
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json)
Hash identifier: UZ+QawXaNn6CHpjnhcx9w97DaJMwzuom1kaFyZVyu3c=
Subject key identifier: 6E:3C:2B:AE:4A:8C:8A:8D:BF:14:84:BE:3A:9B:6D:40:5C:A1:B1:78
Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
Manifest number: 013B
Signing time: Fri 25 Sep 2026 05:34:31 +0000
Manifest this update: Fri 25 Sep 2026 05:34:31 +0000
Manifest next update: Fri 02 Oct 2026 05:34:31 +0000
Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: jmLQwW6nRebqdtSKXzW2rnUFiahc3NIVuFFFVkNwR6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Validity
Not Before: Sep 25 05:34:31 2026 GMT
Not After : Oct 2 05:34:31 2026 GMT
Subject: CN=6ab607e7-6b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:38:14:7a:bd:1a:9a:9f:cf:e1:b4:a1:1a:
b6:68:d4:e2:7d:68:8d:65:57:de:8e:da:c3:75:4c:
04:0f:56:c6:c2:dd:fa:13:16:95:7a:c6:11:b3:f9:
a8:ea:95:f4:a1:8e:6b:2e:43:4d:cb:28:41:25:22:
7a:cb:9a:dc:a0:5f:74:d2:51:15:f7:46:82:eb:c2:
59:18:44:f3:aa:29:66:bc:81:ed:ed:fe:20:b0:3c:
0e:61:6a:d5:81:b6:14:1f:8b:ed:2a:c8:1c:1b:de:
64:65:1d:b5:74:a9:11:22:1b:d9:b8:34:83:9b:28:
9d:89:c0:7c:13:26:da:86:79:a9:33:9d:96:51:a6:
d2:12:30:2b:1e:cc:7b:74:ba:d0:84:75:ec:9f:90:
f6:19:3a:8b:2a:51:3b:a6:cc:0e:25:88:af:70:bc:
e9:af:b8:dd:11:a0:40:20:f2:f1:a2:74:4d:cc:98:
b1:11:78:c2:af:03:84:ea:c8:34:5f:74:f0:34:0e:
1b:12:5e:b1:29:d3:28:0c:4a:eb:4b:17:8a:0d:91:
12:65:6a:38:be:9c:23:43:a4:a8:de:eb:40:67:86:
3d:2a:bc:e6:86:93:ee:06:4c:c3:9f:cf:55:44:ea:
68:2d:2b:f1:f9:d3:32:65:2d:3a:64:62:c3:3c:3d:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:2B:AE:4A:8C:8A:8D:BF:14:84:BE:3A:9B:6D:40:5C:A1:B1:78
X509v3 Authority Key Identifier:
keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c7:29:dd:02:ad:c7:b5:97:18:00:69:65:ca:33:5c:19:a5:
c1:09:1b:67:e1:f4:3e:79:6f:f4:a8:f9:0e:56:d3:6b:64:1b:
39:e9:73:a8:ef:6e:88:7a:ea:8a:3e:05:41:7e:90:4d:41:0d:
2b:44:bb:46:82:a1:90:96:bd:1e:03:d5:5b:45:51:80:ff:fa:
c2:0b:83:df:6e:e8:1a:d0:91:d0:5d:6e:f1:fc:b3:7a:a6:15:
b6:4a:a7:dd:b2:d7:65:d3:39:0e:fd:35:f9:7c:97:fe:c0:78:
51:b8:3a:5d:9b:04:ba:2e:0b:6e:d8:b6:a9:4d:f9:e0:f7:62:
79:91:b7:f3:0a:ff:73:16:5c:27:fb:2c:e8:63:0d:f8:58:e5:
48:26:4a:f3:c9:ad:68:5d:70:de:45:fc:b8:27:77:27:c8:3c:
99:b1:f9:2d:b7:e6:2b:1b:b3:16:fd:dc:76:89:86:5b:1c:e8:
95:b4:b4:e4:96:47:6b:c8:c8:a7:a2:b0:2b:f3:d2:e4:77:b6:
23:f2:a8:3a:93:d8:15:f6:db:71:cf:28:0c:86:b8:eb:41:e4:
08:14:9c:71:91:04:dd:04:ba:0a:b1:a4:05:db:14:15:6d:54:
f3:7a:74:82:5a:ed:a5:d1:e1:63:04:20:be:a4:5a:e0:a4:fc:
c2:db:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:21:45 2026 by rpki-client