
$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier: T0Qa1/5TjcMTvBWYHK4fF1m2U/2qqHHXCi2oheM83lE=
Subject key identifier: 1A:B4:27:16:89:51:C4:7B:61:C6:D8:59:25:90:90:85:7E:09:E0:CA
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial: 06AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number: 06A6
Signing time: Tue 24 Mar 2026 22:07:12 +0000
Manifest this update: Tue 24 Mar 2026 22:07:12 +0000
Manifest next update: Tue 31 Mar 2026 22:07:12 +0000
Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: 5MiaGDoNeoUOTXxBzBTrRRxNGHqFZRcOlEFQMLHBHok=)
2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: CJxCZ91gQ/TkNwvCeFeEgqG0eXQ29QCZ4qulq2Vzv/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Validity
Not Before: Mar 24 22:07:12 2026 GMT
Not After : Mar 31 22:07:12 2026 GMT
Subject: CN=69c30b10-26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:4b:3e:5e:fe:0b:2b:46:d9:6f:ba:11:11:
f2:c5:99:8b:76:6e:41:f8:e8:d6:1d:c8:6f:a1:16:
df:b6:9f:09:11:ba:87:b3:64:6a:2a:64:71:ff:c3:
23:9e:f5:28:c1:75:b9:db:5b:2f:e4:68:44:ae:a1:
88:d2:0e:31:23:31:c1:f0:24:5c:86:30:b7:0f:b1:
e5:99:ac:45:2e:17:43:03:73:ab:4f:8a:94:2b:c3:
5e:bf:7a:5a:06:fc:75:a8:4d:c8:72:2f:38:06:08:
09:70:48:16:f4:16:40:6d:7b:c8:1a:9f:f1:c6:9a:
e1:d5:df:bb:8b:39:95:1b:cb:56:dc:3e:9f:4f:d9:
82:38:95:49:27:4b:8b:a3:b0:b1:db:0f:f6:6f:b7:
e8:81:4c:33:55:c5:56:98:db:92:99:0a:c3:56:55:
9a:a1:8b:c1:c2:24:15:77:39:04:0f:0e:4b:1d:3e:
98:1c:90:a4:00:e8:29:8a:b4:99:cf:df:92:f1:f3:
26:b0:ee:90:06:c1:fe:7a:ba:c7:d3:fe:66:0b:f0:
79:e9:0b:cc:f3:08:49:fe:d4:05:43:5e:d1:7c:37:
06:e5:0b:cc:a0:ab:eb:97:91:68:a0:42:a7:cd:9d:
d2:f7:0c:dd:97:4a:2c:7d:75:5d:e1:31:16:a9:49:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:27:16:89:51:C4:7B:61:C6:D8:59:25:90:90:85:7E:09:E0:CA
X509v3 Authority Key Identifier:
keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:c9:9e:4c:a1:c5:9e:82:4d:b5:c2:c9:ab:b4:5e:6a:9b:
f0:cf:50:bc:f2:da:8f:e7:10:82:3e:ae:d4:05:87:fc:b5:6a:
43:c4:70:e5:b1:93:7b:fb:9d:07:ef:69:02:3b:b6:43:6e:88:
1d:9a:c9:3e:73:55:94:09:56:3d:24:72:69:a5:7d:d6:d3:9b:
a0:b0:40:d0:f3:dc:65:5e:68:74:e1:05:34:7e:be:bc:a3:e7:
b5:9c:e0:81:c9:5a:b2:e6:44:c7:5a:d8:b8:94:bf:b3:01:3a:
4c:fe:2d:5f:ba:2f:20:84:02:4b:d7:3f:3c:25:a7:07:45:d7:
37:1b:e1:37:67:48:05:63:6d:5b:22:2e:c7:9f:0a:cd:93:9a:
8e:97:03:d4:18:f2:ed:50:4c:3d:72:8e:0b:87:08:ad:5f:1d:
8c:74:9f:d6:65:b1:86:3a:ed:4f:3f:8b:a7:f8:a7:14:51:3a:
7d:8b:d0:04:b8:3a:3b:f2:5e:4c:e1:a6:16:80:9d:39:63:df:
c4:ea:e8:a2:49:1c:99:28:34:0d:5c:50:81:56:40:51:e5:a2:
cc:b6:f5:f3:8e:9b:94:fa:db:92:99:cb:4a:4e:6e:7b:87:0d:
54:6b:99:5d:88:90:10:0d:2a:b3:14:c9:2d:e4:29:fb:dc:fb:
dc:64:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:21 2026 by rpki-client