
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: ffUyZAvWs/+0NejcCcwpHSqccSwDGzwE7gadaiY5ztE=
Subject key identifier: 32:BA:B7:55:6B:D8:6C:F0:F5:2A:15:89:2D:7A:20:29:86:82:6D:34
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: C4
Signing time: Fri 27 Mar 2026 06:29:05 +0000
Manifest this update: Fri 27 Mar 2026 06:29:04 +0000
Manifest next update: Fri 03 Apr 2026 06:29:04 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: +5eAXN28es9UdxfHHbuAuUHhLIuEjCVp3WFOghS51iU=)
2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: 53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=)
3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: 2KR0aKOX1uJs95laOd7AQOJL2qLcBa6RhZbXIKQSp/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Mar 27 06:29:04 2026 GMT
Not After : Apr 3 06:29:04 2026 GMT
Subject: CN=69c623b0-b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:41:23:ea:3f:5b:71:86:ba:82:41:ed:8f:
e9:e4:99:2b:48:ea:d3:6c:b1:4e:13:4f:ad:00:02:
d7:c2:54:dc:03:ff:b9:8b:8d:40:ad:da:aa:b3:c6:
6a:a3:ee:37:2e:34:98:e3:a0:6f:d8:93:21:0f:0f:
8f:94:c9:6f:34:16:a4:a0:f0:01:a1:0e:1f:8d:63:
eb:29:cd:e5:39:1f:e2:d7:f5:5d:ef:fd:dd:e4:74:
01:be:bc:5a:ce:81:fe:c9:57:d0:ac:32:af:ce:6c:
05:b2:83:6b:7c:ed:a8:d0:7a:ce:c1:e4:c2:ed:cc:
35:54:7b:49:eb:0f:b1:4c:eb:5b:66:81:2a:96:cd:
8e:68:0c:9e:3c:71:ac:a6:b9:2b:db:04:ac:b5:2b:
c8:54:cb:a1:05:5d:4d:52:ca:53:32:e9:05:b9:bb:
04:86:f9:42:c0:ac:c7:3a:68:dd:ac:f5:0c:54:c0:
46:fe:c6:9b:8c:64:90:1e:db:06:27:54:1f:47:fb:
8b:ec:0c:e8:3c:61:48:57:12:48:93:0e:f6:db:00:
15:3c:f2:83:d6:96:89:d0:e3:a5:87:9d:4f:16:c3:
34:2e:a9:6e:79:05:c0:98:ab:6a:59:87:fa:34:6b:
51:37:02:84:59:d4:49:3f:f2:c0:64:0c:bd:69:f9:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:B7:55:6B:D8:6C:F0:F5:2A:15:89:2D:7A:20:29:86:82:6D:34
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:ea:5a:e2:55:31:43:80:fe:03:46:07:25:cb:8e:c7:45:
29:10:1d:0c:f2:6f:dd:1a:a3:df:d4:a6:43:21:6d:56:75:98:
66:ed:7f:7d:f8:fb:c2:f3:92:99:96:4c:cf:b8:82:ad:9f:fb:
3b:ef:08:53:b0:b3:e5:76:ae:bd:fa:4f:c6:0e:9c:bd:fe:84:
b0:3c:b4:cf:59:37:f4:f4:c1:a0:dc:5d:d9:e9:eb:85:05:7a:
05:95:4f:54:18:95:3b:62:c6:3b:0f:28:99:81:fe:75:a0:cc:
db:50:26:b7:fd:7c:d3:6b:5a:4e:e7:9d:63:77:ef:c7:25:9b:
43:47:cd:a5:e2:f3:e6:f7:bf:bd:4b:62:2d:7d:f4:69:22:38:
a1:4c:a1:3b:b0:bc:d7:01:81:f8:16:a6:e5:ef:ed:20:5f:12:
9f:f7:fb:bc:4c:aa:bd:61:7f:6e:b0:48:cd:60:b6:9f:04:30:
da:74:b5:a2:bf:bb:39:fb:da:c3:ae:a3:87:aa:12:19:6a:c2:
4d:ab:af:53:a6:e3:91:35:90:24:23:5a:57:5b:aa:8c:16:cd:
c2:a3:13:f3:c3:0a:09:44:2d:7b:03:b8:c3:98:74:3a:f6:97:
fb:e0:8e:f1:71:24:38:dd:25:1b:7b:8a:70:26:a5:55:78:93:
ab:8d:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:16 2026 by rpki-client