43:df:02:bd:a2:30:55:0c:3f:68:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:7D:5E:A2:A3:1D:87:B1:02:05:27:20:A5:5A:3D:2E:52:18:D9
X509v3 Authority Key Identifier:
keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:1b:ab:4a:b8:43:69:c4:6f:50:4a:5a:1c:fa:49:b4:d3:
23:7e:6d:5a:c3:3a:da:6d:f2:d2:bc:a6:b6:8b:c4:c2:b0:e4:
ac:1e:86:c2:03:40:c4:95:84:0d:0a:fe:cb:44:18:82:47:df:
6e:cc:f7:10:b5:c4:8a:b1:9c:1b:c3:dd:4d:75:ca:87:ec:e2:
35:c2:52:3c:6f:2b:a4:17:31:de:f4:ee:09:05:01:8c:e1:76:
b8:6b:13:c1:97:f7:96:a3:22:d0:87:5e:c0:1e:51:05:3a:99:
d2:61:e3:5e:c6:57:40:f7:cd:ab:79:f4:46:e8:9d:c6:14:af:
b1:88:e8:8f:54:82:80:18:5d:7e:4d:83:51:6a:51:6e:c5:67:
ff:f9:d1:c0:81:1e:76:62:50:a2:e3:71:51:bb:ce:2e:ce:e7:
49:88:86:03:ca:7a:64:4a:85:6b:ca:3d:41:fb:70:09:e7:09:
8d:0e:06:66:bd:83:93:97:2e:d9:2d:c8:b5:23:18:3b:5f:ea:
57:5b:fb:d0:0f:95:3a:07:52:bc:9e:3c:75:37:1e:4f:a9:0d:
89:6e:5d:1d:03:6c:c5:86:8e:13:05:31:8a:0e:be:18:af:a9:
23:63:09:4a:87:75:69:b7:d2:b2:f7:af:c7:b0:4d:1a:76:cb:
b8:dd:35:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My
NjIzRDk0QTMwHhcNMjYwNzIyMTc0MjA0WhcNMjYwNzI5MTc0MjA0WjAYMRYwFAYD
VQQDEw02YTYxMDBlYy00MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyIkkVxx6HPMJ/++Ei4baxhjgocUvUdlJfgvbA7oNtdn+gGNMVzGO2y0cBXS3
+TLlyXefeqtSLOBnqqBLrRhQpAfuWTIlWHXaZuuLv9XLuE66wPD1GUH6ux8mfUsI
L1uaFoDUbozV79guiN2AIb5Q+FyprXvPYsJrmc0+vhK/cOa5QwNNPZBukV24kZha
5NeDPJlr3CQwfFf10fbIx5RdjS9FVyATTYFkV+t2C/EOhhAoAhUDnGCyuarAoPNh
m4rT4ZC+qPS7HjQpYFNrlUcvTkc+xQSIozk4y5YrJ1G1AfiUuwm26aA/z2it8prm
HjbHS/2tnUPfAr2iMFUMP2iRFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyzfV6i
ox2HsQIFJyClWj0uUhjZMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx
RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm
cml5NXRGdVFpY3dtSTlsS00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD7cbq0q4Q2nEb1BKWhz6SbTTI35tWsM62m3y0rymtovEwrDkrB6GwgNAxJWE
DQr+y0QYgkffbsz3ELXEirGcG8PdTXXKh+ziNcJSPG8rpBcx3vTuCQUBjOF2uGsT
wZf3lqMi0IdewB5RBTqZ0mHjXsZXQPfNq3n0RuidxhSvsYjoj1SCgBhdfk2DUWpR
bsVn//nRwIEedmJQouNxUbvOLs7nSYiGA8p6ZEqFa8o9QftwCecJjQ4GZr2Dk5cu
2S3ItSMYO1/qV1v70A+VOgdSvJ48dTceT6kNiW5dHQNsxYaOEwUxig6+GK+pI2MJ
Sod1abfSsvevx7BNGnbLuN01Aw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:02:20 2026 by rpki-client